toto10 Privacy Policy

1. Introduction

Welcome to the toto10 Privacy Policy (the "Policy"). This document explains how toto10 (the "Company", "Platform", "we", "us", or "our") collects, uses, stores, processes, shares, and protects the personal information of users (the "User", "Member", "Player", or "you") who access or use our online betting and gaming services at https://toto10.cam.

At toto10, we are committed to safeguarding your privacy and ensuring the security of your personal data. This Privacy Policy is designed to provide full transparency about our data practices and to help you understand your rights under applicable data protection laws. By creating an account on toto10, accessing our Platform, or using our services, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy.

This Privacy Policy forms an integral part of our Terms and Conditions. Any terms defined in the Terms and Conditions carry the same meaning when used in this Privacy Policy. If you do not agree with any provision of this Privacy Policy, you must immediately cease using the Platform and refrain from registering an account.

2. Information We Collect

toto10 collects various categories of personal information to provide, maintain, improve, and secure our services. The types of information we collect include:

2.1 Information You Provide Directly

When you register an account on toto10, you voluntarily provide the following information:

• Personal Identification: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number).
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code).
• Account Credentials: Username, password (stored in encrypted form using bcrypt hashing), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs), and transaction history.
• Identity Verification (KYC) Documents: Scanned copies or photographs of government-issued identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements dated within the last three months), and facial recognition photographs for identity matching.
• Communication Content: Messages sent to customer support via live chat, email, or other communication channels, including any attachments or screenshots you provide.

2.2 Information Collected Automatically

When you access or use toto10, we automatically collect certain technical and behavioral information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, device identifiers (IMEI, Android ID, Advertising ID).
• Connection Information: IP address, internet service provider (ISP), connection type (Wi-Fi, cellular), geolocation data derived from IP address (country, region, city-level accuracy).
• Usage Data: Pages visited, time spent on each page, clickstream data, referral URLs (where you came from before visiting toto10), exit URLs (where you go after leaving), search queries entered on the Platform.
• Betting and Gaming Activity: Bets placed (amount, market, odds, timestamp), games played (game name, provider, session duration, win/loss outcomes), deposit and withdrawal transactions (amount, payment method, timestamp, status), bonus claims and wagering progress.
• Cookies and Tracking Technologies: Session cookies (temporary, deleted when you close your browser), persistent cookies (remain on your device until expiration or manual deletion), functional cookies (remember your preferences like language or currency), analytics cookies (Google Analytics, Mixpanel, or similar services to measure site performance and user behavior).

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposit and withdrawal requests.
• Identity Verification Services: Data from third-party KYC verification providers that confirm your identity against government databases and watchlists (anti-fraud, sanctions screening, politically exposed persons checks).
• Affiliate Partners: If you accessed toto10 through an affiliate link, we may receive basic referral tracking data (affiliate ID, referral timestamp) but no personally identifiable information without your consent.
• Social Media Platforms: If you choose to link your social media account (Facebook, Twitter, Instagram) to your toto10 account, we may collect your public profile information (name, profile picture, email address) subject to the privacy settings you have configured on that platform.

3. How We Use Your Information

toto10 uses the personal information we collect for the following purposes:

3.1 To Provide and Maintain Services

• Create, manage, and authenticate your account.
• Process deposits, withdrawals, and internal account transfers.
• Enable you to place bets, play casino games, and participate in togel draws.
• Administer bonuses, promotions, loyalty rewards, and tournament entries.
• Track wagering requirements and bonus clearing progress.
• Generate and display your account balance, transaction history, and betting history.

3.2 To Comply with Legal and Regulatory Obligations

• Verify your identity and age (minimum 21 years) as required by our operating license and anti-money-laundering (AML) regulations.
• Conduct enhanced due diligence on high-value transactions or suspicious activity patterns.
• Maintain records of financial transactions for audit, tax, and regulatory reporting purposes.
• Respond to lawful requests from government authorities, law enforcement agencies, or court orders.
• Prevent, detect, and investigate fraud, money laundering, terrorist financing, bonus abuse, collusion, and other prohibited activities as defined in our Terms and Conditions.

3.3 To Improve and Personalize Services

• Analyze user behavior, preferences, and betting patterns to optimize Platform performance, user interface design, and game offerings.
• Personalize your experience by displaying recommended games, markets, or promotions based on your activity history.
• Conduct A/B testing to evaluate new features, layouts, or promotional campaigns.
• Monitor Platform uptime, load times, and technical performance to ensure reliability.

3.4 To Communicate with You

• Send transactional notifications via email or SMS regarding account registration, successful deposits/withdrawals, password resets, KYC verification status, and bonus activations.
• Provide customer support through live chat, email, or phone to resolve technical issues, payment inquiries, or account disputes.
• Send promotional communications (subject to your consent and opt-out preferences) about new games, special bonuses, tournament announcements, and platform updates.
• Conduct customer satisfaction surveys and request feedback on your experience with toto10.

3.5 To Promote Responsible Gaming

• Monitor account activity for signs of problem gambling behavior (excessive deposit frequency, long session durations, loss-chasing patterns).
• Enforce deposit limits, loss limits, session time limits, and self-exclusion settings that you configure in your account.
• Provide access to responsible gaming tools and resources, including links to professional support organizations.

3.6 For Marketing and Analytics

• Measure the effectiveness of marketing campaigns, advertising spend, and affiliate partnerships.
• Build aggregate user segmentation models (e.g., high-value players, sports betting enthusiasts, slot players) to deliver more relevant promotions.
• Generate statistical reports and anonymized data sets for internal business intelligence purposes.

4. How We Share Your Information

toto10 does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your information with the following categories of third-party service providers and partners under strict confidentiality and data protection agreements:

4.1 Payment Service Providers

We share your financial information (bank account details, e-wallet identifiers, transaction amounts) with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers operate under their own privacy policies and data protection standards.

4.2 Identity Verification (KYC) Providers

We share your name, date of birth, identification documents, and facial recognition photographs with third-party KYC verification services to confirm your identity, verify your age, and screen against fraud databases, sanctions lists, and politically exposed persons (PEP) watchlists.

4.3 Cloud Hosting and Infrastructure Providers

toto10 uses cloud hosting services (Amazon Web Services, Google Cloud Platform, or similar providers) to store data, host our Platform, and deliver content. These providers have access to encrypted data stored on their servers but are contractually prohibited from accessing, using, or disclosing your information for any purpose other than providing infrastructure services to toto10.

4.4 Game Providers and Software Vendors

When you play casino games, slots, or live dealer tables, your betting activity data (game name, bet amount, win/loss outcomes, session duration) is shared with the respective game provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Pocket Games Soft, etc.) for game operation, RNG validation, and session history tracking.

4.5 Customer Support and Communication Tools

We use third-party live chat software (Intercom, Zendesk, or similar platforms) and email service providers (SendGrid, Mailgun) to communicate with you. Your messages, contact information, and support ticket history may be stored on these platforms subject to their respective privacy policies.

4.6 Analytics and Marketing Platforms

We share anonymized or pseudonymized usage data with analytics providers (Google Analytics, Mixpanel, Hotjar, or similar services) to measure Platform performance, user engagement, and conversion rates. We may also share hashed email addresses or device identifiers with advertising networks (Google Ads, Facebook Ads) for retargeting campaigns, subject to your cookie consent preferences.

4.7 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulatory bodies, or courts when required by law, court order, subpoena, or other legal process. We may also disclose information when we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of toto10, our users, or the public.

4.8 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other business transaction involving toto10, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or a prominent notice on our Platform if such a transfer occurs, and the new entity will be required to honor the commitments made in this Privacy Policy.

5. Data Security and Protection

toto10 employs industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption

• TLS 1.3 Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit Transport Layer Security (TLS 1.3) protocol, ensuring that your login credentials, financial information, and personal data cannot be intercepted by third parties.
• Password Hashing: User passwords are never stored in plain text. We use bcrypt hashing with salt to protect your password, making it computationally infeasible for attackers to reverse-engineer the original password even if our database were compromised.
• Data-at-Rest Encryption: Sensitive data stored in our databases (KYC documents, financial records, transaction logs) is encrypted using AES-256 encryption to prevent unauthorized access to stored data.

5.2 Access Controls

• Access to personal data is restricted to authorized toto10 employees, contractors, and service providers who require access to perform their job functions (customer support, compliance, technical operations).
• All personnel with access to personal data are bound by confidentiality agreements and undergo regular data protection training.
• We implement role-based access control (RBAC) systems to ensure that individuals can only access the minimum data necessary to perform their duties.

5.3 Network Security

• Firewall protection and intrusion detection systems (IDS) monitor network traffic for suspicious activity and block unauthorized access attempts.
• Regular security audits, penetration testing, and vulnerability assessments are conducted by independent cybersecurity firms to identify and remediate potential weaknesses.
• Multi-factor authentication (MFA) is required for all administrative accounts with elevated privileges.

5.4 Data Breach Response

In the unlikely event of a data breach that compromises your personal information, toto10 will:

• Immediately investigate the scope, cause, and impact of the breach.
• Notify affected users via email within 72 hours of becoming aware of the breach, providing details about what information was compromised and steps you can take to protect yourself.
• Notify relevant regulatory authorities as required by applicable data protection laws.
• Implement additional security measures to prevent similar breaches in the future.

6. Data Retention

toto10 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account, plus 5 years after account closure to comply with anti-money-laundering (AML) regulations and financial audit requirements.
• Transaction Records: Retained for 7 years after the transaction date to comply with tax reporting and financial audit obligations.
• KYC Documents: Retained for 5 years after account closure as required by our operating license and AML regulations.
• Customer Support Communications: Retained for 3 years after the last interaction for quality assurance, training, and dispute resolution purposes.
• Marketing Communications: Retained until you withdraw consent or unsubscribe, after which your contact information is removed from marketing lists within 30 days.
• Anonymized Analytics Data: Retained indefinitely in aggregate, anonymized form for statistical analysis and business intelligence purposes.

Upon expiration of the applicable retention period, your personal information will be securely deleted or anonymized such that it can no longer be associated with you as an individual.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information toto10 holds about you. You may also request details about how we collect, use, and share your information. To exercise this right, contact us at [email protected] with your request. We will respond within 30 days.

7.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You can update certain information directly through your account settings, or contact customer support for assistance.

7.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may be required to retain certain information to comply with legal obligations (AML, tax reporting) even after you request deletion.

7.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in our emails, adjusting your account notification preferences, or contacting customer support.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We may require identity verification before processing your request to ensure we do not disclose information to unauthorized parties.

8. Cookies and Tracking Technologies

toto10 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content and advertising. A cookie is a small text file stored on your device that allows us to recognize your browser and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including session management, authentication, and security features. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language, currency, and display settings to provide a more personalized experience.
• Analytics Cookies: Collect aggregate usage data (page views, session duration, bounce rates) to help us understand how users interact with the Platform and identify areas for improvement. We use Google Analytics, Mixpanel, or similar services for this purpose.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These cookies may be set by third-party advertising networks (Google Ads, Facebook Ads).

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block all cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may limit your ability to use some features of the Platform, such as staying logged in or saving your preferences.

To opt out of Google Analytics tracking, visit the Google Analytics Opt-out Browser Add-on page.

9. Third-Party Links and Services

The toto10 Platform may contain links to third-party websites, services, or applications (e.g., payment processors, social media platforms, affiliate sites) that are not operated by toto10. This Privacy Policy does not apply to third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their data practices.

10. Children's Privacy

toto10 is intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that information and close the associated account. If you believe we have collected information from a minor, please contact us at [email protected].

11. International Data Transfers

toto10 operates internationally and may store or process your personal information in jurisdictions outside of Indonesia, including countries where our cloud hosting providers, payment processors, and third-party service providers are located. These jurisdictions may have different data protection laws than Indonesia.

When we transfer your personal information to other countries, we implement appropriate safeguards, such as standard contractual clauses, to ensure your data receives an adequate level of protection consistent with applicable data protection laws.

12. Changes to This Privacy Policy

toto10 reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will take effect immediately upon publication on this page, with the updated "Last Updated" date displayed at the top of the Policy.

If we make material changes that significantly affect how we collect, use, or share your personal information, we will notify you via email or through a prominent notice on the Platform. Continued use of toto10 after such changes constitutes acceptance of the revised Privacy Policy. It is your responsibility to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how toto10 handles your personal information, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform (login required)
• Customer Support Hours: 24 hours a day, 7 days a week, 365 days a year (WIB timezone)

Our Indonesian-speaking support team is available around the clock to assist you with privacy-related inquiries, data access requests, account security concerns, or any other questions you may have about how we protect your information.