Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, and use of personal information by toto28 ("we," "us," "our"), the online gaming platform accessible at https://toto28.cam. We recognize the importance of protecting the privacy and security of our users' personal data and are committed to maintaining the highest standards of data protection in compliance with international privacy regulations and best practices.

This policy applies to all users of toto28 services, including website visitors, registered account holders, and anyone who interacts with our platform. By using toto28, you acknowledge that you have read, understood, and agreed to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Any modifications will be effective immediately upon posting to our website. We encourage you to review this policy periodically to stay informed about how we protect your information.

2. Information We Collect

toto28 collects various types of information to provide, maintain, and improve our services, ensure security, comply with legal obligations, and deliver a personalized gaming experience. The information we collect includes:

2.1 Personal Identification Information

When you register an account with toto28, we collect the following personal information:

Full legal name as it appears on your government-issued identification
Date of birth to verify you meet the minimum age requirement of 21 years
Email address for account communication and notifications
Mobile phone number for account security and two-factor authentication
Residential address including street, city, province, and postal code in Indonesia
Government-issued ID such as Indonesian KTP (Kartu Tanda Penduduk) for identity verification
Proof of address documents such as utility bills or bank statements

2.2 Financial Information

To process deposits and withdrawals, we collect:

Bank account details including account holder name, bank name (BCA, BRI, BNI, Mandiri, etc.), and account number
E-wallet information such as OVO, DANA, GoPay, ShopeePay, or LinkAja account identifiers
Transaction history including deposit amounts, withdrawal requests, and transaction timestamps
Payment verification documents to confirm ownership of payment methods

2.3 Account and Gaming Activity

We automatically collect information about your use of toto28 services, including:

Login and session information including login timestamps, session duration, and logout activity
Betting history including all wagers placed, game types, stake amounts, outcomes, and winnings
Account balance and transaction records tracking all financial movements within your account
Bonus claims and usage documenting promotional offers accepted and wagering progress
Game preferences and favorites to personalize your experience
Customer support interactions including chat transcripts, email correspondence, and support tickets

2.4 Technical and Device Information

When you access toto28, we automatically collect technical data such as:

IP address and geographic location derived from your internet connection
Device information including device type, model, operating system, and browser type/version
Cookies and similar tracking technologies to enhance functionality and analyze usage patterns
Website navigation data including pages visited, time spent on pages, and clickstream data
Error logs and diagnostic information to troubleshoot technical issues

3. How We Use Your Information

toto28 uses the collected information for the following purposes:

3.1 Account Management and Service Delivery

To create, maintain, and manage your toto28 account
To verify your identity and age in compliance with legal requirements
To process deposits, withdrawals, and other financial transactions
To enable you to place bets, play games, and access all platform features
To track your account balance, betting history, and transaction records
To administer bonuses, promotions, and loyalty rewards

3.2 Security and Fraud Prevention

To protect against unauthorized access, fraud, and malicious activity
To detect and prevent money laundering, collusion, and other prohibited activities
To verify the legitimacy of payment methods and prevent chargebacks
To monitor for suspicious betting patterns or account abuse
To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations

3.3 Communication and Customer Support

To send important account notifications, security alerts, and service updates
To respond to your inquiries, complaints, and support requests
To provide customer assistance in Bahasa Indonesia via chat, email, or phone
To inform you about changes to our Terms & Conditions or Privacy Policy

3.4 Marketing and Personalization (With Your Consent)

To send promotional offers, bonus announcements, and special event notifications
To personalize your gaming experience based on your preferences and play history
To recommend games, betting markets, or features that may interest you
To conduct surveys and gather feedback to improve our services

Note: You can opt out of marketing communications at any time through your account settings or by contacting customer support. Opting out does not affect essential service communications.

3.5 Legal Compliance and Dispute Resolution

To comply with legal obligations, court orders, and regulatory requests
To enforce our Terms & Conditions and protect our rights and property
To resolve disputes, investigate complaints, and address potential violations
To maintain records as required by applicable gaming regulations

4. Information Sharing and Disclosure

toto28 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

4.1 Service Providers and Payment Processors

We share necessary information with trusted third-party service providers who assist in operating our platform, including:

Payment processors (banks, e-wallet providers) to facilitate deposits and withdrawals
Identity verification services to conduct KYC checks and prevent fraud
Game providers and software vendors to deliver casino games, sports betting, and other content
Cloud hosting and IT infrastructure providers to maintain platform security and performance
Customer support platforms to manage communications and resolve inquiries

All third-party service providers are contractually obligated to protect your information and use it only for the specific purposes for which it was disclosed.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, or regulatory bodies when required by law or when we believe in good faith that disclosure is necessary to:

Comply with legal obligations, court orders, or subpoenas
Respond to claims of illegal activity or violations of third-party rights
Protect the safety, rights, and property of toto28, our users, or the public
Investigate or prevent fraud, security breaches, or other unlawful conduct

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you of any such change and provide you with choices regarding your information if required by applicable law.

4.4 With Your Consent

We may share your information for purposes not described in this policy if you provide explicit consent at the time of collection.

5. Data Security Measures

toto28 employs industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks and financial institutions.
Secure Data Storage: Personal information is stored on secure servers with restricted access. Sensitive data such as passwords are hashed and salted using advanced cryptographic algorithms.
Access Controls: Only authorized personnel with a legitimate business need can access your personal information, and all access is logged and monitored.
Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses.
Employee Training: All toto28 staff undergo regular training on data protection, privacy best practices, and security protocols.
Segregated Player Funds: Financial information and player account balances are kept separate from operational accounts to ensure funds are protected.

While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect any unauthorized access to your account.

6. Data Retention

toto28 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Type	Retention Period
Account registration information	Duration of account + 7 years after closure
Transaction and betting history	7 years from transaction date
KYC verification documents	7 years after account closure
Customer support communications	3 years from last interaction
Marketing consent records	Until consent is withdrawn + 1 year
Technical logs (IP, device info)	12 months

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention and destruction policies. Some information may be retained in aggregated, anonymized form for statistical analysis and reporting purposes.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Access: You can request a copy of the personal information we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete personal information.
Right to Erasure: You can request deletion of your personal information, subject to legal retention requirements.
Right to Restrict Processing: You can request that we limit how we use your personal information in certain circumstances.
Right to Data Portability: You can request a copy of your data in a structured, commonly used format.
Right to Object: You can object to processing of your personal information for marketing purposes or based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time.

To exercise any of these rights, please contact our Data Protection Officer via email at [email protected]. We will respond to your request within 30 days. Please note that certain rights may be subject to limitations based on legal obligations or legitimate business interests.

8. Cookies and Tracking Technologies

toto28 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

8.1 Types of Cookies We Use

Essential Cookies: Required for basic platform functionality, including login authentication and security features. These cannot be disabled.
Performance Cookies: Collect anonymous usage data to help us understand how visitors interact with our website and identify areas for improvement.
Functionality Cookies: Remember your preferences, settings, and choices to provide a personalized experience.
Marketing Cookies: Track your activity to deliver relevant promotional content and measure campaign effectiveness (requires your consent).

8.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may affect your ability to use certain features of toto28. Consult your browser's help documentation for specific instructions on managing cookies.

9. Children's Privacy

toto28 services are strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or store personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and close the associated account.

Parents or guardians who believe their child has provided personal information to toto28 should contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

While toto28 primarily operates to serve the Indonesian market, your personal information may be transferred to, stored, and processed in countries outside Indonesia where our service providers and technology infrastructure are located. These countries may have data protection laws that differ from Indonesian regulations.

When we transfer your information internationally, we ensure appropriate safeguards are in place through contractual agreements, standard contractual clauses, or other legally approved transfer mechanisms to protect your data in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

toto28 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

Posting the updated policy on our website with a new "Last Updated" date
Sending an email notification to your registered email address
Displaying a prominent notice on the toto28 platform upon your next login

Your continued use of toto28 services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Email: [email protected]
Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
Live Chat: Available 24/7 through the toto28 website
Response Time: We aim to respond to all privacy-related inquiries within 72 hours

Our customer support team consists of native Bahasa Indonesia speakers who can assist you with privacy questions, data access requests, or account concerns in your preferred language.