Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected through the 01toto platform, including the website (https://01toto.cam), mobile applications, customer support channels, and any related services. This policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform.

Data Controller: 01toto is the data controller responsible for your personal information. We determine how and why your personal data is processed in connection with our services. If you have questions or concerns about how we handle your data, please contact our Data Protection Officer using the contact information provided at the end of this policy.

2. Information We Collect

We collect various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and enhance your gaming experience.

2.1 Personal Information You Provide

When you register an account, make deposits, or interact with our services, you voluntarily provide the following personal information:

• Identity Data: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP number, passport number).
• Contact Data: Email address, phone number, residential address, city, province, postal code.
• Financial Data: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card details (where applicable), transaction history, deposit and withdrawal records.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers.
• Verification Documents: Copies of government ID, proof of address documents, selfie photographs for identity verification (KYC process), bank statements or e-wallet screenshots for payment method verification.
• Communications: Content of emails, live chat messages, WhatsApp conversations, phone call recordings (where permitted by law), feedback and survey responses.

2.2 Information Automatically Collected

When you access our platform, we automatically collect certain technical and usage data:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers (UDID, IMEI), screen resolution, language settings.
• Usage Data: Pages visited, features accessed, time spent on pages, clickstream data, search queries, betting history, game play records, login timestamps, session duration.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdictional restrictions and deliver localized content.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar tracking technologies (see Section 6 for detailed information).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction status, payment verification data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: KYC data from third-party verification providers to confirm your identity and prevent fraud.
• Marketing Partners: Referral information if you accessed 01toto through an affiliate or marketing campaign.
• Public Sources: Information available in public records or databases for fraud prevention and compliance purposes.

3. How We Use Your Information

We process your personal data for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Create and maintain your user account.
• Process deposits, withdrawals, and financial transactions.
• Enable you to participate in sports betting, casino games, slots, and other gaming activities.
• Manage bonuses, promotions, and loyalty rewards.
• Provide customer support and respond to inquiries.
• Send transactional communications (deposit confirmations, withdrawal notifications, account alerts).

3.2 Legal Compliance and Security

• Verify your identity and age to comply with legal requirements (21+ age restriction enforcement).
• Conduct KYC (Know Your Customer) and AML (Anti-Money Laundering) checks.
• Detect, prevent, and investigate fraud, money laundering, collusion, and other illegal activities.
• Monitor for problem gambling behaviors and enforce responsible gaming measures.
• Comply with legal obligations, regulatory requirements, and court orders.
• Protect the security and integrity of our platform and services.

3.3 Platform Improvement and Analytics

• Analyze user behavior and platform usage patterns to improve functionality and user experience.
• Conduct research and analytics to optimize game offerings, odds, and features.
• Test new features, products, and services.
• Troubleshoot technical issues and fix bugs.
• Generate aggregated, anonymized statistics for business intelligence purposes.

3.4 Marketing and Communications (With Consent)

• Send promotional emails, SMS messages, or push notifications about bonuses, promotions, and special offers (only if you opted in).
• Personalize marketing content based on your gaming preferences and activity.
• Invite you to participate in surveys, contests, or promotional campaigns.
• Deliver targeted advertising through our platform or third-party networks (subject to your consent and cookie preferences).

You have the right to opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings.

4. How We Share Your Information

01toto does not sell your personal data to third parties. We may share your information with the following categories of recipients only when necessary for legitimate business purposes:

4.1 Service Providers and Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals.
• Identity Verification Services: KYC providers to verify your identity and comply with regulatory requirements.
• Technology Infrastructure Providers: Cloud hosting services, content delivery networks (CDN), database management providers.
• Customer Support Platforms: Live chat software, helpdesk systems, email service providers.
• Analytics and Marketing Tools: Platforms that help us understand user behavior and deliver targeted marketing (subject to your consent).

4.2 Game Providers and Software Suppliers

We share minimal necessary data with game studios and software providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to enable game functionality, track wagering activity, and detect fraud.

4.3 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, courts, or government agencies when required by law or to:

• Comply with legal obligations, subpoenas, or court orders.
• Investigate suspected illegal activity, fraud, or violations of our Terms & Conditions.
• Protect the rights, property, and safety of 01toto, our users, or the public.
• Cooperate with anti-money laundering investigations or responsible gaming authorities.

4.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and ensure that your data continues to be protected under this Privacy Policy or an equivalent standard.

5. Data Security Measures

01toto employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial information) is encrypted using advanced cryptographic algorithms.
• Access Controls: Strict role-based access controls ensure that only authorized personnel with a legitimate business need can access personal data. All access is logged and audited.
• Multi-Factor Authentication: Optional two-factor authentication (2FA) for user accounts to add an extra layer of security.
• Firewalls and Intrusion Detection: Network-level firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block malicious traffic.
• Regular Security Audits: Independent third-party security audits, penetration testing, and vulnerability assessments are conducted regularly.
• Data Backup and Disaster Recovery: Automated encrypted backups stored in geographically distributed data centers ensure business continuity.
• Employee Training: All staff members undergo mandatory data protection and cybersecurity training.

Note: While we implement robust security measures, no system is completely immune to security breaches. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any suspected unauthorized access.

6. Cookies and Tracking Technologies

01toto uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device that allow websites to recognize your browser and remember certain information. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain until they expire or are manually deleted).

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, account login, session management, and security. Cannot be disabled.	Session / Persistent
Performance Cookies	Collect anonymous data about platform usage, page load times, and errors to improve performance.	Persistent (up to 2 years)
Functional Cookies	Remember your preferences (language, currency, display settings) for a personalized experience.	Persistent (up to 1 year)
Analytics Cookies	Track user behavior and interaction patterns to understand how users navigate the platform.	Persistent (up to 2 years)
Marketing Cookies	Deliver targeted advertising and measure campaign effectiveness (requires consent).	Persistent (up to 1 year)

6.3 Managing Cookie Preferences

You can control or delete cookies through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect platform functionality. Essential cookies cannot be disabled as they are necessary for core operations. To manage cookie preferences, consult your browser's help documentation or visit our cookie preference center in your account settings.

7. Your Data Protection Rights

As a user of 01toto, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You can download your data through your account settings or contact our Data Protection Officer for assistance.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account profile.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may be required to retain certain information to comply with legal obligations, resolve disputes, or enforce our Terms & Conditions.

7.4 Right to Restriction of Processing

You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests by providing specific reasons related to your situation.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal data (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Protection Request." We will respond to your request within 30 days. We may require verification of your identity before processing requests to protect against unauthorized access.

8. Data Retention

01toto retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: Personal data is retained for the duration of your account's active status plus an additional period to comply with legal, accounting, and regulatory obligations (typically 5-7 years after account closure).
• Closed Accounts: After you close your account, we retain essential data (identity, transaction history) for legal compliance, fraud prevention, and dispute resolution purposes.
• Marketing Data: Marketing consent records and communication history are retained until you opt out or for a maximum of 3 years of inactivity.
• Technical Logs: Server logs, IP addresses, and usage data are typically retained for 12-24 months for security and troubleshooting purposes.

After the retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.

9. Third-Party Links and Services

The 01toto platform may contain links to third-party websites, services, or applications (e.g., payment gateways, social media platforms). We are not responsible for the privacy practices or content of these third parties. When you leave our platform, we encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to information collected by 01toto.

10. Children's Privacy

01toto is strictly an adult-only platform. Our services are not intended for individuals under the age of 21. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will take immediate steps to delete that information and terminate the associated account. Parents or guardians who believe their child has provided personal data to 01toto should contact us immediately at [email protected].

11. Changes to This Privacy Policy

01toto reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform functionality. Material changes will be communicated through:

• Email notification to your registered email address.
• Prominent notice on the platform homepage.
• In-platform notification upon your next login.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of the platform after changes take effect constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Email: [email protected] (Subject: Privacy Inquiry)
• Data Protection Officer: [email protected]
• Live Chat: Available 24/7 through the platform
• WhatsApp: Contact support for our official WhatsApp number

Our customer support team is available around the clock with Indonesian and English-speaking agents to assist with privacy-related inquiries.