Privacy Policy — toto1

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "toto1", "we", "us", or "our" refers to the operator of the online betting and casino platform at https://toto1.cam.
• "User", "you", or "your" refers to any natural person who accesses, registers on, or otherwise interacts with the toto1 platform.
• "Personal Data" means any information that directly or indirectly identifies a living natural person, including name, date of birth, national identification number, email address, device identifiers, and transaction records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Services" means the sports betting, live casino, togel (Indonesia's traditional numbers-prediction lottery) draws, slot games, and all other features available through the toto1 platform.
• "KYC" (Know Your Customer) refers to the identity and age verification procedures required before toto1 processes withdrawal requests.
• "Cookies" means small data files placed on your device by the toto1 platform to enable functionality, security, and analytics.

2 Data Controller

toto1 acts as the Data Controller for Personal Data collected through the platform. As Data Controller, toto1 determines the purposes and means of processing your Personal Data in accordance with this Privacy Policy and applicable international data protection principles.

If you have any questions regarding our role as Data Controller, or wish to exercise any of your rights described in Section 11, please contact us using the details provided in Section 14.

3 Data We Collect

3.1 Data You Provide Directly

When you register, verify your account (KYC), or interact with toto1 Support, we collect the following categories of Personal Data:

• Identity Data: Full legal name, date of birth, gender, Indonesian National Identity Card number (KTP) or passport number, nationality.
• Contact Data: Email address, mobile phone number, residential address (city, province, postal code).
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history denominated in Indonesian Rupiah (IDR).
• KYC Documents: Scanned or photographed copies of government-issued identification, proof of address, and proof of payment method ownership.
• Support Correspondence: Records of communications with toto1 customer support via live chat, email, or WhatsApp (message content and timestamps).

3.2 Data Collected Automatically

When you use the toto1 platform, we automatically collect technical and behavioural data, including:

4 Legal Basis for Processing

toto1 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the Services under the toto1 Terms and Conditions, including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable regulations, including anti-money laundering (AML) obligations, KYC identity verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing carried out for toto1's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as opting in to receive promotional communications from toto1. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Personal Data

toto1 uses Personal Data for the following specific purposes:

1. Account Registration & Management: Creating and maintaining your toto1 account, authenticating your identity at login, and communicating account-related notices.
2. KYC & Age Verification: Confirming that you are at least 21 years of age and that your identity matches the payment methods linked to your account, as required prior to withdrawal processing.
3. Payment Processing: Facilitating deposits and withdrawals in Indonesian Rupiah via your chosen bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
4. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other misuse of the toto1 platform through automated and manual monitoring systems.
5. Responsible Gaming: Identifying patterns that may indicate problem gambling behaviour, enforcing self-exclusions and deposit limits set by the user, and proactively engaging users showing risk signals in accordance with our Responsible Gaming policy.
6. Customer Support: Responding to queries, resolving disputes, and processing complaints submitted via live chat, email, or WhatsApp.
7. Platform Improvement: Analysing aggregate usage data to improve the toto1 platform experience, test new features, and optimise the interface for Indonesian players across Jakarta, Surabaya, Medan, Bali, Bandung, and other regions.
8. Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign updates (such as Idul Fitri and Indonesian Independence Day promotions) to users who have opted in to receive such communications. You may unsubscribe at any time.
9. Legal Compliance: Retaining records as required by applicable regulations and responding to lawful requests from competent authorities.

6 Data Retention

toto1 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods are as follows:

When Personal Data is no longer required, toto1 will securely delete or anonymise it. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

7 Data Sharing & Disclosure

toto1 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party processors who assist toto1 in operating the platform, including payment gateway providers (processing transactions via BCA, BRI, OVO, GoPay etc.), cloud hosting providers, KYC verification partners, fraud detection vendors, and customer support software providers. These parties are contractually bound to process your data only as instructed by toto1 and to maintain equivalent security standards.
• Regulatory & Law Enforcement Authorities: Where toto1 is legally required to disclose information in response to a valid court order, subpoena, regulatory demand, or lawful government request.
• Anti-Fraud & AML Screening: Where necessary, toto1 may cross-reference account data with industry shared databases to detect money laundering, fraud, or self-exclusion breaches.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of toto1's business, your Personal Data may be transferred to the acquiring entity. You will be notified prior to any such transfer, and the acquiring entity will be bound by this Privacy Policy.

In all cases, toto1 requires that any party receiving your Personal Data maintains standards of data protection commensurate with those described in this Privacy Policy.

8 International Data Transfers

toto1 operates globally and may transfer your Personal Data to servers or processors located outside of Indonesia. Where such transfers occur, toto1 ensures that appropriate safeguards are in place, including contractual clauses that oblige the receiving party to apply data protection standards equivalent to those provided under applicable international frameworks.

By using the toto1 platform from Indonesia, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia. toto1 takes all reasonable steps to ensure the security and integrity of your data regardless of where it is processed.

9 Cookies & Tracking Technologies

9.1 Types of Cookies Used

toto1 uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without rendering the platform inoperable.
• Analytics Cookies: Used to collect aggregate, anonymised data on how users interact with toto1 — such as which pages are most visited and where users encounter friction. This data helps toto1 improve the platform experience.
• Preference Cookies: Store your selected settings such as language preference, odds format, and notification preferences so they persist across sessions.
• Security Cookies: Used to detect and mitigate fraudulent activity, identify suspicious login patterns, and enforce responsible gaming controls such as self-exclusion.

9.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete cookies already set, or receive a notification when a new cookie is placed. Please note that disabling cookies may affect the functionality of the toto1 platform — in particular, strictly necessary cookies cannot be disabled without impacting your ability to log in or place bets.

10 Data Security

toto1 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the toto1 platform is encrypted using 256-bit TLS/SSL protocols.
• Encryption at Rest: Sensitive Personal Data stored on toto1's servers — including KYC documents and financial records — is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data within toto1 is restricted to personnel who require it to fulfil their job functions. All internal access is logged and audited.
• Two-Factor Authentication (2FA): Available to all toto1 users to add an additional layer of protection to account login.
• Regular Security Audits: toto1 commissions periodic independent penetration tests and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: toto1 maintains a data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law.

11 Your Data Rights

Subject to applicable law, you have the following rights regarding your Personal Data held by toto1. To exercise any of these rights, please contact us as described in Section 14. We will respond within 30 days of receiving a verified request.

12 Minors & Age Restriction

The toto1 platform is strictly for individuals who are 21 years of age or older. toto1 does not knowingly collect Personal Data from individuals under 21. If you are aware that a minor has registered an account or provided Personal Data to toto1, please contact us immediately at support at toto1.cam. Upon confirmation, toto1 will promptly close the account and delete all associated Personal Data.

toto1 employs age verification technology during the registration process and requires KYC documentation confirming date of birth before processing any withdrawal. These measures are designed to prevent underage gambling and to protect minors from exposure to gambling content.

13 Policy Amendments

toto1 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our platform. Where material changes are made, toto1 will notify registered users via email or via a prominent in-platform notice prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the toto1 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must cease using the platform and may request closure of your account.

14 Contact & Complaints

For all privacy-related enquiries, data subject requests, or complaints regarding toto1's data processing practices, please contact us through the following channels. Email and contact details are displayed as plain text — please type them into your email client directly.

• Email: support at toto1.cam — please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on the toto1 platform, including Indonesian public holidays (Idul Fitri, Nyepi, Christmas, Indonesian Independence Day).
• Response Time: Privacy requests are acknowledged within 72 hours and resolved within 30 calendar days. Complex requests may take up to 90 days; we will notify you if an extension is required.
• Time Zone: Our support team operates on WIB (Western Indonesia Time, UTC+7).

If you are not satisfied with toto1's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.