Privacy Policy

1. Introduction

Welcome to the toto99 Privacy Policy. This document outlines our practices regarding the collection, use, storage, and protection of personal information provided by users of the toto99 online betting platform, accessible at https://toto99.best. By creating an account and using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

toto99 recognizes the importance of privacy in the digital age and is committed to complying with applicable data protection laws and international privacy standards. We implement robust technical and organizational measures to ensure your personal data is processed lawfully, fairly, and transparently.

This Privacy Policy applies to all users of toto99, including residents of Indonesia and international players accessing our platform. If you do not agree with any aspect of this Privacy Policy, please do not register an account or use our services.

2. Data Controller Information

For the purposes of applicable data protection legislation, toto99 acts as the data controller responsible for your personal information. As the data controller, we determine the purposes and means of processing your personal data.

Contact Information:

• Platform Name: toto99
• Website: https://toto99.best
• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Data Protection Officer using the email address provided above.

3. Information We Collect

toto99 collects various types of personal information to provide, maintain, and improve our online betting services. The categories of data we collect include:

3.1 Information You Provide Directly

When you register an account with toto99, you voluntarily provide the following personal information:

• Identity Data: Full legal name (as it appears on your KTP - Indonesian National Identity Card), date of birth, gender, nationality, and government-issued identification number.
• Contact Data: Email address, mobile phone number, residential address (street, city, province, postal code).
• Account Credentials: Username, password (encrypted), and security questions/answers.
• Verification Documents: Copies of government-issued ID (KTP or passport), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and proof of payment method ownership.
• Financial Data: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account numbers), credit/debit card information (processed securely by our payment partners—we do not store full card numbers).
• Communication Data: Messages sent to customer support, feedback forms, complaints, and any other correspondence with toto99.

3.2 Information Collected Automatically

When you access and use the toto99 platform, we automatically collect certain technical and usage data:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, navigation paths, click patterns, referring/exit pages, date and time stamps of visits, and features used.
• Gambling Activity Data: Betting history, wager amounts, game types played, win/loss records, bonus usage, deposit and withdrawal transactions, and session duration.
• Location Data: Approximate geographic location derived from IP address (country, region, city-level). We do not collect precise GPS location data unless you explicitly grant permission on mobile devices.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies that store preferences and track usage patterns. See Section 10 for detailed cookie information.

3.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and international card networks (Visa, Mastercard).
• Identity Verification Services: Age and identity verification results from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance providers.
• Game Providers: Technical game data from our casino game suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetENet, etc.) related to game outcomes and RNG (Random Number Generator) verification.
• Fraud Prevention Partners: Risk scores and fraud alerts from specialized security firms that help us detect and prevent fraudulent account activity.

4. How We Use Your Information

toto99 uses your personal information for the following purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Processing account registration and KYC verification
• Enabling you to place bets, play casino games, and access all platform features
• Processing deposits, withdrawals, and financial transactions
• Managing bonus eligibility, wagering requirements, and promotional offers
• Providing customer support and responding to inquiries

4.2 Legal and Regulatory Compliance

• Verifying your age (21+ requirement) and identity to comply with gambling regulations
• Conducting KYC and AML checks to prevent money laundering and terrorist financing
• Detecting and preventing fraudulent activity, account abuse, and bonus exploitation
• Enforcing our Terms and Conditions and investigating violations
• Complying with legal obligations, court orders, and requests from regulatory authorities
• Maintaining responsible gaming protections, including monitoring for problem gambling indicators

4.3 Platform Improvement and Analytics

• Analyzing user behavior and betting patterns to improve platform functionality
• Conducting statistical analysis and market research to understand user preferences
• Testing new features and optimizing user experience
• Monitoring platform performance, uptime, and technical issues
• Improving security measures and fraud detection algorithms

4.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and personalized recommendations (only if you have consented)
• Communicating important account updates, policy changes, and service announcements
• Conducting customer satisfaction surveys and collecting feedback
• Displaying targeted advertising based on your interests and betting activity (you can opt out)

You have the right to object to marketing communications at any time by adjusting your preferences in your account settings or by contacting customer support.

5. Legal Basis for Processing

Under applicable data protection laws, toto99 must have a legal basis to process your personal information. We rely on the following legal grounds:

5.1 Contractual Necessity

Processing your personal data is necessary to perform our contract with you (the Terms and Conditions you agreed to when creating your account). Without processing your identity, financial, and gambling activity data, we cannot provide our online betting services.

5.2 Legal Obligation

We are legally required to process certain personal data to comply with gambling regulations, anti-money laundering laws, age verification requirements, and tax obligations. This includes KYC verification, transaction monitoring, and record-keeping mandated by regulatory authorities.

5.3 Legitimate Interests

We process some data based on our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and direct marketing (where you have not objected). We carefully balance our legitimate interests against your privacy rights and only process data in ways you would reasonably expect.

5.4 Consent

For certain processing activities (such as optional marketing communications, personalized advertising, or non-essential cookies), we rely on your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Disclosure

toto99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for legitimate business and legal reasons:

6.1 Service Providers and Partners

• Payment Processors: Banks, e-wallet providers, and card networks to facilitate deposits and withdrawals.
• Game Providers: Casino game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Playtech, Ezugi, Spribe, etc.) to deliver game content and verify outcomes.
• KYC and Fraud Prevention Services: Identity verification providers and fraud detection firms to comply with AML regulations and protect against account abuse.
• IT and Cloud Hosting Providers: Companies providing server infrastructure, database management, cybersecurity, and technical support.
• Customer Support Platforms: Live chat, email, and ticketing systems used by our customer service team.
• Marketing and Analytics Tools: Platforms for email marketing, advertising, and usage analytics (only with your consent for marketing purposes).

All third-party service providers are contractually bound to process your data only as instructed by toto99, maintain confidentiality, and implement appropriate security measures.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, tax authorities, or courts when required by law, court order, subpoena, or legal process. This includes compliance with anti-money laundering investigations, gambling license audits, and criminal investigations.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy involving toto99, your personal data may be transferred to the successor entity or acquiring party, subject to the same privacy protections outlined in this Privacy Policy.

6.4 With Your Consent

We may share your information with other third parties if you provide explicit consent for specific purposes not covered above.

7. Data Security Measures

toto99 implements industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security Controls

• SSL/TLS Encryption: All data transmission between your device and our servers uses 256-bit SSL (Secure Sockets Layer) encryption, the same standard used by banks.
• Data-at-Rest Encryption: Personal data stored in our databases is encrypted using AES-256 (Advanced Encryption Standard) encryption.
• Firewall Protection: Multi-layer firewalls protect our servers from external threats and unauthorized access attempts.
• Intrusion Detection Systems: Real-time monitoring detects and blocks suspicious network activity, hacking attempts, and DDoS attacks.
• Secure Payment Processing: Financial data is processed via PCI DSS (Payment Card Industry Data Security Standard) compliant payment gateways. We do not store full credit card numbers on our servers.
• Password Security: User passwords are hashed using bcrypt or similar strong one-way cryptographic hashing algorithms—even toto99 staff cannot view your actual password.
• Two-Factor Authentication (2FA): Optional 2FA adds an extra security layer to your account login.

7.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized toto99 employees and contractors who require access to perform their duties. Access is granted on a need-to-know basis.
• Confidentiality Agreements: All employees and contractors sign strict confidentiality and non-disclosure agreements.
• Security Training: Staff receive regular training on data protection, phishing prevention, and security best practices.
• Regular Security Audits: Independent third-party security firms conduct annual penetration testing and vulnerability assessments to identify and remediate weaknesses.
• Incident Response Plan: We maintain a documented data breach response procedure to quickly detect, contain, and report any security incidents.
• Vendor Security Reviews: All third-party service providers undergo security due diligence before being granted access to any personal data.

7.3 User Responsibility

While toto99 implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication for enhanced security
• Log out after each session, especially on shared or public devices
• Do not click suspicious links in emails claiming to be from toto99 (we never ask for passwords via email)
• Immediately report any suspicious account activity to customer support

Despite our best efforts, no online platform can guarantee 100% security. If a data breach occurs, we will notify affected users and relevant authorities as required by applicable data protection laws.

8. Data Retention Period

toto99 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Active Account Data

While your account remains active, we retain all associated personal data to provide ongoing service, maintain transaction history, and comply with regulatory record-keeping requirements.

8.2 Closed Account Data

If you close your account voluntarily or your account is closed by toto99, we retain your personal data for a minimum of 7 years from the date of account closure. This retention period is mandated by:

• Anti-money laundering (AML) regulations requiring financial transaction records
• Gambling license conditions requiring audit trails and player history
• Tax and accounting regulations requiring financial documentation
• Potential legal claims and dispute resolution (statute of limitations periods)
• Fraud prevention and security investigations

8.3 Deletion After Retention Period

After the mandatory retention period expires, personal data is securely and permanently deleted or anonymized so it can no longer be associated with you as an individual. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8.4 Marketing Data

If you opt out of marketing communications, we will cease sending promotional messages but will retain a record of your opt-out preference to ensure we do not contact you again. This opt-out record is retained indefinitely.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 How to Exercise Your Rights

To exercise any of these privacy rights, contact our Data Protection Officer at [email protected] or use the contact form in your account settings. Please include:

• Your full name and toto99 username
• A clear description of the right you wish to exercise
• Proof of identity (to prevent unauthorized access to your data)

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days and will inform you of the extension.

9.2 Right to Complain

If you believe toto99 has not handled your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. However, we encourage you to contact us first so we can address your concerns directly.

10. Cookies and Tracking Technologies

toto99 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They contain information such as site preferences, login status, and browsing history. Cookies do not contain viruses and cannot access other files on your device.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality, including authentication, security, and fraud prevention. These cannot be disabled without severely limiting platform usability.
• Performance Cookies: Collect anonymous data about how users interact with our platform, helping us identify technical issues and improve performance.
• Functional Cookies: Remember your preferences (language, currency, display settings) to personalize your experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. These require your consent and can be disabled in cookie settings.

10.3 Managing Cookie Preferences

You can manage cookie preferences through your browser settings or our cookie consent banner when you first visit toto99. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling cookies may limit some platform features.

For more information about cookies and how to manage them, visit www.aboutcookies.org or www.allaboutcookies.org.

11. International Data Transfers

The toto99 platform operates internationally, and your personal data may be transferred to, stored, or processed in countries outside Indonesia. These countries may have data protection laws that differ from Indonesian regulations.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Data processing agreements requiring recipients to maintain equivalent data protection standards
• Transfers to countries recognized as providing adequate data protection

By using toto99, you acknowledge and consent to the transfer of your personal data outside Indonesia for the purposes described in this Privacy Policy.

12. Protection of Minors

toto99 strictly prohibits use of our platform by individuals under 21 years of age. We do not knowingly collect personal information from minors.

During account registration and verification, we require age verification via government-issued identification (KTP or passport). If we discover that a user is under 21, we will immediately close the account, void all bets, and refund deposits (minus any winnings).

Parents and guardians are encouraged to monitor their children's internet usage. We recommend using parental control software to prevent minors from accessing online gambling sites.

If you believe a minor has provided personal information to toto99, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

toto99 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the policy was last revised.

We will notify users of material changes via email or prominent notice on the toto99 platform. Continued use of our services after such notification constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or toto99's data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 72 hours

For general customer support inquiries unrelated to privacy, contact [email protected] or use our 24/7 live chat service.