Privacy Policy toke6 – Your Personal Data Protection

1. Introduction

Toke6 ("we", "Company", or "Platform") values the privacy of every user who uses our services at toke6.pro. This Privacy Policy details the types of personal information we collect, the purposes for which it is collected, how we store and protect it, and your rights regarding your personal data.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. By using the toke6 platform, you agree to the terms set out in this Privacy Policy.

2. Data We Collect

Toke6 collects various types of information depending on how you interact with our platform. This information is collected to ensure a seamless, secure, and personalised user experience.

2.1 Information You Provide Directly

• Registration information: Full name, date of birth, gender, identification card number (MyKad), email address and phone number.
• Financial information: Bank account number, bank name, e-wallet account number (Touch 'n Go eWallet, GrabPay, Boost) used for deposit and withdrawal transactions.
• KYC verification documents: Copies of identity documents, proof of address, and proof of payment method used during the identity verification process.
• Support communications: Any messages, complaints, or enquiries you send to our customer support team via live chat or email.

2.2 Automatically Collected Information

• Technical data: IP address, browser type, operating system, screen resolution, device model, and app version.
• Usage data: Pages visited, time spent on the platform, games played, wagering records and transaction history.
• Location data: General geographic location based on your IP address for compliance verification and security purposes.
• Cookies and similar technologies: Session data, language preferences, account settings, and information stored via cookies.

3. How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. toke6 will not use your data for any purpose not stated below without first obtaining your consent.

3.1 Account Management and Services

Your personal data is used to register your account, verify your identity, process deposits and withdrawals, and provide access to all games and services available on the toke6 platform. Without this information, we are unable to deliver our services safely and effectively.

3.2 Security and Fraud Prevention

Toke6 uses usage data and technical data to detect and prevent suspicious activity, including unauthorised login attempts, identity fraud, money laundering, and bonus abuse. Our security systems analyse behavioural patterns to proactively protect your account.

3.3 Legal and Regulatory Compliance

As a legally operating platform, toke6 is required to retain transaction records and user information for specific periods in accordance with applicable laws and regulations, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.

3.4 Service Improvement and Marketing

We analyse usage data in aggregate form (without identifying individuals) to understand user needs, improve the platform interface, and develop new features. If you have consented to receive marketing communications, we may use your email or phone number to send you relevant promotional offers.

4. Legal Basis for Data Processing

Toke6 processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a platform member, including payment processing and account management.
• Legitimate interests: We process certain data on the basis of legitimate interests to prevent fraud, ensure platform security, and improve our services.
• Legal compliance: Some data processing is mandatory under applicable Malaysian law, including PDPA 2010 and AML requirements.
• Consent: For direct marketing activities and the use of non-essential cookies, we rely on consent voluntarily given by you. You may withdraw this consent at any time.

5. Information Sharing

Toke6 does not sell or rent your personal data. However, there are specific situations where we need to share information with trusted third parties:

5.1 Service Providers

We share necessary data with third-party service providers that support our platform operations, including payment gateway providers (such as FPX and DuitNow), cloud computing service providers, KYC identity verification companies, and gaming software providers. All such providers are bound by strict confidentiality agreements and may only use your data for the specified service purposes.

5.2 Relevant Authorities

Toke6 may disclose your personal information to government authorities or law enforcement agencies when required by law, court order, or direction from a legitimate regulatory body. In such situations, we will notify you if permitted to do so by law.

5.3 Business Transfers

If toke6 is involved in a merger, acquisition, or asset sale, users' personal data may be transferred to the new entity. You will be informed via a clear notice before any such transfer takes place, and your rights under this Privacy Policy will continue to be upheld.

6. Cookies and Tracking Technologies

Toke6 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Functional cookies: Stores your preferences such as language, display settings, and login information for ease of use.
• Analytics cookies: Helps us understand how users interact with the platform for improvement purposes. This data is collected in aggregate form and does not identify individuals.
• Marketing cookies: Used to display relevant advertisements and measure the effectiveness of our promotional campaigns. These cookies are only activated with your consent.

6.2 Managing Cookie Settings

You can manage or delete cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and your experience on the toke6 platform. Essential cookies cannot be disabled as they are fundamental to the platform's secure operation.

7. Data Retention Period

Toke6 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active plus 5 years after account closure, to meet audit and regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's tax and AML legal requirements.
• KYC Documents: Retained for 5 years after the end of the business relationship, or longer if required by law.
• Support communication logs: Retained for 2 years for service quality and dispute resolution purposes.
• Analytics data: Anonymised usage data is retained indefinitely for long-term analytics purposes.

Upon expiry of the relevant retention period, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

8. Data Security

Toke6 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or accidental disclosure.

8.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data stored in the database using the AES-256 algorithm.
• Two-factor authentication (2FA) available for all user accounts.
• 24/7 security monitoring with real-time threat detection and response systems.
• Regular security testing and penetration testing audits conducted by independent third parties.

8.2 Organisational Security Measures

• Access to users' personal data is restricted to staff who require it to perform their duties (principle of least privilege).
• All staff with access to user data undergo rigorous data protection training and are bound by confidentiality agreements.
• Clearly documented security incident response procedures that are tested on a regular basis.

9. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by toke6:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data, subject to our legal obligations to retain it.
• Right to restrict processing: You may request that we restrict how we process your data in certain circumstances.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: You may request your data in a machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our customer support team via 24/7 live chat. We will process your request within 14 working days and inform you of the action taken.

10. Children's Data

The toke6 platform is strictly for adult users aged 18 years and above only. toke6 does not intentionally collect any personal information from children or individuals under the age of 18.

If you are a parent or guardian and suspect that your child has provided personal information to toke6 without your knowledge, please contact us immediately. We will take prompt action to delete that information and close the associated account.

11. Changes to the Privacy Policy

Toke6 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. Any changes made will be published on this page along with the new effective date.

For changes deemed significant, toke6 will provide more prominent notice, whether through in-app notifications, an email to your registered address, or a dedicated banner on our homepage. Your continued use of the platform after the effective date of such changes will be considered your acceptance of the latest version of the Privacy Policy.

We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how toke6 handles your personal data, you may reach us through the following channels:

• Live Chat: Available 24/7 directly through the toke6 platform — the fastest way to get a response.
• Support Email: [email protected] (response within 1–2 working days).

Our data protection team is always ready to help you understand your rights and ensure your personal data is handled to the highest standards. We are committed to providing a thorough and constructive response to every enquiry received.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the regulatory body responsible under PDPA 2010.