Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal information by toto21 when you access our website at https://toto21.world, create an account, deposit or withdraw funds, place bets, play games, or use any of our services. By using the toto21 platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

toto21 operates as an online gaming platform serving Indonesian players with casino games, sports betting including bandar bola (football bookmaker) markets on BRI Liga 1 and international leagues, slot gacor (high-payout slot games), togel (lottery), and sabung ayam (cockfighting) betting. To provide these services securely and in compliance with regulatory requirements, we must collect and process certain personal information as detailed in this policy.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of toto21 services. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using the platform and contact us to close your account.

2. Information We Collect

2.1 Personal Identification Information

When you register for a toto21 account, we collect personal identification information necessary to verify your identity, comply with Know Your Customer (KYC) regulations, prevent fraud, and process financial transactions. This information includes:

Full Legal Name: Your complete name as it appears on your Indonesian identification card (KTP).
Date of Birth: To verify that you meet the minimum age requirement of twenty-one (21) years.
Indonesian ID Number (KTP): Your unique government-issued identification number for identity verification.
Residential Address: Your current physical address including street, city, province, and postal code within Indonesia.
Email Address: A valid email address for account communications, security notifications, and customer support.
Mobile Phone Number: An Indonesian mobile number for account verification, two-factor authentication, and important notifications.
Identity Documents: Scanned or photographed copies of your Indonesian identification card (KTP) submitted during KYC verification.

2.2 Financial Information

To process deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we collect financial information including:

Bank account numbers and account holder names
E-wallet account identifiers and registered phone numbers
Transaction histories including deposit and withdrawal amounts, dates, and payment methods
Payment processor transaction reference numbers

We do not store complete credit card numbers, CVV codes, or full banking credentials on our servers. Payment processing is handled through secure, PCI-DSS compliant third-party payment processors. We retain only the minimum information necessary to facilitate transactions and comply with financial regulations.

2.3 Technical and Usage Information

When you access the toto21 platform, we automatically collect technical information to improve service quality, detect fraud, and enhance security. This includes:

IP addresses and geographic location data
Device information (type, model, operating system, browser version)
Session data (login times, logout times, session duration)
Pages visited, features used, and navigation patterns
Game play history including bets placed, games played, wins, and losses
Bonus claims and wagering progress
Customer support interactions and chat transcripts
Cookies and similar tracking technologies (see Section 6 below)

2.4 Communications

We retain records of all communications between you and toto21, including email correspondence, live chat transcripts, customer support tickets, and any other messages you send through our platform. These records help us provide better support, resolve disputes, and improve service quality.

3. How We Use Your Information

toto21 uses your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

Creating and maintaining your user account
Verifying your identity and age (21+ requirement) through KYC procedures
Processing deposits, withdrawals, and internal account transfers
Enabling you to place bets, play games, and use platform features
Managing bonuses, promotions, and loyalty program benefits
Calculating winnings, losses, and account balances
Maintaining accurate financial records and transaction histories

3.2 Security and Fraud Prevention

Detecting and preventing fraudulent activity, money laundering, and unauthorized access
Monitoring for prohibited activities including bonus abuse, multiple accounts, and collusion
Protecting against cyber attacks, malware, and security vulnerabilities
Verifying the authenticity of transactions and payment methods
Investigating suspicious behavior and resolving disputes

3.3 Legal and Regulatory Compliance

Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
Maintaining records required by gaming authorities and financial regulators
Responding to lawful requests from government agencies, law enforcement, or courts
Enforcing our Terms & Conditions and other policies
Protecting our legal rights and pursuing legal remedies when necessary

3.4 Customer Support and Communications

Responding to your inquiries via email, live chat, or other support channels
Providing technical assistance and troubleshooting issues
Sending transactional communications (account confirmations, withdrawal approvals, security alerts)
Notifying you of important policy changes or platform updates
Delivering promotional communications and bonus offers (with your consent, and you may opt out)

3.5 Platform Improvement and Analytics

Analyzing user behavior to improve website design, navigation, and features
Conducting research to understand Indonesian player preferences regarding games, betting markets, and payment methods
Testing new features and optimizing performance
Generating aggregated, anonymized statistics that do not identify individual users

4. Data Sharing and Disclosure

toto21 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform specific functions on our behalf, including payment processing (banks and e-wallet providers), identity verification services, fraud detection systems, customer support platforms, and technical infrastructure providers. These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures. Service providers have access only to the minimum information necessary to perform their functions.

4.2 Legal Obligations and Enforcement

We may disclose your personal information when required by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to comply with legal obligations, protect our rights or property, enforce our Terms & Conditions, investigate fraud, protect the safety of users or the public, or respond to government requests from law enforcement agencies or regulatory authorities.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving toto21, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change in ownership or control of your personal data, and you will have the opportunity to delete your account if you do not consent to the transfer.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized statistical information that does not identify individual users with business partners, advertisers, or the public. For example, we might publish statistics about the popularity of certain games, average bet sizes, or regional player distributions without revealing any personal information.

5. Data Security Measures

toto21 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Secure Sockets Layer (SSL) technology with 256-bit encryption.
Secure Storage: Personal information is stored on secure servers with restricted physical and digital access controls. Access is limited to authorized personnel who require the information to perform their job functions.
Password Protection: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text.
Two-Factor Authentication: We offer optional two-factor authentication (2FA) for additional account security.
Regular Security Audits: Our systems undergo regular security assessments, vulnerability scanning, and penetration testing by independent third parties.
Employee Training: All toto21 staff receive training on data protection practices and are bound by strict confidentiality agreements.
Intrusion Detection: We employ automated monitoring systems to detect and respond to suspicious activity, unauthorized access attempts, and potential security breaches.

While we implement robust security measures, no method of transmission over the internet or electronic storage is one hundred percent (100%) secure. We cannot guarantee absolute security, but we continuously work to enhance our security infrastructure and respond promptly to any identified vulnerabilities or incidents.

6. Cookies and Tracking Technologies

toto21 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember preferences, login sessions, and other information.

6.1 Types of Cookies We Use

Essential Cookies: Required for basic platform functionality including login authentication, session management, and security features. These cookies cannot be disabled without affecting site performance.
Functional Cookies: Enable enhanced features such as language preferences, username recall, and personalized settings.
Analytics Cookies: Help us understand how users interact with the platform by collecting anonymous data on page views, click patterns, and navigation paths.
Marketing Cookies: Used to deliver targeted promotional content and measure the effectiveness of marketing campaigns. These cookies may be disabled through your browser settings.

6.2 Managing Cookies

You can control cookie preferences through your web browser settings. Most browsers allow you to block or delete cookies, though doing so may impair certain platform features. Consult your browser's help documentation for instructions on managing cookies. Note that disabling essential cookies may prevent you from accessing certain parts of the toto21 platform.

7. Data Retention

toto21 retains your personal information for as long as your account remains active and for a reasonable period thereafter as required by law, regulatory obligations, and legitimate business purposes. Specific retention periods include:

Account Information: Retained for the duration of your active account and for seven (7) years after account closure to comply with financial record-keeping regulations.
Transaction Records: Maintained for seven (7) years to comply with anti-money laundering and tax reporting requirements.
KYC Documents: Stored for seven (7) years after account closure as required by regulatory authorities.
Game and Betting History: Retained for five (5) years for dispute resolution and auditing purposes.
Communications: Customer support records retained for three (3) years to maintain service quality and resolve disputes.

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer identify individual users. We may retain anonymized, aggregated data indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

As a toto21 user, you have certain rights regarding your personal information:

Right to Access: You may request a copy of the personal information we hold about you by contacting customer support.
Right to Correction: You may update or correct inaccurate personal information through your account settings or by contacting us.
Right to Deletion: You may request deletion of your account and associated personal information, subject to our legal retention obligations.
Right to Restrict Processing: You may request that we limit how we use your information in certain circumstances.
Right to Object: You may object to certain uses of your personal information, such as direct marketing.
Right to Data Portability: You may request a copy of your data in a structured, commonly used format.

To exercise these rights, please contact our Data Protection Team at [email protected] with your account details and specific request. We will respond within thirty (30) days and may require identity verification before processing your request. Note that exercising certain rights (such as deletion) may result in account closure and loss of access to toto21 services.

9. Children's Privacy

toto21 services are strictly intended for adults aged twenty-one (21) years and older. We do not knowingly collect personal information from individuals under the age of twenty-one. Our KYC verification procedures are designed to prevent underage registration. If we discover that we have inadvertently collected information from a minor, we will immediately delete the account and all associated data. Parents or guardians who believe their child has provided personal information to toto21 should contact us immediately at [email protected].

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside of Indonesia where our servers, service providers, or business partners are located. These countries may have different data protection laws than Indonesia. When we transfer your information internationally, we ensure that appropriate safeguards are in place through contractual agreements, data protection clauses, and compliance with international data protection standards. By using toto21, you consent to the transfer of your information to countries outside Indonesia as necessary to provide our services.

11. Updates to This Privacy Policy

toto21 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify users through email, platform notifications, or prominent announcements on the website. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Your continued use of toto21 services after any modification constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information and Data Protection Inquiries

If you have questions, concerns, or complaints about this Privacy Policy, our data handling practices, or wish to exercise your privacy rights, please contact our Data Protection Team:

Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Protection Request"
Live Chat: Available 24/7 through the toto21 platform
Response Time: We aim to respond to all privacy inquiries within 48-72 hours

Our customer support team is available in Indonesian and English to assist with all privacy-related matters. For formal data protection complaints or legal inquiries, please clearly state the nature of your concern and provide relevant account information to facilitate investigation.