Coloktoto takes your privacy seriously. This policy explains transparently how we collect, use, store, and protect your personal data as a member of our platform, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
🔐 Your personal data is protected by 256-bit SSL — Coloktoto does not sell or share your data to third parties for marketing purposes.
Register NowSix core principles that form the foundation of how we protect your data
All data transmitted between your device and Coloktoto servers is protected by 256-bit SSL encryption — the same standard used by Malaysian banking and financial institutions such as Maybank and CIMB. No third party can intercept or read your data while in transit.
Coloktoto does not sell, rent, or share your personal information with any third party for marketing or commercial purposes without your explicit consent. Your data is used solely for the purposes stated in this policy and nothing else.
All data processing activities at coloktoto are carried out in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal data protection officer responsible for ensuring ongoing compliance with applicable privacy laws.
As a Coloktoto member, you have the right to access, correct, and request deletion of your personal data at any time. Such requests can be submitted via email to support@coloktoto.top and will be processed within 14 business days.
Your data is stored on servers protected by strict access controls, multi-layered firewalls, and intrusion detection systems. Regular data backups are performed to ensure the continuity and integrity of your information.
In the event of any security incident involving the personal data of Coloktoto members, we are committed to notifying affected members within a reasonable timeframe and taking immediate steps to mitigate the impact of any such breach.
Coloktoto ("we", "the platform", or "Coloktoto") is committed to protecting the privacy of all members and users of our platform. This Privacy Policy explains transparently how Coloktoto collects, uses, stores, discloses, and protects your personal information when you register, access, or use any of the services provided through the Coloktoto website and mobile platform.
This policy is drawn up in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. coloktoto complies with all data protection principles set out under the PDPA, including the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, and the Access Principle.
By registering an account with Coloktoto or continuing to use our platform after this policy has been updated, you consent to the collection and processing of your personal data as described in this document. If you do not agree with any part of this policy, please stop using the Coloktoto platform and close your account by contacting our support team.
Important Note: This Privacy Policy was last updated on 1 January 2026. Members will be notified of any material changes via their registered email address or through a notice posted on the Coloktoto platform before the changes take effect.
Coloktoto collects two main categories of data from its members — data you provide directly when interacting with our platform, and data collected automatically through your use of the platform. Below is a detailed breakdown of each category:
| Data Category | Example | Mandatory? |
|---|---|---|
| Identity | Full name, phone number, email | Yes |
| KYC Verification | MyKad / Malaysian passport | Yes (for withdrawals) |
| Financial | E-Wallet details (TnG, DuitNow, GrabPay) | Yes (for transactions) |
| Platform Usage | Gaming history, betting records | Automatic |
| Technical | IP address, device type | Automatic |
Coloktoto collects your personal data through several different channels depending on how you interact with our platform. Understanding these channels helps you better understand and control your digital footprint while using Coloktoto.
The main data collection channels at Coloktoto are as follows:
Coloktoto processes your personal data only for legitimate, specific, and clearly defined purposes. We do not use your data for anything unrelated to the delivery of our platform services. Below is a full breakdown of those purposes:
Data Minimisation Principle: Coloktoto follows the principle of data minimisation — we only collect data that is strictly necessary for the stated purposes. We do not collect data that is excessive or irrelevant to the platform's operations and the delivery of services to you as a Coloktoto member.
Coloktoto does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is a core commitment we do not compromise on. However, in the course of operating the platform, there are certain situations where your data may be shared with specific parties as described below:
In all of the data-sharing scenarios described above, Coloktoto ensures that recipients adhere to appropriate data protection standards and use the shared data only for the specified purposes. Coloktoto is not responsible for the privacy practices of third parties that maintain their own independent privacy policies.
Coloktoto continually invests in robust security infrastructure to protect its members' personal data. We understand that player trust is our most valuable asset, and we take our responsibility to safeguard every piece of information you entrust to us very seriously.
The technical and organisational security measures we implement at Coloktoto are as follows:
Shared Responsibility: While Coloktoto takes all reasonable steps to protect your data, your account security also depends on your own actions. Please use a strong, unique password for your Coloktoto account, do not share your login credentials with anyone, and make sure you log out of your account when using a shared or public device.
Coloktoto uses cookies and similar technologies to enhance your experience on our platform, maintain your login session, understand how you use the platform, and ensure certain features function correctly. This section explains the types of cookies we use and how you can manage them.
You can manage cookie settings through your web browser preferences. Most browsers allow you to view, delete, and block cookies. Please note, however, that disabling essential cookies may prevent you from making full use of the Coloktoto platform, including the login function and bet processing.
As a Coloktoto member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Coloktoto respects and facilitates the exercise of these rights. The following is a summary of your rights:
You have the right to request and receive a copy of the personal data we hold about you. Data access requests will be processed within 14 working days.
You have the right to request correction of any inaccurate or incomplete personal data we hold. Updates can be made via your account settings or by contacting Coloktoto support.
You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose, subject to applicable legal retention requirements.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide any justification.
Under certain circumstances, you have the right to request that Coloktoto restrict how we process your data while a dispute is being resolved.
You have the right to receive the personal data you have provided to Coloktoto in a structured, machine-readable format, for transfer to another data controller if required.
To exercise any of the rights above, please submit your written request to Coloktoto via email at support@coloktoto.top, clearly stating the right you wish to exercise and providing sufficient information for us to identify your account. We will respond to your request within 14 business days of receiving a complete submission.
Please note that exceptions apply to the rights listed above. For example, we may be unable to delete certain data if retaining it is required for legal compliance, dispute resolution, or enforcement of our agreement with you. We will provide reasons if we are unable to fulfil a particular request.
Coloktoto does not retain your personal data for longer than is necessary for the purposes stated in this policy or as required by applicable Malaysian law. Data retention periods vary according to the type of data and the relevant legal or business requirements.
As a general guide, the following data retention periods apply at Coloktoto:
Coloktoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle our members' personal data. We are committed to being transparent about any changes we make.
When we make material amendments to this Privacy Policy — meaning changes that could significantly affect your privacy rights — we will:
For non-material amendments — such as typographical corrections, language clarifications, or changes that do not affect your rights — we may not issue a specific notice, but we will still update the revision date. We encourage you to review this page periodically to stay informed about how Coloktoto handles your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or how coloktoto handles your personal data, we encourage you to contact us directly. Our team is ready to assist and will endeavour to provide a thorough and satisfactory response as promptly as possible.
You can contact Coloktoto via:
We will endeavour to respond to all privacy-related enquiries within 14 business days of receipt. For more complex cases requiring deeper investigation, we will keep you informed of progress within that period and provide a more accurate estimated timeframe.
Complaints to the Authorities: If you are dissatisfied with how Coloktoto has handled your privacy enquiry or complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) or the relevant authority under PDPA 2010. However, we encourage you to contact Coloktoto first so that we may attempt to resolve any issues directly with you.
Concrete steps we take to protect your data and privacy
The same encryption standard used by Malaysian banking institutions, applied to all data in transit at Coloktoto.
All Coloktoto data processing is fully compliant with Malaysia's Personal Data Protection Act 2010.
A multi-layered intrusion detection system continuously monitors all activity across the Coloktoto platform.
Coloktoto does not sell or rent your personal data to third parties for their marketing purposes.
The Coloktoto platform undergoes regular security and compliance audits conducted by independent firms at fixed intervals.
Data access, correction, and deletion requests from Coloktoto members are processed within 14 business days.
The most frequently asked questions about privacy and data security on our platform
The usage data we collect is also applied to responsible gaming purposes — helping us identify members who may need support with their gaming habits. Coloktoto provides self-management tools including deposit limits, loss limits, session time limits, and self-exclusion, all of which can be activated from your account. This platform is intended for players aged 18 and above only.
If you or someone you know is experiencing issues related to gambling habits, please visit our Responsible Gaming us for information and support resources available in Malaysia.
For any enquiries, data rights requests, or to report a privacy concern relating to the Coloktoto platform, please contact us at support@coloktoto.top with the subject line "Privacy Enquiry". We operate 24 hours a day, 7 days a week, and will respond within 14 business days. To read the full Terms & Conditions of platform use, please visit the Terms & Conditions us.