Privacy Policy

1. Information We Collect

toto89 collects various categories of personal information to provide, maintain, and improve our services, ensure regulatory compliance, and protect against fraud. The information we collect includes:

1.1 Personal Identification Information

When you register an account on toto89, we collect the following personal identification data:

• Full Legal Name: As it appears on your Indonesian National ID (KTP) or other government-issued identification document.
• Date of Birth: To verify that you meet the minimum age requirement of 21 years as mandated by Indonesian gambling regulations and international responsible gaming standards.
• Residential Address: Your current physical address in Indonesia, including street address, city, province, and postal code.
• Email Address: Used for account communications, security notifications, promotional offers (if opted in), and customer support correspondence.
• Mobile Phone Number: Used for account verification, two-factor authentication (if enabled), withdrawal confirmations, and customer support contact.
• Nationality and Residency Status: To confirm eligibility to use our services under Indonesian and international online gambling regulations.

1.2 Know Your Customer (KYC) Documents

As part of our mandatory KYC verification process, we collect and store copies of the following documents:

• Government-Issued ID: Clear photograph or scan of your Indonesian National ID (KTP), passport, or driver's license showing your photograph, full name, date of birth, and ID number.
• Proof of Address: Recent utility bill, bank statement, or government-issued correspondence dated within the past 90 days, clearly showing your full name and current residential address.
• Selfie Verification: Photograph of you holding your government-issued ID next to your face, taken in good lighting to confirm your identity matches the submitted documents.

These documents are securely stored and used solely for identity verification, age verification, fraud prevention, and anti-money laundering (AML) compliance purposes.

1.3 Financial and Transaction Information

To process deposits and withdrawals, we collect and store the following financial data:

• Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), account holder name, and account number for Indonesian bank transfers.
• E-Wallet Information: Registered mobile number or account identifier for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions.
• Transaction History: Complete records of all deposits, withdrawals, bets placed, bonuses claimed, and account balance changes. This data is retained for regulatory compliance, dispute resolution, and internal auditing purposes.
• Payment Method Verification: We may request additional documentation to verify that the payment method used for deposits is registered in your legal name and that you are the authorized account holder.

1.4 Technical and Usage Data

When you access toto89, we automatically collect certain technical information through cookies, server logs, and analytics tools:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version (Chrome, Safari, Firefox, Edge), screen resolution, and device identifier.
• IP Address and Geolocation: Your Internet Protocol (IP) address and approximate geographic location (country, region, city) to verify compliance with territorial restrictions, detect suspicious login patterns, and prevent unauthorized account access.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to remember your login session, personalize your experience, analyze site usage patterns, and deliver targeted promotions. You may disable cookies in your browser settings, but this may limit certain platform functionalities.
• Browsing and Gameplay Behavior: Pages visited, time spent on each page, games played, bet amounts, win/loss patterns, and interaction with promotional content. This data helps us improve user experience, detect problem gambling patterns, and optimize platform performance.

1.5 Communications and Customer Support

When you contact toto89 customer support via live chat, email, or other channels, we collect and retain:

• The content of your messages, inquiries, complaints, or feedback.
• Timestamps and communication metadata (sender, recipient, channel used).
• Any attachments or screenshots you provide to illustrate your issue.

This information is used to resolve your inquiry, improve service quality, train support staff, and maintain a record for dispute resolution and regulatory compliance purposes.

2. How We Use Your Information

toto89 uses the personal information we collect for the following lawful purposes:

2.1 Account Management and Service Delivery

• Create, maintain, and manage your toto89 member account.
• Process deposits, withdrawals, and betting transactions in Indonesian Rupiah (IDR).
• Verify your identity, age, and residency status through KYC procedures.
• Provide access to sports betting, live casino, togel (lottery), slot gacor (slot games), sabung ayam (cockfighting), and other gaming products offered on our platform.
• Calculate and credit winnings, bonuses, and promotional rewards.

2.2 Legal and Regulatory Compliance

• Comply with Indonesian and international anti-money laundering (AML) regulations and counter-terrorism financing laws.
• Conduct due diligence checks to detect and prevent fraud, identity theft, payment fraud, and other illegal activities.
• Maintain transaction records and audit trails as required by gaming regulators and financial authorities.
• Respond to lawful requests from law enforcement, government agencies, and courts when legally obligated to do so.

2.3 Security and Fraud Prevention

• Monitor account activity for suspicious patterns that may indicate unauthorized access, account takeover, collusion, bonus abuse, or syndicate betting.
• Use IP address tracking, device fingerprinting, and behavioral analysis to detect and block fraudulent accounts and transactions.
• Implement security measures including SSL encryption, firewalls, and intrusion detection systems to protect your data from unauthorized access.
• Investigate and resolve disputes, chargebacks, and allegations of Terms & Conditions violations.

2.4 Customer Support and Communication

• Respond to your inquiries, complaints, and support requests via live chat, email, or phone.
• Send transactional notifications including deposit confirmations, withdrawal approvals, bonus activations, and security alerts.
• Provide account statements, transaction history reports, and responsible gaming alerts when requested or required.

2.5 Marketing and Promotions (With Consent)

If you have opted in to receive promotional communications, we may use your contact information to:

• Send email newsletters featuring new game releases, bonus offers, cashback promotions, and seasonal campaigns.
• Deliver personalized promotional offers based on your gameplay preferences and betting history.
• Notify you of special events, tournaments, and VIP-exclusive opportunities.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email or by contacting customer support. Please note that opting out of marketing emails does not affect transactional notifications, which are necessary for account management and security.

2.6 Platform Improvement and Analytics

• Analyze user behavior, game popularity, and betting trends to improve platform design, optimize game selection, and enhance user experience.
• Conduct A/B testing on website layouts, promotional offers, and user interface elements to determine the most effective configurations.
• Generate aggregated, anonymized reports on platform performance, user demographics, and market trends for internal strategic planning.

3. How We Share Your Information

toto89 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted third-party service providers and partners under the following circumstances:

3.1 Payment Processors and Financial Institutions

We share necessary financial information (bank account details, e-wallet identifiers, transaction amounts) with payment processors, banks, and e-wallet providers to facilitate deposits and withdrawals. These third parties are contractually bound to handle your data securely and use it only for processing your transactions.

3.2 Game Providers and Platform Vendors

When you play games from third-party providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming for slots and live casino; independent operators for togel and sabung ayam streams), limited account information (username, balance, bet amounts) is shared with these providers to deliver the gaming experience. These providers operate under strict data protection agreements.

3.3 KYC and Identity Verification Services

We may use third-party KYC verification services to authenticate your identity documents, cross-check government databases, and perform age verification checks. These services process your data solely for verification purposes and do not retain copies of your documents beyond the verification period.

3.4 Legal and Regulatory Authorities

toto89 may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government officials when:

• Required by law, court order, subpoena, or other legal process.
• Necessary to comply with anti-money laundering (AML) reporting obligations or counter-terrorism financing regulations.
• Reasonably necessary to protect our legal rights, property, or safety, or the rights, property, or safety of our users or the public.

3.5 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy involving toto89, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and/or prominent notice on our website of any change in ownership or control of your personal data.

4. Data Security Measures

toto89 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the same encryption standard used by banks and financial institutions.
• Secure Data Storage: Personal information and KYC documents are stored on secure servers with restricted access controls. Only authorized personnel with a legitimate business need can access sensitive data.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular security audits to prevent unauthorized access and cyberattacks.
• Regular Security Updates: We perform routine software updates, vulnerability assessments, and penetration testing to identify and remediate security weaknesses.
• Employee Training: All toto89 staff members with access to personal data receive regular training on data protection best practices, confidentiality obligations, and regulatory compliance requirements.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.

5. Data Retention

toto89 retains your personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, enforce our agreements, and maintain records for regulatory audits.

• Active Accounts: While your account remains active, we retain all personal information, transaction history, and KYC documents.
• Closed Accounts: After account closure (whether initiated by you or by toto89), we retain your data for a minimum of 5 years to comply with Indonesian and international financial record-keeping regulations, anti-money laundering laws, and gaming industry standards.
• Marketing Data: If you opt out of marketing communications, we will retain your contact information on a suppression list to ensure we do not inadvertently send you promotional emails in the future.
• Legal Obligations: In certain cases, we may be required to retain data beyond the standard retention period due to ongoing legal proceedings, regulatory investigations, or contractual obligations.

Once the retention period expires and there is no longer a legal or business need to retain your data, we will securely delete or anonymize your personal information in accordance with data protection best practices.

6. Your Privacy Rights

As a toto89 member, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To request access, contact our customer support team via live chat or email ([email protected]). We will provide the requested information in a commonly used electronic format within 30 days of your request, subject to identity verification.

6.2 Right to Rectification

If any of your personal information is inaccurate, incomplete, or outdated, you have the right to request correction or update. You can update certain account details (email address, mobile phone number) directly in your account settings. For changes to your legal name or residential address, please contact customer support with supporting documentation.

6.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw your consent. However, we may decline erasure requests if we are legally required to retain the data for regulatory compliance, fraud prevention, or dispute resolution purposes. To request erasure, close your account and contact customer support.

6.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively use it except with your consent or for legal purposes.

6.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider without hindrance from toto89. This right applies only to data you have directly provided to us and that we process based on your consent or to fulfill our contract with you.

6.6 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests. To exercise this right, opt out via the unsubscribe link in promotional emails or contact customer support.

6.7 Right to Withdraw Consent

Where we process your data based on your consent (e.g., marketing communications, optional data collection), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our customer support team. We will respond to your request within 30 days, subject to identity verification to ensure your data is released only to you.

7. Cookies and Tracking Technologies

toto89 uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. By continuing to use toto89, you consent to our use of cookies as described below.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including login session management, security authentication, and load balancing. These cookies cannot be disabled without severely impacting your ability to use toto89.
• Performance Cookies: Collect information about how you use the platform, such as pages visited, time spent on site, and error messages encountered. This data helps us identify and fix technical issues and improve overall performance.
• Functionality Cookies: Remember your preferences (e.g., language selection, favorite games, display settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: Track your browsing behavior across toto89 and, in some cases, across other websites to deliver targeted promotional content and measure the effectiveness of our marketing campaigns.

7.2 Managing Cookie Preferences

Most web browsers automatically accept cookies by default. You can modify your browser settings to decline cookies or to alert you when a website is attempting to place a cookie on your device. Please note that disabling cookies may prevent you from accessing certain features of toto89, including account login and betting functionality. Consult your browser's help documentation for instructions on managing cookies.

8. Third-Party Links

toto89 may contain links to third-party websites, including payment processors, game providers, and responsible gaming resources. These third-party sites have their own privacy policies and data practices, which are not governed by this Privacy Policy. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

toto89 is an adult-only platform. We do not knowingly collect personal information from individuals under the age of 21. Our registration process includes mandatory age verification, and users must confirm they are at least 21 years old to create an account. If we become aware that we have inadvertently collected data from a person under 21, we will immediately delete the account and all associated data. If you believe a minor has registered on toto89, please contact us immediately.

10. Changes to This Privacy Policy

toto89 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the revised Privacy Policy on this page with an updated "Last Updated" date and, where appropriate, by sending an email notification to the address associated with your account. Your continued use of toto89 after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (plain text only)
• Live Chat: Available 24/7 via the toto89 platform

We will respond to all privacy-related inquiries within 30 days.