Privacy Policy

1. Introduction

Welcome to toto86's Privacy Policy. This document explains how toto86 ("we," "us," "our") collects, uses, stores, protects, and discloses personal information from users ("you," "your") of our website located at https://toto86.cam and all related services. We are committed to protecting your privacy and handling your personal data in accordance with international data protection standards, including principles aligned with the General Data Protection Regulation (GDPR) and best practices for online gaming platforms.

By accessing or using toto86 services, you acknowledge that you have read, understood, and agree to the data collection and usage practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not use our services. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which govern your overall relationship with toto86.

We recognize that privacy is important to our Indonesian user base and are dedicated to maintaining transparency about our data practices. If you have any questions or concerns about how we handle your personal information, please contact us using the details provided at the end of this document.

2. Information We Collect

toto86 collects several categories of personal information to provide, maintain, and improve our services, ensure account security, comply with legal obligations, and prevent fraud. The types of information we collect include:

2.1 Information You Provide Directly

• Account Registration Information: When you create a toto86 account, we collect your full name, date of birth, email address, phone number, residential address, preferred username, and password. This information is required to establish and maintain your account.
• Identity Verification Documents: As part of our Know Your Customer (KYC) compliance requirements, we collect copies of government-issued identification documents such as your Indonesian Identity Card (Kartu Tanda Penduduk / KTP), passport, or driver's license. We may also collect selfie photographs, proof of address documents, and additional documentation to verify your identity and prevent fraud.
• Payment Information: We collect details of your Indonesian bank account (bank name, account number, account holder name) and e-wallet information (DANA, OVO, GoPay, ShopeePay, LinkAja account details) to process deposits and withdrawals. However, we do not store complete credit card numbers or CVV codes on our servers—payment card information is handled securely by our licensed payment processors.
• Communications: When you contact our customer support team via live chat, email, or phone, we collect and store the content of your communications, including transcripts, screenshots, and any attachments you provide. This helps us resolve your inquiries and improve our service quality.
• Voluntary Information: If you choose to participate in surveys, promotions, or provide feedback, we collect any information you voluntarily submit in those contexts.

2.2 Information Collected Automatically

• Transaction History: We automatically log all account activity including deposits, withdrawals, bets placed, games played, winnings, losses, bonus claims, and balance changes. This transactional data is essential for account management, fraud detection, and regulatory compliance.
• Device and Technical Information: When you access toto86, we collect information about your device including IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and device identifiers. This information helps us optimize our platform for different devices and detect suspicious activity.
• Usage Data: We collect information about how you interact with our website including pages visited, features used, time spent on pages, click patterns, navigation paths, referral sources, and search queries within our platform. This data helps us understand user behavior and improve the user experience.
• Location Information: We collect approximate geographic location data based on your IP address to comply with regional restrictions, offer localized content, and detect fraudulent access from unexpected locations. We do not track precise GPS location unless you explicitly grant permission through your device settings.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity. See Section 5 for detailed information about our cookie practices.

3. How We Use Your Information

toto86 uses the personal information we collect for the following legitimate business purposes:

• Account Management: To create, maintain, and secure your toto86 account; authenticate your identity when you log in; process your registration and KYC verification; and manage your account settings and preferences.
• Service Provision: To provide access to our online betting services including sports betting, casino games, slots, and togel lotteries; process deposits and withdrawals; calculate odds and settle bets; issue winnings; manage bonuses and promotions; and deliver the full range of toto86 features.
• Payment Processing: To facilitate secure financial transactions through our payment processors; verify the source of funds; prevent money laundering; and comply with financial regulations applicable to online gaming platforms.
• Communication: To send you account-related notifications including registration confirmation, deposit/withdrawal confirmations, bonus notifications, responsible gaming alerts, and important service updates; respond to your customer support inquiries; and send promotional communications about new games, bonuses, and features (you may opt out of marketing communications at any time).
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, identity theft, bonus abuse, collusion, and other violations of our Terms & Conditions; monitor for unusual betting patterns or suspicious account activity; and protect the integrity of our platform.
• Legal Compliance: To comply with applicable laws, regulations, and licensing requirements governing online gaming operations; respond to legal process including court orders, subpoenas, and government requests; and maintain records required by regulatory authorities.
• Platform Improvement: To analyze user behavior and preferences; conduct market research; test new features; optimize website performance; improve game offerings; and enhance the overall user experience on toto86.
• Responsible Gaming: To monitor gambling behavior for signs of problem gambling; enforce deposit limits and self-exclusion requests; provide responsible gaming tools and resources; and intervene when we detect potentially harmful gambling patterns.
• Dispute Resolution: To investigate and resolve disputes related to bets, transactions, bonus claims, or account issues; and maintain records necessary for fair dispute resolution.

4. Data Storage and Security

4.1 Security Measures

toto86 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and toto86 servers is encrypted using industry-standard 256-bit SSL/TLS encryption. Sensitive personal data and financial information stored on our servers are encrypted at rest using advanced encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized toto86 employees and contractors who require the information to perform their job functions. All personnel with data access are bound by strict confidentiality agreements and undergo background checks.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls including 24/7 surveillance, biometric access controls, and environmental protections. We employ firewalls, intrusion detection systems, and regular security audits to protect against cyber threats.
• Password Security: User passwords are stored using one-way cryptographic hashing with salt, meaning even toto86 employees cannot view your actual password. We enforce strong password requirements and encourage users to enable two-factor authentication (2FA) for additional account protection.
• Regular Security Audits: We conduct regular internal security reviews and engage independent third-party security firms to perform penetration testing and vulnerability assessments of our systems.
• Incident Response Plan: toto86 maintains a comprehensive data breach response plan. In the unlikely event of a security incident affecting your personal data, we will notify you promptly as required by applicable law and take immediate steps to mitigate any harm.

4.2 Data Storage Locations

Personal data collected by toto86 is stored on secure servers located in jurisdictions with strong data protection laws. While our primary servers are located outside Indonesia, we ensure that all data storage locations provide adequate protection for personal information consistent with international standards. Data transfers are conducted in compliance with applicable cross-border data transfer regulations.

5. Cookies and Tracking Technologies

toto86 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our platform and collect usage information. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information about your preferences and activity.

5.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function properly. They enable core features such as account login, session management, security, and payment processing. You cannot disable essential cookies as they are required for toto86 services to operate.
• Functional Cookies: These cookies remember your preferences and settings (such as language preference, currency selection, and layout choices) to provide a personalized experience. They are not essential but significantly enhance usability.
• Analytical Cookies: We use analytical cookies (including Google Analytics and similar services) to collect aggregated data about how visitors use our website. This helps us understand user behavior, identify popular features, detect technical issues, and improve our platform. Analytical cookies do not identify you personally.
• Marketing Cookies: With your consent, we may use marketing cookies to track your activity across different websites and deliver targeted advertising about toto86 promotions and offers. You can opt out of marketing cookies through your browser settings or our cookie preference center.

5.2 Managing Cookie Preferences

Most web browsers are set to accept cookies by default. You can modify your browser settings to block or delete cookies, but please note that disabling certain cookies may affect your ability to use some features of toto86. To manage cookies, access your browser's settings menu (usually found under "Privacy" or "Security" options). You can choose to accept all cookies, reject all cookies, or receive notifications when cookies are being set.

6. Third-Party Service Providers

To provide our services effectively, toto86 works with trusted third-party service providers who process personal information on our behalf. These third parties are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures. Third-party service providers we work with include:

• Payment Processors: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallets (DANA, OVO, GoPay, ShopeePay, LinkAja), we share necessary transaction information with licensed payment gateway providers. These providers are independently responsible for securing your financial information according to industry standards (PCI-DSS compliance).
• Game Providers: We partner with leading casino and slot game developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, etc.) to offer our game library. When you play games, limited information such as your username and gameplay data may be shared with these providers to facilitate game functionality and calculate results.
• Identity Verification Services: We use specialized KYC verification services to authenticate identity documents and detect fraudulent submissions. These services process the identification documents you submit during account verification but do not retain your data beyond the verification process.
• Customer Support Tools: We use live chat software and customer relationship management (CRM) systems to manage support inquiries. Your communications with our support team may be processed through these platforms.
• Marketing and Analytics Providers: With your consent, we may share anonymized or aggregated data with marketing analytics platforms to measure campaign effectiveness and improve our promotional strategies. We do not share personally identifiable information with marketing partners without your explicit consent.
• Cloud Service Providers: Our data storage infrastructure is hosted on secure cloud servers provided by reputable cloud computing companies. These providers maintain industry-leading security certifications and comply with international data protection standards.

toto86 carefully vets all third-party service providers to ensure they maintain adequate data protection practices. We do not sell, rent, or otherwise share your personal information with third parties for their own marketing purposes.

7. Data Retention and Deletion

toto86 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and applicable regulations:

• Active Account Data: While your account remains active, we retain all account information, transaction history, and gameplay records to provide ongoing services and comply with regulatory requirements.
• Closed Account Data: After you close your account, we retain certain personal information for a minimum period (typically 5-7 years) as required by anti-money laundering regulations, tax laws, and gaming license requirements. This includes identity documents, transaction records, and betting history.
• Marketing Data: If you have consented to receive marketing communications, we retain your contact information until you unsubscribe or request deletion, at which point we promptly remove you from our marketing lists (though we may retain a record of your opt-out preference to honor your request).
• Support Communications: Customer support communications are retained for quality assurance and training purposes, typically for 2-3 years after the last interaction.
• Legal and Compliance Data: Information required for legal compliance, dispute resolution, or ongoing investigations may be retained for longer periods as necessary to fulfill those obligations.

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you. Anonymized data (data that cannot be linked back to an individual) may be retained indefinitely for statistical analysis and business planning purposes.

8. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal information. toto86 respects these rights and provides mechanisms to exercise them. Your privacy rights may include:

• Right to Access: You have the right to request a copy of the personal information we hold about you. You can access much of this information directly through your account dashboard, or you may contact us to request a comprehensive data export.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most account information yourself through your account settings.
• Right to Erasure (Right to be Forgotten): Under certain circumstances, you may request that we delete your personal data. However, this right is not absolute—we may be required to retain certain information for legal or regulatory compliance purposes even after you request deletion.
• Right to Restrict Processing: You may request that we limit how we use your personal information in certain situations, such as while we verify the accuracy of disputed data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You may object to our processing of your personal information for direct marketing purposes at any time. You can unsubscribe from marketing emails using the link provided in each message or by contacting our support team.
• Right to Withdraw Consent: Where we process your personal data based on consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact us using the contact information provided in Section 12. We will respond to your request within 30 days. Please note that we may need to verify your identity before processing certain requests to protect your privacy and prevent unauthorized access.

9. Children's Privacy

toto86 services are intended exclusively for adults aged 21 years and older. We do not knowingly collect, use, or solicit personal information from individuals under the age of 21. Our registration process requires users to confirm they meet the minimum age requirement, and we conduct identity verification to enforce this policy.

If we become aware that we have inadvertently collected personal information from a person under 21 years of age, we will take immediate steps to delete that information from our systems and permanently close the associated account. Any funds in such accounts will be returned to the source, minus any winnings which will be forfeited in accordance with our Terms & Conditions.

Parents and guardians who believe their child may have provided personal information to toto86 should contact us immediately using the contact details in Section 12, and we will promptly investigate and take appropriate action.

10. International Data Transfers

toto86 operates internationally and may transfer personal data to countries outside of Indonesia, including to jurisdictions where data protection laws may differ from those in Indonesia. When we transfer personal information across borders, we implement appropriate safeguards to ensure your data receives adequate protection in compliance with applicable laws.

These safeguards include:

• Using data processing agreements with third-party service providers that include standard contractual clauses approved by relevant data protection authorities.
• Ensuring that data storage and processing facilities meet international security standards and certifications.
• Limiting cross-border transfers to only what is necessary for service provision and using encryption during data transmission.
• Conducting due diligence assessments of all jurisdictions where data is transferred to ensure adequate protection levels.

By using toto86 services, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Privacy Policy.

11. Changes to This Privacy Policy

toto86 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on our website homepage announcing the update.
• Sending an email notification to the address registered on your account (for significant changes affecting your rights).
• Updating the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of toto86 services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of our services and may request account closure.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected] (plain text only)
• Live Chat: Available 24/7 through the toto86 website (log in to your account and click the support icon)
• Subject Line for Privacy Inquiries: Please use "Privacy Policy Inquiry" or "Data Protection Request" in your email subject line to ensure prompt routing to the appropriate team.
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours for general questions and within 30 days for formal data subject rights requests.

For urgent account security matters (such as suspected unauthorized access or data breaches), please contact us immediately via live chat for the fastest response.