🔒 Bank-Grade Data Protection

Hondatoto Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

Your privacy is our priority. This policy transparently explains how hondatoto collects, uses, stores, and protects your personal information in accordance with Malaysian legal requirements.

Updated 1 January 2026 256-bit SSL Malaysia PDPA Compliance
256-bit
SSL Encryption
0
Sale of Data to Third Parties
10
Policy Sections
24/7
Security Monitoring

Bank-Grade Encryption

Security

All your personal data and transactions at hondatoto are protected with 256-bit SSL encryption – the same level of security used by Malaysia's major banking institutions such as Maybank and CIMB.

You're in Control of Your Data

User Rights

You have the right to access, correct, or request the deletion of your personal data at hondatoto at any time. We fully respect the privacy rights of every Malaysian member.

No Third-Party Data Sales

Transparency

Hondatoto has never and will never sell, rent or share members' personal data with any third party for marketing or commercial purposes without your explicit consent.

Malaysia PDPA Compliance

Legal

The hondatoto Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring all our data handling practices fully comply with local legal requirements.

Financial Information Confidentiality

Privacy

Your transaction details — including deposits made via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX — are encrypted and will never be disclosed to any external party without your consent.

Data Breach Notification

Transparency

In the event of any security incident involving your data, hondatoto is committed to notifying you within 72 hours and taking all necessary steps to minimise the impact.

Welcome to the hondatoto Privacy Policy page. We understand that when you register and use the hondatoto platform, you are entrusting us with important personal information. We take that trust seriously – not merely as a legal obligation, but as a moral responsibility to every Malaysian member who chooses hondatoto as their online entertainment platform.

This document clearly and transparently explains what data we collect, how it is used, who may access it, how long it is retained, and what rights you have over that data. The hondatoto Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Quick Summary: hondatoto collects only the data needed to operate our services safely. We do not sell your data to anyone. You may request to review, correct, or delete your data at any time. All information is protected with 256-bit SSL encryption.

1. Introduction & Scope of This Policy

This Privacy Policy applies to all users of the hondatoto platform at hondatoto.im, including all services offered – lottery, Live Casino, slots, Sports Betting (badminton, Malaysia Super League football, EPL, e-sports, and more), the VIP Rewards programme, and all other related features.

When we use the term "personal data" in this document, it refers to any information that can be used to identify you directly or indirectly as an individual. This includes your name, phone number, email address, IP address and financial transaction information at hondatoto.

Hondatoto acts as a "data controller" under Malaysia's PDPA, meaning we bear full responsibility for how your data is processed within our systems. We have appointed an internal data protection officer who oversees our compliance with all applicable privacy legislation.

2. Personal Data We Collect

Hondatoto collects personal data through several methods – directly from you during registration and platform use, and automatically through standard tracking technologies. The following are the main categories of data we collect:

Data Category Information Type How It's Collected
Identity Full name, Malaysian IC number, date of birth Account registration
Contact Malaysian phone number, email address Account registration
Financial Bank account / eWallet name, account number (masked), transaction records Deposits & Withdrawals
Technical IP address, browser type, device, OS, session logs Collected automatically during use
Games Betting history, games played, total wins/losses Automatic during gameplay
Location Country and city based on IP (approximate only) Collected automatically during use

Hondatoto does not collect sensitive information such as biometric data, health information, or religious beliefs unless specifically required for anti-money laundering (AML) compliance or related identity verification purposes.

Important Note: Your full bank account number, credit card number or eWallet details such as Touch 'n Go, GrabPay or DuitNow are never stored directly in hondatoto's systems. All payment processing is handled through certified third-party gateways with end-to-end encryption.

3. How We Use Your Personal Data

Hondatoto uses your personal data only for legitimate purposes directly related to the delivery of our platform services. The primary purposes for which your data is used are as follows:

  • Account Management – registration, identity verification, profile management, and security settings for your hondatoto account
  • Transaction Processing – processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account or eWallet
  • Service Delivery – allows you to access and enjoy all games and services on the hondatoto platform
  • Platform Security – detecting and preventing fraud, money laundering, account abuse, and other security threats
  • Legal Compliance – meeting AML (Anti-Money Laundering), KYC (Know Your Customer), and legal reporting obligations applicable in Malaysia
  • Customer Support – helps resolve any issues, complaints, or questions you have regarding your hondatoto account or services
  • Responsible Gaming – monitors gameplay patterns to identify players who may need support and ensures that limit tools are functioning correctly
  • Communications – sending important account notifications, security updates, and hondatoto promotions you have consented to receive

Hondatoto does not use your data for automated profiling that produces decisions with significant effects on you without human involvement. All major decisions such as account termination or withdrawal restrictions are always reviewed by a human team before being carried out.

4. Data Sharing with Third Parties

Hondatoto does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an absolute, unchanging commitment. However, there are limited situations where we need to share certain data with trusted third parties for legitimate operational purposes:

  • Payment Service Providers – payment gateways processing Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions receive only the information necessary to complete each transaction and are bound by strict confidentiality agreements
  • Game Developers – Live Casino, slots, and lottery game software providers may receive anonymised session IDs for technical purposes only
  • Cybersecurity Providers – security firms we engage for threat monitoring and security audits have access to system logs only
  • Legal Authorities – hondatoto will comply with valid court orders or lawful requests from Malaysian authorities when required by law
  • Analytics Services – aggregated and non-identifiable data may be shared with analytics providers for platform improvement purposes
All third parties with access to any hondatoto data are required to sign a strict data protection agreement and may only use that data for authorised purposes. They are not permitted to share the data with any other party.

5. Security of Your Personal Data

Hondatoto continuously invests in security infrastructure to keep your data protected at all times. The technical and organisational security measures we have implemented are as follows:

  • 256-bit SSL encryption for all data transmitted between your browser and hondatoto's servers
  • At-rest encryption for all sensitive information in our databases
  • Two-factor authentication (2FA) system available to all member accounts
  • 24/7 system security monitoring by the hondatoto cybersecurity team
  • Periodic security audits conducted by independent third parties
  • Role-based access control (RBAC) – staff may only access data necessary for their specific role
  • Network segmentation and multi-layered firewall protection for the hondatoto infrastructure
  • A comprehensive incident response procedure for data breach cases

While hondatoto takes all reasonable steps to protect your data, no online security system can guarantee absolute 100% protection. We encourage you to also take personal precautions such as using a strong password, enabling 2FA and never sharing your hondatoto account login details with anyone.

6. Cookies & Tracking Technologies

The hondatoto platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players use our platform. The following are the types of cookies we use:

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect the core functionality of the hondatoto platform, including your ability to log in to your account securely.

7. Your Rights as a Data Owner

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data held at hondatoto:

Right to Access

You have the right to request a copy of all personal data we hold about you at hondatoto.

Right to Rectification

If any of your data held at hondatoto is inaccurate or out of date, you have the right to request a correction.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data from hondatoto's systems.

Right to Restrict Processing

You may request that we restrict how we use your data in certain situations permitted by law.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another data controller.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without needing to provide a reason.

To exercise any of the rights above, contact the hondatoto support team via 24/7 Live Chat or email us at support@hondatoto.im with the subject line "Data Privacy Request". We will process your request within 14 business days. For cases requiring further investigation, we will keep you informed of the progress within that period.

Please Note: Some data deletion requests may not be fully fulfilled if the data in question is required for AML legal compliance, to resolve outstanding disputes or to meet reporting obligations under Malaysian law.

8. Data Retention & Deletion

Hondatoto retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable Malaysian law. General retention periods are as follows:

  • Active Account Data – retained for the duration your account is active at hondatoto and for a period of 7 years after account closure for legal compliance purposes
  • Financial Transaction Records – retained for a minimum of 7 years in line with Malaysia's anti-money laundering legal requirements
  • Security & Access Logs – retained for 12 months for security incident investigation purposes where required
  • Game History – retained for the lifetime of the account and 3 years after account closure for audit and dispute resolution purposes
  • Customer Support Records – retained for 3 years from the date of the last interaction
  • Cookie Data – in accordance with each cookie's individual lifespan, ranging from a single session up to a maximum of 24 months

Once the relevant retention period expires, hondatoto will securely delete or destroy your personal data using methods that ensure it cannot be recovered. The deletion process is internally audited to ensure compliance.

9. Children's Data Protection

The hondatoto platform is restricted to users aged 18 and above. Hondatoto does not knowingly collect personal data from individuals under the age of 18. We employ multiple layers of controls to prevent underage use of the platform, including MyKad number verification during registration.

Should hondatoto become aware that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and terminate the account in question. If you are a parent or guardian who believes your child has registered a hondatoto account, please contact us immediately via Live Chat or our support email.

Use of the hondatoto platform by individuals under the age of 18 is a serious violation of our Terms & Conditions. Parents and guardians are encouraged to monitor their children's online activity and make use of the parental control tools available on their devices.

10. Privacy Policy Amendments

Hondatoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any amendments will be published on this page along with an updated effective date.

For amendments that significantly affect how we process your data, hondatoto will notify you via your registered email or an in-account notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make a fully informed decision.

Continued use of the hondatoto platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request data deletion in accordance with the procedure described in Section 7 above.

For any questions, concerns, or complaints regarding this Privacy Policy or how hondatoto handles your personal data, please get in touch with us:

24/7 Live Chat – fastest channel, average response time < 3 minutes
support@hondatoto.im – subject: "Data Privacy"
Current version: 1 January 2026
Fully Licensed
256-bit SSL
PDPA Compliance
24/7 Support
No Data Sales
Responsible Gaming
Hondatoto's Privacy Commitment to Every Malaysian Member

Your personal data at hondatoto is protected with 256-bit SSL encryption and we never sell your data to third parties. You have the right to access, correct or request deletion of your data at any time. For information on responsible use of the platform, visit Responsible Gaming page us. For questions regarding platform usage rules, please read Terms & Conditions us.

FAQ – hondatoto Privacy Policy

The most frequently asked questions from members regarding personal data protection at hondatoto.

No, hondatoto has never and will never sell, rent or trade members' personal data with any third party for marketing or commercial purposes. We only share the minimum necessary information with payment service providers (such as gateways for TNG, GrabPay, DuitNow, FPX) and gaming software providers for operational purposes only, and all such parties are bound by strict confidentiality agreements. We also comply with valid legal orders from Malaysian authorities when required.

You can submit a data access request by contacting the hondatoto support team via 24/7 Live Chat or by emailing support@hondatoto.im with the subject line "Personal Data Access Request". Please include your account number or registered phone number to help speed up the identity verification process. hondatoto will process your request within 14 business days and provide a data report in an easy-to-read format.

Yes. Your full bank account or eWallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX) are never stored directly in hondatoto's systems. All payment processing is handled through certified third-party payment gateways with end-to-end encryption. Hondatoto only retains enough information to identify your payment method (for example: your TNG username or a partially displayed bank account number) solely for withdrawal verification purposes.

After account closure, hondatoto retains financial transaction records for a minimum of 7 years in line with Malaysia's anti-money laundering laws. Basic account data is kept for 7 years for legal compliance purposes. Game history is retained for 3 years for audit and dispute resolution purposes. Security logs are retained for 12 months. Once the relevant retention period has expired, all data is securely deleted using methods that prevent recovery.

hondatoto protects your account with multiple layers of security: 256-bit SSL encryption on all communications, OTP verification via Malaysian SMS for new logins and critical transactions, two-factor authentication (2FA) available to all members, 24/7 security monitoring that detects suspicious login patterns, and automatic alerts whenever a login is detected from an unfamiliar device or location. We strongly recommend enabling 2FA in your hondatoto account security settings for maximum protection.

Your Data Is Safe. Play with Confidence at hondatoto.

Register a free account in under two minutes. Deposit from RM 10 via TNG, GrabPay, or FPX.

Lottery • Live Casino • Blackjack • Badminton • Slots – all on a secure and trusted platform.

✓ 256-bit SSL ✓ No data sales ✓ Malaysia PDPA Compliant ✓ 24/7 Bahasa Malaysia Support
Bahasa Melayu