Privacy Policy

1. Introduction

Welcome to tbtoto's Privacy Policy. This document outlines our practices regarding the collection, use, and protection of personal data for users of our online gaming platform located at https://tbtoto.cam. tbtoto operates primarily in the Indonesian market, serving players interested in sports betting (including BRI Liga 1, English Premier League, La Liga, Champions League), live casino gaming, slot machines (slot gacor), and lottery markets (togel Singapore, Hongkong, Sydney, Macau).

By creating an account and using tbtoto services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our practices, please do not use our platform. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall relationship with tbtoto.

tbtoto respects your privacy and is committed to complying with applicable Indonesian data protection laws and regulations. We employ industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Your trust is essential to our business, and we take our responsibility to safeguard your data seriously.

2. Data Controller

For the purposes of applicable data protection legislation, tbtoto acts as the data controller for personal information collected through our platform. This means we determine the purposes and means of processing your personal data. Our registered operations are based in Indonesia, and we process data in accordance with Indonesian privacy laws.

If you have questions about how your data is processed, wish to exercise your privacy rights, or need to report a data privacy concern, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 7 business days

3. Information We Collect

tbtoto collects several categories of personal information to provide our gaming services, comply with legal obligations, and improve user experience. The types of data we collect include:

3.1 Information You Provide Directly

When you register for a tbtoto account, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, and residential address in Indonesia
• Account Credentials: Username, password (stored in encrypted form), and security questions
• Financial Information: Bank account details (account number, bank name), e-wallet information (OVO, DANA, GoPay account IDs), and payment card information for deposits and withdrawals
• Verification Documents: Copies of government-issued identification (Indonesian National ID / KTP), selfie photographs for identity verification, proof of address documents, and source-of-funds documentation when requested
• Communication Records: Contents of emails, live chat messages, and support tickets you send to our customer service team

3.2 Information Collected Automatically

When you use tbtoto services, we automatically collect certain technical and behavioral data:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Connection Data: IP address, internet service provider, connection timestamps, and geographic location (city/region level based on IP)
• Usage Data: Pages visited, features used, betting history, game play sessions, deposit and withdrawal transactions, bonus claims, login times, and session durations
• Cookie Data: Information stored in cookies and similar tracking technologies (see Section 9 for details)

3.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from external sources:

• Payment Processors: Transaction confirmation, payment success/failure status, and fraud risk assessments from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and other payment partners
• Identity Verification Services: Results of KYC checks, watchlist screenings, and anti-money laundering database searches conducted by third-party verification providers
• Responsible Gaming Databases: Self-exclusion lists and gambling restriction registries (if you have registered with such services in Indonesia or internationally)

4. How We Use Your Information

tbtoto processes your personal data for specific, legitimate purposes. We use your information to:

4.1 Provide Gaming Services

• Create and manage your account
• Process deposits and withdrawals to/from your tbtoto account
• Enable you to place bets on sports events, play casino games, participate in togel draws, and access other gaming services
• Calculate and credit winnings to your account balance
• Administer bonuses, promotions, and loyalty rewards
• Provide customer support and respond to your inquiries

4.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement) through KYC procedures
• Comply with Indonesian anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Detect and prevent fraud, collusion, money laundering, and other illegal activities
• Respond to legal requests from Indonesian law enforcement or regulatory authorities
• Maintain records required by applicable gaming and financial regulations

4.3 Platform Security and Integrity

• Monitor for suspicious betting patterns, bonus abuse, and account takeover attempts
• Prevent underage gambling and enforce self-exclusion requests
• Protect against technical attacks, malware, and unauthorized access
• Investigate disputes, rule violations, and Terms & Conditions breaches
• Maintain audit trails and transaction logs for security purposes

4.4 Service Improvement and Personalization

• Analyze user behavior to improve platform features, game selection, and user interface
• Personalize your experience with relevant game recommendations
• Conduct statistical analysis on betting trends and player preferences
• Test new features and optimize platform performance

4.5 Marketing Communications (With Your Consent)

• Send promotional emails about new games, bonuses, and special offers (you may opt out at any time)
• Deliver SMS notifications about account activity, withdrawals, and time-sensitive promotions (with explicit consent)
• Display personalized advertisements on our platform based on your gaming preferences

Legal Basis for Processing: We process your personal data based on (1) contractual necessity to provide gaming services, (2) legal obligations under Indonesian law, (3) legitimate business interests in security and fraud prevention, and (4) your explicit consent for marketing communications.

5. Data Sharing and Disclosure

tbtoto does not sell your personal information to third parties. However, we may share your data with carefully selected partners and service providers in the following circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: We share necessary financial information with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and other Indonesian banks and e-wallets to process your deposits and withdrawals
• Identity Verification Services: We share identification documents with KYC/AML verification providers to confirm your identity and age
• Game Providers: Your betting and gaming activity may be shared with third-party game studios (live casino, slots) to deliver their games and settle bets
• Customer Support Tools: We use third-party platforms for live chat, email support, and ticketing systems that may process your communications
• Cloud Hosting and Infrastructure: Your data is stored on secure servers managed by trusted hosting providers
• Analytics and Marketing Services: We use analytics tools to understand user behavior and marketing platforms to deliver promotional messages (only with your consent)

All service providers are contractually bound to protect your data and use it only for specified purposes. We conduct due diligence on partners to ensure they meet our data security standards.

5.2 Legal and Regulatory Disclosures

We may disclose your personal information when required by Indonesian law or in response to valid legal processes:

• Complying with court orders, subpoenas, or government inquiries
• Cooperating with law enforcement investigations into fraud, money laundering, or other criminal activity
• Responding to requests from Indonesian gaming regulators or financial authorities
• Enforcing our Terms & Conditions and protecting tbtoto's legal rights
• Preventing imminent harm to the safety or security of any person

5.3 Business Transfers

In the event tbtoto undergoes a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we might publish statistics about betting trends on BRI Liga 1 matches or popular slot gacor games without revealing individual player identities.

6. Data Security Measures

tbtoto employs comprehensive technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction:

6.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by Indonesian banks
• Password Security: Passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text
• Firewall Protection: Our servers are protected by advanced firewalls and intrusion detection systems
• Secure Data Centers: Personal data is stored in secure, access-controlled data centers with redundant backups
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address security weaknesses

6.2 Organizational Safeguards

• Access Controls: Only authorized personnel have access to personal data, on a need-to-know basis
• Employee Training: All staff undergo data protection training and are bound by confidentiality agreements
• Incident Response: We have procedures in place to detect, respond to, and report data breaches in accordance with Indonesian law
• Third-Party Management: We require all service providers to implement comparable security measures through contractual agreements

6.3 Your Role in Security

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and change it regularly
• Never share your login credentials with anyone
• Log out after each session, especially on shared devices
• Be cautious of phishing emails claiming to be from tbtoto
• Contact us immediately if you suspect unauthorized account access

7. Data Retention

tbtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Active Accounts

While your account remains active, we retain all personal data, transaction history, and gaming records to provide continuous service and comply with regulatory requirements.

7.2 Closed Accounts

After you close your account (voluntarily or due to Terms & Conditions violations), we retain certain data for legal and regulatory compliance:

• Financial Records: Transaction histories, deposit/withdrawal records, and tax-related information are retained for 7 years in accordance with Indonesian financial regulations
• KYC Documents: Identity verification documents are retained for 5 years to comply with anti-money laundering laws
• Dispute Records: Communications and evidence related to unresolved disputes are retained until final resolution
• Self-Exclusion Data: If you self-exclude, we retain your information indefinitely to prevent you from re-registering during the exclusion period

7.3 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Your Privacy Rights

Under Indonesian data protection law, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. To exercise this right, contact our support team with your request. We will provide the information in a commonly used electronic format within 30 days.

8.2 Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you may request that we correct it. You can update most information directly through your account settings, or contact support for assistance.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may be required to retain certain information to comply with legal obligations (e.g., financial records for tax purposes, KYC documents for AML compliance).

8.4 Right to Restrict Processing

You may request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing on legitimate interest grounds.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider, where technically feasible.

8.6 Right to Object

You may object to processing of your personal data based on legitimate interests. For marketing communications, you can opt out at any time by clicking the "unsubscribe" link in emails or contacting support.

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these privacy rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. Include your account details and specify which right you wish to exercise. We will respond within 30 days and may request additional information to verify your identity before processing the request.

9. Cookies and Tracking Technologies

tbtoto uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, keep you logged in, and understand how you interact with our platform.

9.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, login sessions, and security. Cannot be disabled.	Session or up to 1 year
Performance Cookies	Collect anonymous data on how visitors use our site to improve performance and user experience.	Up to 2 years
Functional Cookies	Remember your preferences (language, currency, game settings) for a more personalized experience.	Up to 1 year
Marketing Cookies	Track your browsing to deliver relevant advertisements and measure campaign effectiveness. Requires your consent.	Up to 2 years

9.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, but doing so may affect platform functionality (e.g., you may need to log in repeatedly). To manage marketing cookies, adjust your preferences in your account settings or opt out via email unsubscribe links.

10. International Data Transfers

tbtoto primarily processes data within Indonesia. However, some of our service providers (cloud hosting, payment processors, game studios) may be located outside Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Contractual agreements requiring recipients to protect data according to Indonesian standards
• Use of service providers in jurisdictions with adequate data protection laws
• Encryption and security measures during data transmission

By using tbtoto services, you consent to the transfer of your information to countries outside Indonesia where necessary to provide our services, subject to the protections described in this Privacy Policy.

11. Protection of Minors

tbtoto services are strictly intended for individuals aged 21 years or older. We do not knowingly collect or process personal data from minors under the age of 21. If we discover that we have inadvertently collected information from a minor, we will immediately delete the account, void all bets, and permanently delete the associated personal data (deposited funds will be returned to the source; winnings will be forfeited). Parents or guardians who believe their child has provided personal information to tbtoto should contact us immediately at [email protected].

12. Changes to This Privacy Policy

tbtoto reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Posting a prominent notice on the tbtoto homepage
• Sending an email notification to your registered email address
• Updating the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically. Continued use of tbtoto services after changes become effective constitutes your acceptance of the revised policy. If you disagree with the updated terms, you should discontinue use and close your account.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how tbtoto handles your personal data, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond within 7 business days

For urgent privacy concerns or suspected data breaches affecting your account, please mark your email as "URGENT" and contact us immediately.