toto1 Platform Privacy Notice
This page describes what we collect when you use toto1 and how we keep that data protected. We take your privacy seriously—your personal information is encrypted, stored securely, and used only for account management, verification, and legal compliance.
When you open an account on toto1, deposit via DANA or e-wallet, or place a wager on Liga 1 or Champions League markets, we collect certain information. We do not sell your data to third parties. We use it to serve you safely and comply with local law.
Our services are available only where local law permits. You are responsible for verifying that your use of toto1 complies with your jurisdiction's regulations.
Data We Collect on toto1
Account Information
When you register on toto1, we collect your full name, email address, phone number, and date of birth. We also collect your postal address and city (Jakarta, Surabaya, Bandung, Medan, or other locations). This information is required to verify your identity and comply with anti-money-laundering rules.
We collect your chosen username and password. Your password is encrypted—we do not store it in plain text. If you forget your password, you can reset it via email. We never ask for your password via email or support chat.
Payment and Transaction Data
We collect details of every deposit and withdrawal. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we record the amount, method, and timestamp. We do not store your full bank account number or card number—payment processors handle that.
We also record every wager you place, including the sport (football, esports, badminton, MotoGP), the market, the stake, and the outcome. This data helps us detect fraud, settle disputes, and comply with tax obligations.
Device and Browser Data
We collect your IP address, device type (mobile, tablet, desktop), operating system, and browser type. We use this to detect unauthorized access, prevent fraud, and understand how you use toto1. We also log the approximate location derived from your IP address—this helps us verify that you are accessing from a jurisdiction where our services are permitted.
We may store cookies on your device. Cookies help us remember your login preferences and track your browsing session. You can disable cookies in your browser settings, but some features of toto1 may not work properly without them.
Communication Data
When you contact toto1 support, we store your messages, email, and chat history. We use this to resolve your issue and improve our customer service. We keep these records for a reasonable period, then delete them.
We may send you promotional emails about new tournaments (Piala AFF, Piala Indonesia, Champions League) or promotions. You can unsubscribe from these emails at any time by clicking the unsubscribe link.
How We Use and Protect Your Data
Data Protection and Encryption
We use SSL (Secure Sockets Layer) encryption to protect data in transit. All communication between your browser and our servers is encrypted. We also encrypt sensitive data at rest—your name, address, and payment details are stored in encrypted form in our database.
Our servers are located in data centres outside Indonesia. This means your data may physically sit outside your jurisdiction. We ensure that all data processors comply with data-protection standards equivalent to or exceeding local law.
How We Use Your Data
We use your data for:
- Account creation and login authentication
- Payment processing and verification
- KYC and anti-money-laundering compliance
- Fraud detection and security monitoring
- Dispute resolution and wager settlement
- Customer support and account recovery
- Legal and tax reporting obligations
- Promotional communications (with your consent)
We do not use your data for profiling, automated decision-making, or targeting advertisement to third-party platforms. We do not sell, rent, or share your data with advertisers or data brokers.
Third-Party Processors
We share your data with payment processors (DANA, e-wallet, mobile banking, banks) to enable deposits and withdrawals. These processors have their own privacy policies. We also share data with cloud-hosting providers (Amazon, Google, or similar) who manage our servers under data-protection contracts.
We may share anonymized data with sporting leagues (Liga 1, Piala Indonesia organizers) for regulatory reporting. This data does not identify you—it is statistical (e.g., total wagers on a match, geographic distribution of users).
Your Rights
You have the right to access your personal data. Log in to your toto1 account to view your profile, deposit history, and wager history. You also have the right to correct inaccurate information—contact support to update your name, address, or other details.
You have the right to request deletion of your account and associated data. Contact us via email. We will delete your data, except where we are legally required to retain it (e.g., tax records, fraud investigation).
Data Retention
We retain your account data and transaction history for as long as your account is active. If you close your account, we retain records for a period required by law (typically several years for tax and anti-money-laundering purposes). We then delete it.
Support chat logs and promotional emails are deleted after a reasonable period (typically 1–2 years).
Contact toto1
If you have questions about this privacy notice, or you wish to exercise your data rights, contact us via email or in-app support. We respond to data requests within a reasonable timeframe.
Our commitment is to handle your data transparently and securely. We keep your information protected and use it only to serve you and comply with law.