1Introduction
This Privacy Policy describes how toke6 ("we", "the platform") collects, uses, discloses, and protects your personal information when you register or use the services offered at toke6.net. This document forms part of the toke6 Terms and Conditions, and by using our platform, you agree to the privacy practices outlined here.
We are committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. If you have any questions about how we manage your data, the toke6 support team is always ready to assist.
2Information We Collect
2.1 Information You Provide Directly
During registration and use of the toke6 platform, we collect information you provide directly, including:
- Basic Personal Information: Full name, date of birth, identification number (MyKad or passport), gender, and nationality.
- Contact Information: Email address, mobile number, and current residential address.
- Financial Information: Bank account number, bank name, payment methods used, and deposit and withdrawal transaction history.
- KYC Documents: A copy of your MyKad or passport, proof of address (utility bill or bank statement), and any other supporting documents required for identity verification.
- Account Information: Your username, encrypted password, and personal account settings.
2.2 Information Collected Automatically
When you use the toke6 platform, our systems automatically record certain technical information to ensure smooth and secure operations:
- IP address and estimated geographic location based on IP
- Device type, operating system, and browser version
- Pages visited, session duration, and navigation patterns within the platform
- Game activity logs including date, time, and betting amounts
- Cookie data and session identifiers used to maintain your login
Note: toke6 does not collect any biometric information such as fingerprints or facial recognition. KYC documents are used solely for manual identity verification by our security team.
3How We Use Your Information
The information we collect is used for specific and legitimate purposes. toke6 will not use your data for purposes unrelated to platform operations without your prior consent.
| Purpose of Use |
Data Type |
Legal Basis |
| Account registration and management |
Name, email, phone number |
Contract performance |
| Identity verification (KYC) |
MyKad, passport, proof of address |
Legal requirement |
| Processing deposits and withdrawals |
Bank details, transaction history |
Contract performance |
| Fraud prevention and security |
IP, activity logs, session data |
Legitimate interests |
| Customer support communications |
Email, phone number |
Contract performance |
| Platform improvement and analytics |
Usage data, cookies |
Legitimate interests |
| Personalised promotions and offers |
Game history, preferences |
Your consent |
4Data Sharing and Disclosure
Toke6 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your information with certain parties:
4.1 Trusted Service Providers
We work with carefully selected third-party service providers to support platform operations, including payment processors, KYC solution providers, cloud service providers, and customer support systems. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
4.2 Legal Requirements
Toke6 may disclose your personal information to government authorities, law enforcement bodies, or courts when required to do so under Malaysian law or a valid court order. In such situations, we will notify you where permitted by law.
4.3 Protection of toke6's Interests
In cases where fraud, money laundering, or other criminal activity is suspected, toke6 reserves the right to disclose relevant information to the appropriate authorities to protect the interests of the platform and its members.
Warning: toke6 will never contact you to request your password, PIN, or OTP via email, SMS, or phone. If you receive such a communication, it is fraudulent — please report it to our support team immediately.
5Data Encryption and Security
The security of your personal data is toke6's top priority. We implement multiple layers of technical and organizational protection to ensure your data remains secure at all times:
- Data Encryption in Transit: All communications between your device and toke6 servers are secured using TLS 1.3 protocol with 256-bit encryption.
- Data Encryption at Rest: Sensitive information such as passwords is stored in hashed form using the bcrypt algorithm. Financial data is encrypted using AES-256.
- Layered Access Control: Access to user data is granted only to staff who require it to perform their duties, based on the principle of least privilege.
- Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts as an additional layer of protection.
- Continuous Monitoring: Our security monitoring system operates 24/7 to detect and respond to any threats or suspicious activity.
- Regular Security Audits: toke6 conducts regular security audits and penetration testing to ensure our systems remain in optimal condition.
While toke6 employs comprehensive security measures, no digital system can guarantee 100% absolute security. We encourage members to play an active role in protecting their accounts by using strong passwords and never sharing their login credentials with anyone.
6Data Retention Period
Toke6 retains your personal data for as long as necessary to fulfill the original purpose for which it was collected, or as required by applicable law. Generally:
- Active account data is retained for as long as your account remains active and in use.
- Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable anti-money laundering legislation.
- KYC documents are retained for the duration of the active account period plus five (5) years after account closure.
- Access logs and security data are retained for twelve (12) months.
- Upon expiry of the retention period, your data will be securely deleted or de-identified.
7Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by toke6. We respect and facilitate the exercise of these rights:
Right of Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
If your data is inaccurate or outdated, you have the right to request that we correct it promptly.
Right to Erasure
You may request deletion of your personal data, subject to legal requirements that prevent certain data from being removed.
Right to Object
You have the right to object to the processing of your data for direct marketing or analytics purposes at any time.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
To exercise any of the rights above, please contact the toke6 privacy team via email at [email protected] or through our platform's Live Chat. We will process your request within 30 business days.
8Use of Cookies and Tracking Technologies
Toke6 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. Cookies are small text files stored on your device by your browser.
Types of Cookies Used
- Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
- Functional Cookies: Saves your preferences such as language, theme, and other settings to deliver a more personalised experience.
- Analytics Cookies: Helps us understand how members interact with the platform so we can continuously improve the user experience.
- Marketing Cookies: Used to display relevant promotions to you based on your platform activity. You may opt out of these cookies.
You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the toke6 platform.
9International Data Transfers
As an online platform, toke6 may process or store your data on servers located outside Malaysia. In such cases, we ensure that all data transfers are carried out with protections equivalent to or exceeding Malaysia's PDPA standards, through data processing agreements that comply with international requirements.
10Privacy Policy Changes
Toke6 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform operations. Members will be notified of any material changes via their registered email or in-platform notification at least 14 days before the changes take effect.
The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy. We encourage you to review this policy periodically. Continued use of the toke6 platform after any changes take effect will be considered acceptance of the updated policy.
11Contact Us Regarding Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how toke6 handles your personal data, please contact us through the following channels:
We are committed to responding to all privacy-related inquiries within five (5) business days. For more complex complaints or data rights requests, the response period is within 30 business days.