Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how toto70 ("we", "us", "our", "the Company") collects, uses, stores, protects, and discloses personal information obtained from users ("you", "your", "Player") of the toto70 platform located at https://toto70.cam.

toto70 is committed to protecting your privacy and ensuring that your personal data is handled in accordance with international data protection laws, including principles aligned with the General Data Protection Regulation (GDPR) and other applicable privacy regulations. This Policy applies to all services offered on the toto70 platform, including sports betting (bandar bola or football bookmaking), online casino games, live dealer tables, slot machines, togel (traditional Indonesian lottery), and any other gaming products available now or in the future.

We recognize that Indonesian players value their privacy and expect transparency regarding data practices. This Policy is written in clear, accessible English to ensure you fully understand how your information is managed. Where technical or legal terms are necessary, we provide explanations in plain language.

2. Data Controller

The data controller responsible for your personal information is toto70, operating under its international gaming license. All inquiries regarding your personal data should be directed to our Data Protection Officer via the contact details provided in Section 15 of this Policy.

As the data controller, toto70 determines the purposes and means of processing your personal data and is responsible for ensuring compliance with applicable data protection laws.

3. Information We Collect

toto70 collects personal data necessary to provide our services, comply with legal obligations, and enhance user experience. The categories of data we collect include:

3.1 Account Registration Data

• Full legal name as it appears on your Indonesian identity documents
• Date of birth (to verify you are at least 21 years of age)
• Gender
• Residential address in Indonesia (street address, city, province, postal code)
• Valid Indonesian mobile phone number
• Email address
• Username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

• Government-issued identity document: Indonesian National Identity Card (KTP), passport, or driver's license (SIM)
• Proof of address: recent utility bill, bank statement, or government correspondence (issued within 3 months)
• Photograph or selfie for identity verification purposes
• Source of funds documentation (for high-volume accounts)

3.3 Financial Transaction Data

• Bank account details: account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI), account number
• E-wallet account details: OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers
• Cryptocurrency wallet addresses (Bitcoin, Ethereum, USDT)
• Deposit and withdrawal transaction history, amounts, timestamps, and payment methods
• Betting history: wagers placed, stakes, odds, outcomes, winnings, and losses

3.4 Technical and Usage Data

• IP address and geolocation data
• Device information: device type, operating system, browser type and version
• Login timestamps and session durations
• Pages visited, games played, features accessed
• Click-stream data and navigation patterns
• Cookie identifiers and tracking data (see Section 11)

3.5 Communication Data

• Live chat transcripts with customer support agents
• Email correspondence with toto70
• WhatsApp messages sent to our support team
• Feedback, surveys, and complaint submissions

4. How We Collect Your Data

We collect personal data through the following methods:

• Directly from you: When you register an account, submit KYC documents, make deposits or withdrawals, place bets, or communicate with our support team.
• Automatically: Through cookies, web beacons, and similar tracking technologies when you visit or interact with the toto70 platform (see Section 11 for details).
• From third parties: Payment processors (banks, e-wallet providers, cryptocurrency exchanges) provide transaction confirmation data. Identity verification services may provide fraud prevention and KYC validation data.

5. How We Use Your Personal Data

toto70 processes your personal data for the following purposes:

• Account Management: Creating and maintaining your player account, verifying your identity, and authenticating login credentials.
• Transaction Processing: Processing deposits, withdrawals, and internal account transfers. Recording betting transactions and calculating winnings.
• Regulatory Compliance: Fulfilling Know Your Customer (KYC) obligations, anti-money laundering (AML) screening, counter-terrorism financing (CTF) checks, and age verification to prevent underage gambling.
• Fraud Prevention: Detecting and preventing fraudulent activity, duplicate accounts, bonus abuse, collusion, and other prohibited conduct.
• Customer Support: Responding to inquiries, resolving disputes, and providing technical assistance.
• Platform Improvement: Analyzing usage patterns to improve user experience, optimize game selection, and develop new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and newsletters (only with your explicit consent, which you may withdraw at any time).
• Responsible Gaming: Monitoring betting behavior to identify signs of problem gambling and implementing protective measures such as deposit limits and self-exclusion.
• Legal Obligations: Complying with court orders, law enforcement requests, and legal disputes.

6. Legal Basis for Processing

Under international data protection law, toto70 must have a lawful basis to process your personal data. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and to provide the betting services you have requested.
• Legal Obligation: Processing is required to comply with legal duties such as KYC/AML regulations, tax reporting, and licensing requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, business analytics, and improving services, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit, freely given consent, which you may withdraw at any time.

7. Data Sharing & Disclosure

toto70 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (Indonesian banks, e-wallet providers, cryptocurrency payment gateways)
• Identity verification and KYC service providers
• Cloud hosting and data storage providers
• Customer support software providers
• Fraud detection and security monitoring services

These service providers are contractually bound to process your data only on our instructions and to maintain appropriate security measures. They are prohibited from using your data for their own purposes.

7.2 Legal Requirements

We may disclose your personal data if required by law, court order, or regulatory authority. This includes responding to law enforcement requests, complying with tax reporting obligations, and cooperating with investigations into illegal activity.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

7.4 With Your Consent

We may share your data with third parties if you provide explicit consent for a specific purpose not covered by this Policy.

8. Data Security Measures

toto70 employs industry-leading security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) protocol.
• Encrypted Data Storage: Personal data stored on our servers is encrypted at rest using Advanced Encryption Standard (AES-256).
• Firewall Protection: Multi-layered firewalls prevent unauthorized access to our network infrastructure.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their job function.
• Regular Security Audits: Independent third-party security firms conduct regular penetration testing and vulnerability assessments.
• Incident Response Plan: We maintain a comprehensive data breach response plan to minimize impact and ensure timely notification in the unlikely event of a security incident.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to maintaining security standards consistent with industry best practices.

9. Data Retention Period

toto70 retains personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations:

• Active Accounts: Personal data is retained for the duration of your active account relationship with toto70.
• Closed Accounts: After account closure, we retain certain data for up to 7 years to comply with financial record-keeping, tax reporting, and anti-money laundering regulations.
• KYC Documents: Identity verification documents are retained for at least 5 years after the account closure date as required by AML regulations.
• Transaction Records: Betting history, deposits, and withdrawals are retained for 7 years for auditing, dispute resolution, and regulatory compliance purposes.
• Marketing Data: If you have consented to receive marketing communications, your contact details are retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with data protection standards.

10. Your Privacy Rights

As a resident of Indonesia and a user of toto70, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 15. We will respond to your request within 30 days. Note that some requests may be subject to verification of your identity to prevent unauthorized disclosure of personal data.

11. Cookies & Tracking Technologies

toto70 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content.

11.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They enable the website to remember your preferences, login status, and browsing behavior.

11.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality such as secure login, session management, and account access. These cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymous usage data to help us understand how visitors interact with the platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language, currency, and display settings.
• Marketing Cookies: Used to deliver personalized promotional content and measure the effectiveness of marketing campaigns (only with your consent).

11.3 Managing Cookie Preferences

You can manage cookie settings through your browser preferences. Note that disabling essential cookies may affect platform functionality. Most browsers allow you to:

• View and delete cookies
• Block cookies from specific websites
• Block all cookies by default
• Delete cookies when you close the browser

12. International Data Transfers

toto70 operates under an international gaming license, and as such, your personal data may be transferred to and processed in countries outside Indonesia where our servers, service providers, or business partners are located.

When we transfer personal data internationally, we ensure adequate protection through:

• Contractual clauses requiring service providers to maintain data protection standards equivalent to those described in this Policy
• Transfer to countries recognized as providing adequate data protection under international standards
• Encryption of data in transit and at rest

By using toto70, you consent to the international transfer of your personal data in accordance with the safeguards outlined above.

13. Children's Privacy

toto70 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. If we discover that we have inadvertently collected data from a person under 21, we will delete that information immediately and close the associated account.

If you believe that a person under 21 has created an account on toto70, please contact us immediately using the details in Section 15.

14. Changes to This Privacy Policy

toto70 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to registered users via email or in-platform notification at least 14 days before the changes take effect.

The most current version of this Policy is always available on this page, with the "Effective Date" displayed at the top. Continued use of the platform after the effective date of any changes constitutes your acceptance of the revised Policy.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the toto70 platform

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please use our live chat service for immediate assistance.