Privacy Policy

1. Introduction

Welcome to toto11's Privacy Policy. This document governs the collection, use, storage, and protection of personal data provided by users of toto11.cam (the "Website" or "Platform"). By creating an account, placing a bet, or otherwise using toto11's services, you consent to the data practices described in this Privacy Policy.

toto11 ("we", "us", or "our") is an online betting platform operating under an international gaming license. We are committed to protecting your privacy and handling your personal data responsibly in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) principles and Indonesian data protection regulations where applicable.

This Privacy Policy should be read in conjunction with our Terms and Conditions. If you have any questions or concerns about how we handle your data, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Information We Collect

toto11 collects and processes several categories of personal data to provide, maintain, and improve our services, comply with legal obligations, and protect the security and integrity of our platform.

2.1 Information You Provide Directly

When you register for a toto11 account, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., e-KTP number for Indonesian residents)
• Contact Information: Email address, phone number, and residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details (account holder name, bank name, account number), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), and transaction history
• Verification Documents: Copies of government-issued photo identification (e-KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for facial recognition verification as part of our Know Your Customer (KYC) procedures
• Communication Records: Correspondence with customer support, including live chat transcripts, email communications, and any other messages sent through our platform

2.2 Information Collected Automatically

When you access and use toto11, certain information is collected automatically through cookies, server logs, and other tracking technologies:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers (MAC address, IMEI for mobile devices)
• Usage Data: Pages visited, time spent on each page, click patterns, navigation paths, referral URLs, search queries within the site, games played, bet amounts, bet outcomes, session duration, and timestamps of all activities
• Location Data: Approximate geographic location derived from your IP address to verify Indonesian residency and comply with geo-restriction requirements
• Cookie Data: Session identifiers, preferences, authentication tokens, and marketing attribution data (see Section 6 for detailed cookie information)

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment success/failure status, and fraud-prevention screening results from our payment gateway partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay providers)
• Identity Verification Services: Enhanced due diligence data from third-party KYC verification providers to confirm your identity and detect fraudulent documents
• Game Providers: Gameplay data, bet history, and game outcome records from our casino, slot, and sports betting platform providers (Evolution Gaming, Pragmatic Play, etc.)
• Marketing Partners: Referral source data and campaign attribution information from affiliate networks (only with your prior consent)

3. How We Use Your Data

toto11 processes your personal data for the following specific purposes, each of which is based on a lawful legal basis under applicable data protection laws:

3.1 Account Management and Service Delivery

We use your personal data to create and maintain your toto11 account, process your bets, settle winnings, and provide customer support. This includes:

• Registering and authenticating your account
• Processing deposits and withdrawals via your chosen payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Recording bet placements and calculating payouts for sports betting, live casino, togel draws, sabung ayam streams, and slot games
• Providing access to account history, transaction logs, and betting records
• Responding to customer support inquiries via live chat and email

Legal Basis: Performance of contract (necessary to provide the services you have requested).

3.2 Legal and Regulatory Compliance

As a licensed online betting operator, toto11 is subject to strict regulatory obligations. We use your data to:

• Verify your identity, age (21+ requirement), and Indonesian residency through KYC procedures
• Comply with anti-money laundering (AML) regulations, including monitoring transaction patterns for suspicious activity and filing Suspicious Activity Reports (SARs) if required
• Detect and prevent fraud, including multi-accounting, bonus abuse, collusion, and use of stolen payment methods
• Respond to lawful requests from regulatory authorities, law enforcement agencies, and courts in Indonesia or the licensing jurisdiction
• Maintain records required by gaming regulations (typically 5–7 years depending on jurisdiction)

Legal Basis: Legal obligation (required by law and our gaming license conditions).

3.3 Security and Fraud Prevention

We process your data to protect the security and integrity of our platform and prevent unauthorized access, fraudulent activity, and criminal conduct:

• Monitoring account activity for unusual patterns (e.g., sudden large deposits, rapid bet placement, access from unusual locations)
• Detecting bot activity, account takeover attempts, and credential stuffing attacks
• Identifying multi-accounting and bonus abuse schemes through device fingerprinting and behavioral analysis
• Screening payment transactions for signs of money laundering or use of stolen financial information
• Enforcing responsible gaming limits and self-exclusion requests

Legal Basis: Legitimate interests (protecting our business and users from fraud and maintaining platform security).

3.4 Product Improvement and Analytics

We analyze aggregated and anonymized usage data to improve our services, optimize user experience, and develop new features:

• Analyzing which games and betting markets are most popular among Indonesian users
• Identifying technical issues, page load errors, and usability problems
• Conducting A/B testing on interface designs and feature placements
• Understanding peak usage times to optimize server capacity and customer support staffing

Legal Basis: Legitimate interests (improving our services and optimizing business operations).

3.5 Marketing Communications (Opt-In Only)

With your explicit consent, we may use your email address and phone number to send promotional communications about:

• New bonuses, free bets, and cashback offers
• Seasonal promotions tied to Indonesian holidays (Idul Fitri, Ramadhan, Independence Day, Imlek)
• New game launches and exclusive tournaments
• VIP tier upgrades and personalized account manager assignments

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by contacting customer support. Even if you opt out of marketing, we will still send transactional emails (deposit confirmations, withdrawal notifications, account security alerts) as these are essential to our service.

Legal Basis: Consent (you explicitly agree to receive marketing communications, and you can withdraw consent at any time).

4. Data Sharing and Disclosure

toto11 does not sell your personal data to third parties. However, we may share your data with trusted service providers and partners in the following limited circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: We share necessary financial information with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• KYC Verification Providers: We share identity documents and personal information with third-party verification services to confirm your identity, detect fraudulent documents, and comply with AML regulations.
• Game Providers: We share betting activity and gameplay data with our casino, slot, and sports betting platform partners (Evolution Gaming, Pragmatic Play, Spribe, Microgaming, NetEnt, etc.) to deliver game content and settle bets.
• Customer Support Tools: We use third-party live chat software and ticketing systems to provide customer support. Support agents may access your account information to resolve inquiries.
• Cloud Infrastructure Providers: We store data on secure cloud servers operated by reputable providers. All data is encrypted at rest and in transit.

All third-party service providers are contractually bound to protect your data, use it only for the specified purpose, and maintain confidentiality in accordance with data protection laws.

4.2 Legal Obligations and Law Enforcement

We may disclose your personal data if required to do so by law or in response to:

• Lawful requests from regulatory authorities (gaming commissions, financial regulators)
• Court orders, subpoenas, or legal processes
• Law enforcement investigations into criminal activity (fraud, money laundering, terrorism financing)
• Requests from tax authorities (Indonesian Directorate General of Taxation)

toto11 will only disclose the minimum amount of data necessary to comply with the legal request.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. You will be notified of any such change and given the opportunity to delete your account before the transfer if you do not wish your data to be transferred.

5. Data Security Measures

toto11 employs industry-leading security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

Despite our robust security measures, no system is 100% secure. You also have a responsibility to protect your account by using a strong, unique password, not sharing your credentials, and logging out after each session, especially on shared devices.

6. Cookies and Tracking Technologies

toto11 uses cookies and similar tracking technologies to enhance your experience, remember your preferences, and analyze platform usage. A cookie is a small text file stored on your device by your web browser.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot disable these cookies without losing core functionality.
• Performance Cookies: Collect anonymous data about how users interact with toto11, such as which pages are most visited and where errors occur. This helps us improve site performance.
• Functional Cookies: Remember your preferences (language selection, bet slip settings, favorite games) so you don't have to re-enter them each visit.
• Marketing Cookies: Track your browsing behavior to deliver personalized advertisements and measure campaign effectiveness. These cookies are only set with your explicit consent.

6.2 Managing Cookies

You can control cookie settings through your web browser. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will prevent you from logging into your toto11 account and using our services. Instructions for managing cookies in popular browsers:

• Google Chrome: Settings › Privacy and Security › Cookies and other site data
• Mozilla Firefox: Settings › Privacy & Security › Cookies and Site Data
• Safari: Preferences › Privacy › Manage Website Data
• Microsoft Edge: Settings › Cookies and site permissions

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of all personal data we hold about you. We will provide this in a structured, machine-readable format (e.g., PDF or CSV) within 30 days.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you can request that we correct or update it. You can update most information directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data. However, we may be legally required to retain certain data for regulatory compliance (e.g., transaction records must be kept for 5–7 years under AML laws).
• Right to Restrict Processing: You can ask us to temporarily restrict processing of your data in certain circumstances (e.g., if you dispute the accuracy of the data).
• Right to Data Portability: You can request that we transfer your data to another service provider in a portable format.
• Right to Object: You can object to processing of your data for marketing purposes or based on legitimate interests. We will stop processing unless we have compelling legal grounds to continue.
• Right to Withdraw Consent: If we process your data based on consent (e.g., marketing emails), you can withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe we have mishandled your data, you can file a complaint with the relevant data protection authority in Indonesia or the licensing jurisdiction.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your account username and a description of your request. We will respond within 30 days.

8. Data Retention

toto11 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations:

• Active Account Data: We retain your account information, transaction history, and bet records while your account is active and for a period after closure as required by law.
• KYC Documents: Identity verification documents are retained for 7 years after account closure to comply with anti-money laundering regulations.
• Transaction Records: Financial transaction data (deposits, withdrawals, bet settlements) is retained for 7 years for tax, audit, and regulatory purposes.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not contact you again.
• Closed or Inactive Accounts: Accounts inactive for 12 consecutive months may be closed and data deleted, subject to regulatory retention requirements.

After the retention period expires, personal data is securely deleted or anonymized so it can no longer be linked to you.

9. Children's Privacy

toto11 is an adult-only gambling platform. Our services are strictly prohibited for individuals under the age of 21. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from someone under 21, we will immediately delete the account and all associated data.

If you are a parent or guardian and believe your child has created a toto11 account, please contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

toto11 operates internationally and may transfer your personal data to servers and third-party service providers located outside Indonesia. All international data transfers are conducted in accordance with applicable data protection laws and are protected by appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Data processing agreements requiring service providers to maintain equivalent data protection standards
• Encryption of data in transit and at rest

Your data may be processed in jurisdictions with different data protection laws than Indonesia. By using toto11, you consent to these international transfers.

11. Policy Updates

toto11 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any material changes will be communicated to you via email or a prominent notice on the website at least 30 days before taking effect.

The "Last Updated" date at the top of this document indicates when the policy was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Continued use of toto11 after a policy update constitutes acceptance of the revised terms. If you do not agree with the changes, you may close your account before the update takes effect.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Email: [email protected] (do not click — copy and paste into your email client)
• Subject Line: "Privacy Inquiry" or "Data Subject Request"
• Response Time: We aim to respond to all privacy inquiries within 30 calendar days

For general customer support inquiries (not related to privacy), please use our 24/7 live chat service available on the website.

---

By using toto11, you acknowledge that you have read, understood, and agreed to this Privacy Policy. Your trust is important to us, and we are committed to protecting your personal information.