App / Sports
This policy explains exactly what account and transaction data we collect when you use tobrut888, how we store it, and what choices you have over it. Every section covers a real part of how we handle your information — from DuitNow deposits to account login records — so you know what sits behind your wallet.
When you open an account with tobrut888, we collect the information you provide during registration — name, contact details and the payment method you choose to connect. For transactions processed through DuitNow, FPX or Bank Transfer, we record the reference, amount and timestamp; we do not store card numbers or full bank credentials on our servers. We also collect standard device and session data — browser type, IP address and pages visited — to keep your session stable whether you switch from mobile data to Wi-Fi mid-session or return on a different device. Cookies are used to recognise your account state and maintain lobby continuity; you can manage cookie preferences through your browser settings at any time. We do not sell your personal data to third parties. Data shared with payment processors is limited to what those processors need to complete your transaction, and is governed by their own policies. Access to this service depends on local law and is available only where local regulations permit. The full details of how long we keep each data category, and the legal basis we rely on, are set out in the sections below.
Transaction references and timestamps recorded; full banking credentials are never stored on our side.
Session data linked to your FPX payment is kept only as long as needed to reconcile your account wallet.
Bank Transfer records are retained for reconciliation purposes and are accessible from your account transaction history.
Not everything that happens when you use tobrut888 falls under this single document. Understanding the boundary helps you know where to direct questions about your data. Account actions — login, wallet top-up, bet placement — are fully within scope. Third-party links or payment processor pages operate under their own separate privacy terms once you leave our environment.
Login sessions, device recognition and account profile data are fully covered. We control how this data is stored, who can access it and how long it is kept.
Deposits and withdrawals via DuitNow, FPX and Bank Transfer are within scope up to the point your browser hands off to the payment provider's own environment.
How you navigate the lobby, which game rooms you open and how long you spend in a session — this behavioural data is collected and covered by this policy.
External payment gateways and linked sites have their own privacy policies. Once you leave tobrut888's environment, this policy no longer applies to what those services collect.
You have real, actionable choices over the data we hold. The starting point for most of them is your account dashboard after login, where your profile details are visible and editable. If the information shown there is out of date — a contact number that has changed, an email address no longer in use — you can update it directly from the account settings page. For data that cannot be changed through self-service, such as historical transaction records, you can raise a request through our support channel and we will respond within the timeframe set out in our support policy. If you want to know exactly what data we hold about your account, you can submit a data access request; we will compile and return a summary to your registered email. Requests to close your account and remove data are handled the same way — contact support with the subject line referencing your account number, and the team will confirm the steps and any retention obligations that apply under applicable law.
Log in and open the account dashboard to see the profile and transaction data we currently hold. Historical records are listed under the transaction history tab.
Update your contact details directly in account settings. For fields locked after verification, submit a correction request through the support channel with your account reference.
Send a message to our support team stating your account number and what data you are asking about. We will confirm receipt and respond within the timeframe shown in our support policy.
Account closure and data removal requests are handled by support. Certain transaction records may be retained as required under applicable law; the support team will explain what applies to your case.
If anything in this policy is unclear, or if you want to act on any of your data rights, the paths below connect you to the right place. Include your registered account email or account number in any message so we can locate your records without delay.
Open the chat widget from any page on tobrut888 and select the account or privacy topic. Have your account number ready so the team can pull your records straight away.
Send your data or privacy question to our support email address shown in the account help section after login. Reference your account number in the subject line for a faster response.
Many data actions — reviewing records, updating contact details, checking transaction history — can be started directly from your account dashboard without needing to contact support.
We apply access controls so that account data is only reachable by the systems and personnel who need it to operate the platform. Passwords are stored in hashed form; plain-text credentials are never retained. Session tokens expire after a period of inactivity, which means a device left unlocked does not stay connected to your account indefinitely. We review data retention periods and access controls on a scheduled basis, and we update this policy when our practices change — the current version date is shown at the bottom of this page.
Cookies keep your session active and your account state consistent across device switches. Manage or block non-essential cookies through your browser settings; note that blocking session cookies may affect account login continuity.
We keep account and transaction data only as long as needed to operate your account and meet any obligations under applicable law. When retention periods end, data is deleted or anonymised.
Account data access is restricted by role. Payment transaction details — including DuitNow and FPX references — are accessible only to the reconciliation and support functions that need them.
When this policy changes in a meaningful way, we will notify you through the contact details on your account. The current version and its effective date are always shown at the foot of this page.
The questions below cover the most common things people ask after reading this policy. If yours is not here, reach out through the live chat or email support path shown in the contact section above.
We collect the details you enter during registration — name, email, contact number and the payment method you link, such as DuitNow or FPX. We also collect standard session data like IP address and device type to keep your account stable across sessions.
We do not sell your data. We share only what is necessary with payment processors — DuitNow, FPX, Bank Transfer — to complete your transactions. Those processors handle that data under their own privacy terms, which apply once the transaction leaves our environment.
Log in and check the account dashboard first — your profile and transaction history are visible there. For a full data summary, submit a request through live chat or email support with your account number. We will compile and send it to your registered email.
Yes. Contact details and preferences can be updated in account settings after login. For fields that are locked after initial verification, raise a correction request through support with your account reference and the team will confirm the process.
We keep data as long as your account is active and for a further period as required under applicable law. Transaction records — including DuitNow and Bank Transfer references — are retained for reconciliation and compliance purposes. Exact retention periods are available on request.
Submit a closure request through support with your account number. We will process the closure and remove personal data that is no longer needed. Certain transaction records may be retained under applicable legal obligations; the support team will confirm what applies to your account.