Data Protection

To303 Privacy Policy – Member Personal Data Protection

Your privacy is more than a legal obligation for to303 — it is a responsibility we take seriously every day. This document clearly and transparently explains how we collect, use, store and protect your personal information.

Updated: January 2026  |  Bahasa Melayu  |  Malaysia PDPA Compliance

To303's Commitment to Your Privacy

Six core principles that shape to303's approach to protecting member personal data

Banking-Grade Encryption

All your personal data and financial transactions are protected with 256-bit SSL encryption. Sensitive information is stored on secure servers that cannot be accessed by external parties without authorisation.

No Sale of Data to Third Parties

To303 does not sell, rent, or disclose your personal information to third parties for marketing purposes. Your data belongs to you — it is not our business commodity.

Data Control in Your Hands

You can view, update, or request deletion of your personal data at any time through your account dashboard or by contacting the to303 support team directly.

Secure Data Storage

Member personal data is stored in an integrated server system with multi-layered protection. Database access is strictly limited to personnel who require it.

Data Protection Act Compliance

To303 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. All data processing is carried out within the legal framework established by Malaysian authorities.

Easy Unsubscribe Options

You can stop receiving marketing communications from to303 at any time. An unsubscribe option is available directly in every promotional email we send you.

Latest version: January 2026

This Privacy Policy ("Policy") describes how to303 ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the to303 platform at to303.vin. By registering or using our platform, you agree to the processing of your personal data as described in this Policy. If you do not agree, please stop using the platform and contact us to close your account.

1 Information We Collect

To303 collects your personal information through several channels when you register and use the platform. The type of information collected depends on how you interact with our services.

Data Category Example Information How It Is Collected
Identity Data Full name, date of birth, identity card or passport number Registration form, KYC process
Contact Data Email address, phone number Account registration, profile updates
Financial Data Bank account details, deposit and withdrawal transaction history Payment transactions, KYC processing
Technical Data IP address, device type, web browser, operating system Automatically during platform use
Usage Data Game history, bets placed, account activity logs Automatically during active sessions
Communication Data Support chat records, emails you have sent to us Interactions with the support team
We do not collect credit or debit card information directly. All payments are processed through certified third-party payment gateways and are subject to their own privacy policies.

2 How We Use Your Data

Collected information is used for legitimate and transparent purposes. to303 does not use your data for any purpose not stated in this Policy without obtaining your consent first.

  • Account management: Create, verify and manage your member account, including the KYC process required for withdrawals.
  • Transaction processing: Process deposits, withdrawals and any other financial transactions on the platform.
  • Security and fraud prevention: Identify and prevent fraudulent activity, money laundering or platform abuse.
  • Customer support: Respond to enquiries, resolve complaints and provide technical support to members.
  • Platform improvement: Analyse usage patterns to improve user experience, platform performance and functionality.
  • Service communications: Send important notifications relating to your account, security and policy updates.
  • Marketing (with consent): Send promotional information, bonus offers and platform updates — only where you have given your consent.
  • Legal compliance: Fulfil applicable legal obligations and regulatory requirements.

3 Legal Basis for Data Processing

To303 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are as follows:

  • Contract performance: Data processing necessary to provide to303 platform services to you as a registered member.
  • Legitimate interest: Process data for fraud prevention, platform security and service improvement — where our interests do not override your fundamental rights.
  • Legal obligation: Process data to comply with Malaysian legal requirements, including anti-money laundering (AML) and know your customer (KYC) obligations.
  • Consent: For certain marketing communications and analytical data usage, we rely on your explicit consent — which may be withdrawn at any time.
You have the right to withdraw consent for consent-based data processing at any time. Withdrawal of consent will not affect the validity of any processing carried out prior to withdrawal.

4 Information Sharing with Third Parties

To303 takes a strict approach to data sharing. We do not sell your personal information. However, there are limited situations where sharing data with third parties is necessary:

  • Payment service providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions — limited to information required for processing only.
  • KYC service providers: Third-party identity verification companies that assist us in verifying your documents and personal information during the KYC process.
  • Game service providers: Game software providers operating on the to303 platform receive the minimum technical data required for game operation.
  • Legal authorities: Law enforcement agencies or regulatory bodies when required by law or court order.
  • Professional advisors: Lawyers, accountants or auditors bound by confidentiality obligations in the course of their duties.

All third parties working with to303 are required to comply with data protection standards equivalent to or higher than those we apply ourselves.

Note: to303 will never ask for your account password via email, chat, or phone call. If you receive such a request claiming to be from to303, please report it to our support team immediately.

5 Cookies and Tracking Technologies

To303 uses cookies and similar tracking technologies to enhance your experience on the platform, analyze traffic, and ensure the security of your login sessions.

  • Essential cookies: Required for core platform operations including login session verification and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collect statistical data on how you use the platform — for example, the most frequently visited pages and time spent. This information is used for platform improvement.
  • Functionality cookies: Save your preferences such as language settings and display preferences to deliver a more personalised experience.
  • Analytics cookies: Helps us understand aggregate usage patterns without personally identifying individuals.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the to303 platform.

6 Data Storage and Security

The security of your personal data is a top priority at to303. We implement a range of technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

  • All stored personal data is protected with AES-256 encryption at rest and SSL/TLS encryption during data transfer.
  • Access to the member database is restricted to authorized personnel only, with a full audit log recorded for every access.
  • Our systems are monitored continuously 24 hours a day, 7 days a week to detect any suspicious activity or intrusion attempts.
  • Security testing and system audits are conducted periodically by independent third parties to ensure security standards remain up to date.
  • Personal data will be retained for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law — whichever is longer.
  • After the retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked to a specific individual.
While we take all reasonable steps to protect your data, no data transmission system over the internet can be guaranteed to be completely secure. We encourage you to use a strong and unique password for your to303 account.

7 Your Rights Regarding Personal Data

As a to303 member and an individual protected under Malaysia's PDPA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of all personal data we hold about you, including information on how and why it is used.

Right to Rectification

You can request correction of any inaccurate or incomplete personal data through your account profile settings or customer support.

Right to Erasure

You can request deletion of your personal data under certain circumstances, subject to our legal obligations to retain specific records.

Right to Restriction of Processing

You can request that we restrict the processing of your data in certain situations, such as while you are disputing the accuracy of the data in question.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider where applicable.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes, or where processing is based on our legitimate interests.

To exercise any of the above rights, contact the to303 support team via live chat available 24/7 or email your request to our support address. We will process your request within 30 calendar days.

8 Children's Data

The to303 platform is not directed at children or individuals under the age of 18. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account. Parents or guardians who suspect their child has registered on the to303 platform are encouraged to contact us immediately.

Age Warning: Online betting is prohibited for individuals under the age of 18. to303 performs age checks during registration and verifies age through the KYC process.

9 Changes to the Privacy Policy

To303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Changes will take effect immediately upon publication on the platform.

  • Any material amendments that significantly affect how we process your data will be communicated via email or in-platform notification at least 14 days before taking effect.
  • The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy currently in effect.
  • Continued use of the to303 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy.
  • We encourage you to review this page periodically to stay informed about how we protect your information.

10 Contact Us About Privacy

If you have any enquiries, concerns or complaints regarding how to303 handles your personal data, we are ready to listen and assist. Our privacy team can be reached through the following methods:

  • Live chat: Available 24 hours a day, 7 days a week via the chat button on the to303 platform.
  • Support email: [email protected] — for inquiries requiring a written response or involving document attachments.
  • Response time: We aim to respond to all privacy-related inquiries within 3 business days and to resolve data rights requests within 30 calendar days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body in your country of residence.

For more information about your rights and responsibilities as a to303 member, please also refer to the Terms and Conditions and Responsible Gaming us.

Your Privacy Is Protected. Now It's Time to Play.

To303 ensures your information is protected at all times. Register today and enjoy a safe, fair and enjoyable wagering experience alongside thousands of trusted members across Malaysia.

Bahasa Melayu