1. Introduction
This Privacy Policy applies to all personal information collected by toto78 through our website, mobile applications, customer support channels, and any other services we provide (collectively, the "Platform"). This policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.
toto78 operates as an online betting platform specifically designed for Indonesian players. We recognize the importance of privacy in the online gambling industry and have implemented comprehensive measures to ensure your personal data is handled securely and in accordance with international data protection standards.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at the contact details provided in Section 11.
2. Information We Collect
We collect several types of information to provide, maintain, and improve our services. The categories of personal information we collect include:
2.1 Information You Provide Directly
When you register for a toto78 account, we collect the following information:
- Personal Identification Information: Full name, date of birth, gender, and nationality.
- Contact Information: Email address, phone number, and residential address.
- Account Credentials: Username, password (stored in encrypted form), and security questions.
- Identity Verification Documents: Government-issued ID (KTP, passport, or driver's license), proof of address documents, and selfie photographs for KYC compliance.
- Financial Information: Bank account details (bank name, account number, account holder name) for deposit and withdrawal processing.
- Communications: Any correspondence you send to our customer support team via email, live chat, or WhatsApp, including chat transcripts and support tickets.
2.2 Information We Collect Automatically
When you use the toto78 platform, we automatically collect certain technical and usage information:
- Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages viewed, features used, games played, bets placed, time spent on the Platform, clickstream data, and navigation patterns.
- Transaction History: Deposits, withdrawals, wagers, winnings, losses, and bonus usage.
- Location Data: Approximate geographic location derived from your IP address to ensure compliance with regional restrictions and to customize your experience.
- Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to recognize you, remember your preferences, and analyze Platform usage. See Section 9 for more details on cookies.
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Payment Processors: Transaction confirmation, payment status, and fraud screening results from BCA, BRI, BNI, Mandiri, and other Indonesian banks.
- Identity Verification Services: Results from third-party KYC and anti-money laundering screening services.
- Affiliate Partners: If you registered through an affiliate link, we may receive referral information.
- Public Databases: Information from publicly available sources to verify your identity and prevent fraud.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
3.1 To Provide and Improve Our Services
- Create and manage your toto78 account.
- Process deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR).
- Enable you to place bets on sports events, play casino games, and access all Platform features.
- Personalize your experience based on your preferences, play history, and location (e.g., displaying WIB time zone, showing BRI Liga 1 content to Indonesian users).
- Provide customer support and respond to your inquiries in English or Bahasa Indonesia.
- Improve Platform functionality, user interface, and overall user experience through data analysis and testing.
3.2 For Security and Fraud Prevention
- Verify your identity and age (21+ requirement) to comply with legal obligations.
- Detect, prevent, and investigate fraudulent activity, money laundering, bonus abuse, and other violations of our Terms & Conditions.
- Monitor account activity for suspicious patterns that may indicate account compromise or unauthorized access.
- Enforce our policies and protect the rights, property, and safety of toto78, our users, and third parties.
3.3 For Marketing and Promotional Purposes
- Send you promotional offers, bonuses, newsletters, and updates about new games, features, and services (you may opt out at any time).
- Conduct market research and analyze user behavior to develop targeted marketing campaigns.
- Display personalized advertisements based on your interests and activity on the Platform.
3.4 For Legal and Regulatory Compliance
- Comply with applicable laws, regulations, and licensing requirements governing online gambling.
- Respond to legal requests, court orders, and government investigations.
- Maintain records for auditing, tax reporting, and regulatory purposes.
- Implement responsible gaming measures, including self-exclusion enforcement and problem gambling detection.
4. Legal Basis for Processing (GDPR Compliance)
For users in jurisdictions covered by the General Data Protection Regulation (GDPR) or similar laws, we process your personal information based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill our contract with you (providing betting and gaming services).
- Legal Obligation: Processing is required to comply with regulatory requirements, including KYC, anti-money laundering, and age verification laws.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your privacy rights.
- Consent: Where required by law, we obtain your explicit consent before processing certain types of data, such as marketing communications.
5. How We Share Your Information
We do not sell your personal information to third parties. However, we may share your information with trusted partners and service providers in the following circumstances:
5.1 Service Providers and Business Partners
- Payment Processors: We share necessary financial information with BCA, BRI, BNI, Mandiri, and other Indonesian banks to process deposits and withdrawals.
- Identity Verification Services: Third-party KYC providers receive your identification documents to verify your identity and prevent fraud.
- Cloud Hosting Providers: We use secure cloud infrastructure to store and process data. These providers have access to your information only to perform services on our behalf and are bound by confidentiality agreements.
- Customer Support Tools: Live chat and support ticket systems may be operated by third-party software providers who process communications data.
- Analytics and Marketing Partners: We may share anonymized or aggregated data with analytics tools and marketing platforms to improve our services and campaigns.
5.2 Legal and Regulatory Authorities
We may disclose your information to law enforcement, regulatory bodies, or government agencies when:
- Required by law, regulation, subpoena, or court order.
- Necessary to investigate suspected illegal activity, fraud, or threats to public safety.
- Required to enforce our Terms & Conditions or protect our rights and property.
5.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and any changes to how your information is handled.
5.4 With Your Consent
We may share your information with other third parties when you provide explicit consent, such as when participating in affiliate programs or third-party promotions.
6. Data Security
Protecting your personal information is a top priority for toto78. We implement industry-standard security measures to safeguard your data:
- Encryption: All data transmitted between your device and our servers is protected using SSL/TLS encryption. Passwords are stored using secure hashing algorithms.
- Access Controls: We restrict access to personal information to authorized employees and service providers who need it to perform their duties. All personnel are bound by confidentiality obligations.
- Secure Data Centers: Our servers are hosted in secure, access-controlled data centers with 24/7 monitoring, fire protection, and backup power systems.
- Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address vulnerabilities.
- Two-Factor Authentication: We offer optional two-factor authentication (2FA) to add an extra layer of security to your account.
- Fraud Monitoring: We employ automated systems to detect and prevent fraudulent transactions, unauthorized access, and suspicious activity patterns.
While we take extensive precautions to protect your information, no method of transmission over the internet or electronic storage is 100% secure. You acknowledge that you provide your personal information at your own risk.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Active Accounts: We retain account information and transaction history for the duration of your account's active status.
- Closed Accounts: After you close your account, we retain certain records for legal, regulatory, and fraud prevention purposes, typically for a period of 7 years from the date of account closure, in accordance with financial record-keeping requirements.
- Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again.
- Legal Holds: If your information is subject to a legal hold, investigation, or dispute, we will retain it until the matter is resolved.
8. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Access: You may request a copy of the personal information we hold about you.
- Right to Rectification: You may request that we correct any inaccurate or incomplete personal information.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal information, subject to legal and regulatory retention requirements.
- Right to Restriction: You may request that we limit how we use your personal information in certain circumstances.
- Right to Data Portability: You may request a machine-readable copy of your personal information to transfer to another service provider.
- Right to Object: You may object to our processing of your personal information for marketing purposes or based on legitimate interests.
- Right to Withdraw Consent: If we process your information based on consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within 30 days. Please note that certain rights may be limited by legal or regulatory requirements.
9. Cookies and Tracking Technologies
toto78 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our services.
9.1 Types of Cookies We Use
| Cookie Type |
Purpose |
Duration |
| Essential Cookies |
Required for the Platform to function properly. These cookies enable core features like account login, security, and transaction processing. |
Session or up to 1 year |
| Performance Cookies |
Collect anonymous information about how you use the Platform to help us improve performance and user experience. |
Up to 2 years |
| Functionality Cookies |
Remember your preferences, such as language settings, time zone (WIB/WITA/WIT), and display options. |
Up to 1 year |
| Marketing Cookies |
Track your activity across websites to deliver personalized advertisements and measure campaign effectiveness. |
Up to 2 years |
9.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect your ability to use certain features of the Platform. Essential cookies cannot be disabled without significantly impairing Platform functionality.
10. International Data Transfers
As toto78 operates internationally, your personal information may be transferred to and processed in countries outside Indonesia. We ensure that any international transfers comply with applicable data protection laws by implementing appropriate safeguards, such as:
- Standard contractual clauses approved by data protection authorities.
- Ensuring recipient countries have adequate data protection laws.
- Obtaining your explicit consent where required.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
- Email: [email protected]
- Live Chat: Available 24/7 through the toto78 platform
- WhatsApp: Available 24/7 (contact details provided on the Platform)
We are committed to resolving any privacy concerns promptly and transparently. Our support team is available in both English and Bahasa Indonesia to assist you.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will notify you by:
- Posting a notice on the toto78 homepage or within your account dashboard.
- Sending an email to the address associated with your account.
- Displaying a prominent notification when you log in.
Your continued use of the Platform after changes have been posted constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your information.
13. Children's Privacy
toto78 is intended exclusively for individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21. If we discover that we have inadvertently collected information from a minor, we will delete it immediately and close the associated account. Parents or guardians who believe their child has provided information to toto78 should contact us immediately.
By using the toto78 platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.