Privacy Policy

1. Introduction

This Privacy Policy applies to all personal information collected by toto1w through our website at https://toto1w.cam, mobile applications, customer service channels, and any other digital platforms or services we provide (collectively referred to as "the Platform"). toto1w operates as an online gaming platform serving Indonesian players and is committed to compliance with international data protection standards and best practices.

As a user of toto1w, you have the right to understand what personal information we collect about you, why we need it, how we use it, who we share it with, how long we keep it, and what security measures we employ to protect it. This Privacy Policy provides transparency into our data practices and empowers you to make informed decisions about your personal information.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of toto1w services. Where this Privacy Policy conflicts with the Terms and Conditions regarding data protection matters, the provisions of this Privacy Policy shall prevail.

2. Information We Collect

toto1w collects personal information necessary to provide, maintain, and improve our services, comply with legal obligations, and protect against fraud and abuse. We collect information in the following categories:

2.1 Information You Provide Directly

Account Registration Data: When you create an account with toto1w, we collect your full legal name (as it appears on your Indonesian KTP identity card), date of birth, gender, residential address (street, city, province, postal code), email address, mobile phone number, username, and password. This information is mandatory to establish your account and verify your identity.

Identity Verification Documents: To comply with Know Your Customer (KYC) regulations and prevent fraud, we collect copies of your Indonesian KTP (Kartu Tanda Penduduk), selfie photographs holding your KTP, and in some cases, additional proof of address documents such as utility bills or bank statements. These documents are used solely for identity verification and age confirmation (21+ requirement).

Financial Information: We collect your bank account details including bank name, account number, account holder name (which must match your verified identity), and preferred deposit/withdrawal methods. For e-wallet payments, we collect your registered mobile number or account identifier for OVO, DANA, GoPay, or ShopeePay. We do not store your full bank card numbers or CVV codes.

Communication Records: When you contact our customer support team via live chat, email, WhatsApp, or in-app messaging, we retain records of your communications including the content of messages, timestamps, support ticket IDs, and resolution details. This information helps us improve service quality and resolve disputes.

2.2 Information Collected Automatically

Technical and Usage Data: When you access toto1w, our systems automatically collect technical information including your IP address, device type and model, operating system and version, browser type and version, screen resolution, language settings, time zone, and internet service provider. We also collect usage data such as pages viewed, features accessed, games played, bets placed, session duration, navigation paths, and interaction patterns.

Location Data: We collect approximate geographic location information based on your IP address to verify that you are accessing our platform from within Indonesian territory, as required by our operating terms. We do not collect precise GPS coordinates unless you explicitly grant location permissions through your mobile device.

Cookies and Tracking Technologies: toto1w uses cookies, web beacons, pixel tags, and similar tracking technologies to recognize your browser, remember your preferences, authenticate your session, analyze site traffic, and detect fraudulent activity. For detailed information about our cookie practices, see Section 6 of this policy.

2.3 Information from Third Parties

Payment Processors: When you deposit or withdraw funds, we receive transaction confirmation data from Indonesian banks and e-wallet providers including transaction ID, amount, timestamp, and processing status. This information is necessary to credit deposits and process withdrawals accurately.

Game Providers: Our platform integrates games from third-party providers such as Pragmatic Play, Evolution Gaming, Spribe, Microgaming, and others. These providers may share gameplay data including game outcomes, bet amounts, RTP statistics, and session details to facilitate fair gaming and dispute resolution.

Fraud Prevention Services: We work with specialized fraud detection and prevention services that analyze behavioral patterns, device fingerprints, and transaction anomalies to identify and prevent fraudulent activities, money laundering, and bonus abuse.

3. How We Use Your Personal Information

toto1w processes your personal data for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your user account
• Verifying your identity and age (21+ requirement) through KYC procedures
• Processing deposits, withdrawals, and financial transactions
• Providing access to sports betting, casino games, lottery draws, and other gaming products
• Managing your account balance, transaction history, and betting records
• Delivering customer support and responding to your inquiries
• Communicating account-related notifications including deposit confirmations, withdrawal updates, and security alerts

3.2 Legal Compliance and Fraud Prevention

• Complying with anti-money laundering (AML) regulations and reporting obligations
• Preventing and detecting fraud, collusion, money laundering, and other illegal activities
• Enforcing our Terms and Conditions and investigating violations
• Responding to legal process including court orders, subpoenas, and government requests
• Maintaining audit trails and transaction records as required by gaming regulations
• Verifying the legitimacy of payment sources and detecting stolen payment methods

3.3 Platform Improvement and Personalization

• Analyzing usage patterns to improve platform functionality, user interface, and game offerings
• Personalizing your gaming experience by recommending games and features based on your preferences
• Conducting research and statistical analysis on player behavior (using aggregated, anonymized data)
• Testing new features, layouts, and technologies
• Optimizing platform performance, loading speeds, and mobile compatibility

3.4 Marketing and Promotions (With Your Consent)

• Sending promotional emails about bonuses, special offers, and new game releases (only if you opt-in)
• Delivering personalized bonus offers based on your gaming activity and preferences
• Notifying you about tournaments, competitions, and special events
• Conducting surveys and gathering feedback on our services

You may opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or adjusting your communication preferences in your account settings. Opting out of marketing does not affect transactional communications related to your account.

3.5 Responsible Gaming

• Monitoring gameplay patterns to identify potential problem gambling behaviors
• Enforcing deposit limits, loss limits, and self-exclusion requests
• Providing reality-check reminders and session time notifications
• Restricting access for self-excluded players and underage individuals

4. Data Sharing and Disclosure

toto1w does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for legitimate business and legal reasons:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to support our operations, including payment processors (Indonesian banks and e-wallet providers), game content suppliers (Pragmatic Play, Evolution Gaming, etc.), cloud hosting and data storage providers, customer support platforms, fraud prevention and cybersecurity services, and analytics tools. These service providers are contractually obligated to use your data only for the purposes we specify and to implement appropriate security measures. They are prohibited from using your information for their own marketing or other purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law, legal process, or regulatory investigation. This includes responding to subpoenas, court orders, official requests for information related to anti-money laundering investigations, fraud investigations, or tax compliance. We will only disclose the minimum information necessary to fulfill the legal requirement.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy involving toto1w, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and/or prominent website notice of any such change in ownership or control of your personal data, along with information about your choices regarding your data.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. For example, we might publish statistics about overall player demographics, popular game categories, or average session durations without revealing individual player information.

5. Data Security Measures

toto1w employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. Our security framework includes:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same encryption standard used by banks and financial institutions. Personal information stored in our databases is encrypted at rest.
• Secure Authentication: Your password is cryptographically hashed using bcrypt or similar algorithms and never stored in plain text. We support two-factor authentication (2FA) for additional account security.
• Firewall Protection: Our network infrastructure is protected by enterprise-grade firewalls that filter malicious traffic and prevent unauthorized access attempts.
• Intrusion Detection: We deploy real-time monitoring systems that detect and alert us to suspicious activities, potential security breaches, and anomalous access patterns.
• Regular Security Audits: Independent cybersecurity firms conduct periodic penetration testing and vulnerability assessments to identify and remediate security weaknesses.

5.2 Organizational Safeguards

• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis and governed by role-based permissions. All access is logged and monitored.
• Employee Training: All toto1w employees and contractors receive mandatory data protection training covering privacy policies, security protocols, and incident response procedures.
• Confidentiality Agreements: Employees, contractors, and service providers are bound by strict confidentiality obligations regarding customer data.
• Incident Response Plan: We maintain a documented incident response plan to quickly identify, contain, and remediate security breaches, including procedures for notifying affected users when required.

While we implement robust security measures, no online platform can guarantee absolute security. You share responsibility for account security by maintaining the confidentiality of your password, using strong unique passwords, enabling two-factor authentication, and promptly reporting any suspected unauthorized access to our support team.

6. Cookies and Tracking Technologies

toto1w uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device that allows our website to recognize your browser and remember certain information.

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for basic platform functionality including session management, authentication, and security. These cookies cannot be disabled without severely impairing your ability to use toto1w services.
• Performance Cookies: Collect anonymous information about how visitors use our platform, which pages are visited most frequently, and error messages encountered. This data helps us improve website performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display options, and favorite games to provide a more personalized experience.
• Advertising Cookies: (If applicable) May be used to deliver relevant advertisements and track campaign effectiveness. We do not currently use third-party advertising networks.

6.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. However, disabling cookies may prevent you from accessing certain features or functionalities of toto1w. You can manage cookies through your browser settings (Chrome, Firefox, Safari, Edge all provide cookie management options in their privacy/security settings).

7. Data Retention and Deletion

toto1w retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on data type and regulatory requirements:

• Account Information: Retained for the duration of your active account plus an additional 5 years after account closure to comply with anti-money laundering regulations and tax reporting requirements.
• Transaction Records: Retained for 7 years to meet financial recordkeeping obligations and facilitate potential dispute resolution or audits.
• KYC Documentation: Retained for 5 years after account closure as required by identity verification and AML regulations.
• Communication Records: Customer service communications are retained for 3 years to support quality assurance and dispute resolution.
• Marketing Data: If you opt out of marketing communications, your email address is retained on a suppression list to ensure we do not contact you again.

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. Backup copies stored for disaster recovery purposes are also deleted according to our backup retention schedule.

8. Your Privacy Rights

As a toto1w user, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your account dashboard, including profile information, transaction history, and betting records. For a comprehensive data export, contact our privacy team.

8.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings. For changes to verified data (name, date of birth from KTP), contact customer support with supporting documentation.

8.3 Right to Deletion

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent was the lawful basis for processing), or you object to processing. Please note that we may be required to retain certain information for legal, regulatory, or legitimate business purposes even after you request deletion.

8.4 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time by opting out of marketing communications through your account settings or the unsubscribe link in emails.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider where technically feasible.

8.6 Exercising Your Rights

To exercise any of these privacy rights, please contact our data protection team at [email protected] with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days and may require identity verification to prevent unauthorized access to your personal information.

9. Children's Privacy

toto1w services are strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or retain personal information from individuals under 21 years of age. Our age verification procedures through KTP documentation checks are designed to prevent minors from creating accounts.

If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately delete that information from our systems and terminate the associated account. If you believe a minor has provided personal information to toto1w, please contact us immediately at [email protected] so we can take appropriate action.

Parents and guardians are encouraged to monitor children's internet usage and employ parental control software to prevent minors from accessing online gambling platforms.

10. Changes to This Privacy Policy

toto1w reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you through one or more of the following methods:

• Email notification to the address associated with your account
• Prominent notice on the toto1w website homepage
• In-app notification when you log into your account

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this document indicates when the policy was most recently revised. Your continued use of toto1w services following notification of changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact our privacy and data protection team:

• Email: [email protected] (Subject: Privacy Policy Inquiry)
• Response Time: We aim to respond to all privacy inquiries within 48 hours during business days

For urgent security concerns such as suspected unauthorized access to your account or data breach notifications, please use the subject line "URGENT: Security Issue" to ensure priority handling by our security team.