tom188 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy explains what data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a data subject. Please read this document carefully alongside our Terms & Conditions.
These six principles summarise our approach to data privacy. They are not a substitute for reading the full policy below — all players are required to review the complete document.
We collect only the personal information that is strictly necessary to operate your account, process transactions, verify your identity (KYC), and comply with legal obligations. We do not collect data speculatively or beyond the stated purposes in this policy.
All personal data is stored on encrypted servers and transmitted exclusively over 256-bit SSL-secured connections. Access to personally identifiable information within our organisation is restricted to authorised personnel on a strict need-to-know basis.
tom188 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial use. Data sharing with third parties is limited to what is necessary for platform operations and legal compliance, as described in this policy.
As a data subject, you have the right to access, correct, or request deletion of your personal data. You may also object to certain forms of processing and withdraw consent at any time where consent is the legal basis for processing. Contact our support team to exercise any of these rights.
We use cookies and similar tracking technologies solely to improve your experience on the tom188 platform — including remembering preferences, analysing performance, and enabling certain interactive features. You can manage cookie preferences through your browser settings.
We retain personal data only for as long as is necessary for its stated purpose or as required by applicable law. KYC and financial records are retained for a minimum of five years to comply with anti-money laundering regulations. Marketing data is retained until you withdraw consent.
This Privacy Policy (hereinafter "Policy") describes how tom188 ("we", "us", "our", or the "Platform"), accessible at tom188.cam, collects, processes, stores, and shares personal data relating to individuals ("you", "User", or "Player") who access or use our online gaming services, including but not limited to live casino, sports betting, slot games, and any associated features, promotions, or communications.
tom188 is the data controller for personal data collected through this Platform. We are committed to handling your data in a manner that is transparent, lawful, fair, and proportionate to the purposes for which it is collected. This Policy applies in full to all registered players, visitors, and any individual whose personal data we process in connection with our services.
This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall framework governing your relationship with tom188. By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein, to the extent that consent is required.
The following terms have the meanings ascribed to them below throughout this Policy:
tom188 collects personal data through several channels, including account registration, KYC verification, payment processing, platform use, customer support interactions, and marketing communications. The categories of data we collect are described below.
| Category | Examples of Data Collected | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, gender, nationality | Account registration & KYC verification |
| Contact Data | Email address, phone number, postal address | Account registration & profile updates |
| Financial Data | Bank account details, e-wallet identifiers (TnG, Boost, GrabPay), transaction history, deposit/withdrawal amounts in MYR | Payment processing & KYC |
| Identity Documents | Scanned or photographed copies of MyKad, passport, utility bills, bank statements | KYC verification process |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, login timestamps | Automatic collection during Platform use |
| Usage Data | Games played, bet history, wagering patterns, bonus activity, navigation paths on the Platform | Automatic collection during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support tickets, complaints | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, and push notifications | Account settings & consent mechanisms |
We do not collect special category data (such as health information, religious beliefs, or political opinions) unless you voluntarily provide such information in the context of a responsible gambling self-assessment or support interaction, in which case it is processed solely for player protection purposes with your explicit consent.
tom188 processes your personal data for the following specific and legitimate purposes:
tom188 processes your personal data under the following legal bases, as applicable to the purpose of each processing activity:
Where processing is based on your consent, you have the right to withdraw that consent at any time by adjusting your preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
tom188 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
To process your deposits and withdrawals, we share relevant financial and identity data with payment processors and financial institutions, including providers of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency network operators. These providers process data under their own privacy policies and applicable financial regulations.
We engage third-party KYC service providers to assist in verifying the identity and age of players. These providers process identity documents and biometric data strictly under our instructions and applicable data processing agreements.
Certain aggregated and anonymised usage data (such as game session statistics) may be shared with our game studio partners (including but not limited to Pragmatic Play, PG Soft, and similar providers) for the purpose of game performance analytics. No personally identifiable information is shared with game studios beyond what is technically required for game session delivery.
tom188 may disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or courts of competent jurisdiction where required by law, pursuant to a lawful order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, criminal activity, or harm.
We use third-party cloud hosting, data security, and IT infrastructure providers to operate the Platform. These providers act as Data Processors under written agreements that restrict their use of your data to the purposes specified by tom188.
tom188 operates under an international gaming licence and may process and store personal data on servers located outside Malaysia. Where data is transferred to jurisdictions that may not provide an equivalent level of data protection to your home country, we ensure that appropriate safeguards are in place, which may include:
By using the tom188 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. We take all reasonable steps to ensure that any such transfers are subject to appropriate protections.
tom188 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| KYC Documents | Minimum 5 years from date of verification | AML / licensing obligation |
| Financial Transaction Records | Minimum 5 years | AML / financial regulation |
| Betting and Gaming History | 5 years from date of activity | Dispute resolution / licence requirement |
| Customer Support Records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent |
| Technical / Log Data | Up to 12 months | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.
tom188 uses cookies and similar technologies (such as pixel tags and web beacons) to deliver, improve, and analyse our Platform. The types of cookies we use are described below.
These cookies are essential to the operation of the Platform and cannot be disabled without affecting Platform functionality. They enable core features such as session management, login authentication, security token validation, and payment flow continuity. No consent is required for strictly necessary cookies.
We use analytics cookies to collect aggregated, anonymised data on how players navigate and use the Platform — including page load times, feature usage, and error reporting. This data is used exclusively to improve Platform performance and user experience.
Functional cookies store your preferences, such as language settings, display preferences, and previously visited game categories, to provide a more personalised experience on return visits.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform. Instructions for managing cookies are available in the Help section of most major browsers. Continued use of the Platform without adjusting your browser settings indicates acceptance of our use of cookies as described in this Policy.
tom188 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:
While we take all reasonable steps to protect your data, no security system is entirely impenetrable. You are responsible for maintaining the confidentiality of your account login credentials and for notifying us immediately if you suspect any unauthorised use of your account.
Subject to applicable data protection law and any conditions that may apply, you have the following rights in relation to the personal data that tom188 holds about you:
To exercise any of these rights, please contact our Data Privacy team by emailing [email protected] with the subject line "Data Rights Request" and your registered username. We aim to respond to all valid requests within 30 days. In some cases, we may need to verify your identity before fulfilling your request.
tom188 strictly prohibits access to and use of its platform by individuals under the age of 21 years. We do not knowingly collect personal data from minors. Age verification is a mandatory element of our KYC process, and accounts suspected of being held by individuals under the minimum age will be immediately suspended pending verification.
If you believe that a minor may have registered an account on tom188 using false information, please contact our support team immediately at [email protected]. We will investigate the matter and take appropriate action, including permanent account closure and deletion of any associated personal data.
The tom188 Platform may contain references to third-party payment providers and services in an informational capacity (for example, the mention of Maybank2u, DuitNow, or Touch 'n Go eWallet as supported payment methods). These references do not constitute endorsements of those parties' privacy practices. tom188 is not responsible for the privacy policies or data practices of any third-party services.
We do not embed third-party tracking scripts unrelated to Platform operations on our pages. Any external links that may appear are provided solely for informational convenience, and your use of any external resource is at your own risk and subject to that resource's own privacy policy.
tom188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, we will notify registered players via their registered email address and by displaying a prominent notice on the Platform prior to the changes taking effect.
The date of last review is displayed at the top of this Policy. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree with a material change, you should close your account by contacting our support team.
We recommend reviewing this Policy periodically to stay informed of how tom188 handles your personal data.
If you have any questions, concerns, or complaints relating to this Privacy Policy or to how tom188 processes your personal data, please contact us through the following channels:
We take all privacy complaints seriously and aim to respond to all written enquiries within 30 calendar days of receipt. Where the matter is complex, we will inform you within this period and provide an estimated resolution timeframe.
If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances. Malaysian players may wish to seek guidance from the relevant authorities regarding their rights under the Personal Data Protection Act 2010 (PDPA).
Your privacy is a right, not a privilege. tom188 is built on the principle that protecting your personal data is inseparable from delivering a world-class gaming experience. Browse our FAQ for more information, or visit the homepage to explore the platform.