Privacy Policy

This Privacy Policy (the "Policy") describes how toto80 (the "Platform," "we," "us," or "our") collects, uses, processes, stores, and protects your personal information when you access or use the toto80 online betting platform, including all associated websites, mobile interfaces, and services (collectively, the "Service").

By creating an account, using the Platform, or providing personal information to toto80, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree to this Policy, you must not use the Platform or provide any personal information to us.

1. Information We Collect

1.1 Information You Provide Directly

When you register for a toto80 account, place a bet, make a deposit or withdrawal, or contact customer support, you provide us with personal information, including:

• Account Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address, and username/password
• Identity Verification (KYC) Data: Government-issued photo ID (e-KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie photos for identity confirmation
• Financial Information: Bank account numbers, e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), credit/debit card information (processed via secure third-party payment processors — we do not store full card numbers)
• Communication Data: Messages you send to customer support via live chat, email, WhatsApp, or in-app messaging, including any attachments or screenshots
• Transaction History: Records of deposits, withdrawals, bets placed, winnings, bonuses claimed, and account balance changes

1.2 Information We Collect Automatically

When you use the toto80 Platform, we automatically collect certain technical and behavioral information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Usage Data: Pages visited, time spent on each page, click patterns, games played, bet amounts, login/logout times, and session duration
• Location Data: IP address, approximate geographic location derived from IP geolocation (city/province level), and timezone
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage data, and similar tracking mechanisms used to maintain your login session, remember preferences, and analyze Platform performance

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction status, payment method verification, and fraud detection signals from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment partners
• Identity Verification Providers: Electronic identity verification results from third-party KYC service providers used to confirm your identity and age
• Fraud Prevention Services: Risk scores, device fingerprints, and fraud indicators from security vendors used to detect suspicious activity and protect Members from account takeover

2. How We Use Your Information

toto80 uses your personal information for the following purposes:

2.1 Service Delivery and Account Management

• Create, maintain, and manage your betting Account
• Process deposits, withdrawals, and internal fund transfers
• Facilitate bet placement, settlement, and payout processing
• Issue bonuses, promotions, and loyalty rewards
• Provide customer support and respond to inquiries

2.2 Security and Fraud Prevention

• Verify your identity and age (21+ requirement) through KYC procedures
• Detect, prevent, and investigate fraudulent activity, multi-accounting, bonus abuse, and unauthorized access
• Monitor betting patterns for irregular activity, match-fixing involvement, or terms of service violations
• Comply with Anti-Money Laundering (AML) regulations and international financial crime prevention standards

2.3 Legal and Regulatory Compliance

• Fulfill obligations under Indonesian and international gambling regulations
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain transaction records and audit logs as required by licensing authorities
• Enforce our Terms and Conditions and Responsible Gaming Policy

2.4 Marketing and Communications

• Send promotional offers, bonus notifications, and exclusive VIP rewards (only if you have opted in to marketing communications)
• Deliver important account updates, security alerts, and service announcements
• Personalize your Platform experience based on betting preferences and game history
• Conduct customer satisfaction surveys and market research (participation is voluntary)

2.5 Platform Improvement and Analytics

• Analyze user behavior to improve website design, game selection, and feature development
• Monitor Platform performance, uptime, and technical errors
• Generate aggregated, anonymized statistics for business intelligence and reporting (no personally identifiable information is used in aggregated reports)

3. How We Protect Your Information

toto80 employs industry-leading security measures to protect your personal and financial data:

3.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols
• Secure Servers: All personal data is stored on servers located in secure data centers with physical access controls, 24/7 video surveillance, and biometric entry restrictions
• Firewalls and Intrusion Detection: Multi-layered firewalls, DDoS protection, and real-time intrusion detection systems monitor and block unauthorized access attempts
• Database Encryption: Sensitive data fields (passwords, financial information) are encrypted at rest using AES-256 encryption standards
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of protection to your Account by requiring a time-based one-time password (TOTP) in addition to your login credentials

3.2 Organizational Safeguards

• Access Controls: Personal data is accessible only to authorized toto80 employees and contractors who require access to perform their job duties, subject to strict confidentiality agreements
• Background Checks: All employees with access to Member data undergo background verification checks before hiring
• Security Training: Staff receive regular training on data protection best practices, phishing awareness, and incident response procedures
• Incident Response Plan: We maintain a comprehensive data breach response plan and will notify affected Members within 72 hours of discovering any security incident affecting their personal data

3.3 Payment Security

toto80 does not store full credit card numbers or CVV codes. All card payment processing is handled by PCI-DSS Level 1 certified third-party payment processors. Bank transfer and e-wallet transactions are processed through secure, direct integrations with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, using encrypted communication channels and tokenized account identifiers.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

toto80 may share your personal information with trusted third-party service providers who assist us in operating the Platform, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, etc.) to process deposits and withdrawals
• Identity Verification Services: Third-party KYC providers to verify your identity, age, and address
• Cloud Hosting Providers: Secure cloud infrastructure providers for data storage and Platform hosting
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software used by our support team
• Analytics Services: Anonymized analytics providers to measure Platform usage and performance (no personally identifiable information is shared)

All third-party service providers are contractually obligated to protect your data and use it only for the specific purpose for which it was disclosed. We conduct due diligence on all vendors to ensure they maintain adequate security standards.

4.2 Legal and Regulatory Disclosure

toto80 may disclose your personal information if required to do so by law or in response to:

• Valid court orders, subpoenas, or legal processes issued by Indonesian or international authorities
• Requests from regulatory bodies, licensing authorities, or law enforcement agencies investigating illegal activity, fraud, or money laundering
• Legal requirements to protect the rights, property, or safety of toto80, our Members, or the public

4.3 Business Transfers

In the event that toto80 is acquired by, merged with, or sells substantially all of its assets to another company, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

4.4 No Third-Party Sales

toto80 does not sell, rent, or trade your personal information to third-party marketers, advertisers, or data brokers. Your data is used exclusively for the purposes outlined in this Privacy Policy.

5. Cookies and Tracking Technologies

toto80 uses cookies, local storage, and similar tracking technologies to enhance your Platform experience, maintain login sessions, and analyze usage patterns. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for Platform functionality, including maintaining your login session, processing transactions, and remembering language preferences. These cookies cannot be disabled without affecting Platform usability.
• Performance Cookies: Collect anonymized data on how you interact with the Platform (pages visited, errors encountered, load times) to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (e.g., odds format, favorite games, notification settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across toto80 to deliver personalized promotional offers and measure the effectiveness of marketing campaigns (only used if you have opted in to marketing communications).

5.2 Managing Cookie Preferences

Most web browsers allow you to control cookies through browser settings. You can block or delete cookies at any time; however, disabling essential cookies may impair your ability to use certain Platform features. To manage cookies, consult your browser's help documentation or visit your browser's privacy settings menu.

6. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

6.1 Access and Portability

You have the right to request a copy of the personal data we hold about you in a structured, machine-readable format. To request a data export, contact us at [email protected] with the subject line "Data Access Request." We will respond within 30 days.

6.2 Correction and Updating

You may update your account information (email, phone number, address) at any time by logging into your Account and navigating to Account Settings. If you need to correct other personal data (e.g., legal name, date of birth), contact customer support with supporting documentation.

6.3 Deletion

You may request deletion of your personal data by contacting customer support. Please note that we may be legally required to retain certain data (transaction records, KYC documents) for a specified retention period to comply with AML regulations and licensing obligations. Upon account closure, we will delete or anonymize your data after the required retention period expires.

6.4 Marketing Opt-Out

You may opt out of promotional emails, SMS messages, and push notifications at any time by clicking the "Unsubscribe" link in any marketing email, replying "STOP" to SMS messages, or adjusting notification preferences in your Account Settings. Opting out does not affect essential service communications (e.g., security alerts, transaction confirmations).

6.5 Objection and Restriction

You have the right to object to certain data processing activities (e.g., marketing, profiling) or request that we restrict processing of your data under specific circumstances. Contact us to exercise these rights.

7. Data Retention

toto80 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations:

• Active Accounts: Personal data is retained for the duration of your Account membership and for a period of 7 years after account closure to comply with Indonesian financial record-keeping requirements and AML regulations.
• Transaction Records: Deposit, withdrawal, and betting history are retained for 7 years to satisfy tax reporting, audit, and dispute resolution requirements.
• KYC Documents: Identity verification documents are retained for 7 years after account closure as required by international AML and counter-terrorism financing standards.
• Marketing Data: If you opt out of marketing communications, your contact information is added to a suppression list and retained indefinitely to ensure you do not receive future promotional messages.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.

8. International Data Transfers

toto80 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Ensuring that the recipient country has adequate data protection laws
• Obtaining your explicit consent where required by law

All international data transfers are encrypted in transit and subject to the same security standards described in this Privacy Policy.

9. Children's Privacy

toto80 does not knowingly collect personal information from individuals under the age of 21. Our Platform is intended exclusively for adults. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and close the associated Account. If you believe a minor has registered on toto80, please contact us immediately at [email protected].

10. Changes to This Privacy Policy

toto80 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. We will notify you of material changes by posting an updated version on the Platform and, where required, by sending an email to your registered email address. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how toto80 handles your personal data, please contact our Data Protection Team:

• Email: [email protected] (Subject: Privacy Inquiry)
• WhatsApp: +62 812-0000-8080
• Live Chat: Available 24/7 on the Platform
• Support Hours: 00:00–24:00 WIB (Western Indonesia Time)