Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how 69toto ("we", "us", "our") collects, uses, stores, processes, discloses, and protects personal information provided by users ("you", "your") of our online gaming platform accessible at 69toto.cam and associated services. We are committed to protecting the privacy and security of your personal data in accordance with international data protection principles and best practices.

By registering an account with 69toto, accessing our website, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of our services immediately.

This Privacy Policy applies to all personal information collected through our website, mobile applications, customer service communications, and any other interactions you have with 69toto. It should be read in conjunction with our Terms & Conditions, which govern your use of our services.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with 69toto, we collect the following personal information that you provide directly:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (Indonesian KTP or passport number)
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Account Credentials: Username, password (stored in encrypted form), and security questions
• Financial Information: Bank account details, e-wallet account information, payment card numbers, transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued ID documents (KTP, passport), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes
• Communication Records: Content of emails, live chat transcripts, customer service call recordings, and any other communications with 69toto support staff

2.2 Information We Collect Automatically

When you access and use the 69toto platform, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers
• Usage Data: Pages viewed, features accessed, games played, bet history, time spent on site, clickstream data, referring/exit pages, date and time stamps
• Location Information: Approximate geographic location derived from IP address to ensure compliance with jurisdictional restrictions
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies as described in our Cookie Policy
• Gaming Activity: Detailed records of all bets placed, games played, wins, losses, bonus claims, and other gaming-related activities

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions regarding transaction verification and fraud prevention
• Identity verification service providers who assist with KYC (Know Your Customer) compliance
• Marketing partners and analytics providers
• Publicly available sources and databases for fraud prevention and regulatory compliance purposes

3. How We Use Your Information

69toto uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• To create, maintain, and manage your gaming account
• To verify your identity and age (ensuring compliance with 21+ age restrictions)
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and respond to your inquiries
• To administer bonuses, promotions, and VIP rewards programs
• To enable you to participate in games, sports betting, and other gaming activities

3.2 Legal and Regulatory Compliance

• To comply with legal obligations, including anti-money laundering (AML) and counter-terrorist financing (CTF) regulations
• To fulfill KYC requirements mandated by our gaming license and regulatory authorities
• To prevent, detect, and investigate fraud, cheating, and other prohibited activities
• To respond to legal requests from law enforcement or regulatory bodies
• To enforce our Terms & Conditions and protect our rights and property

3.3 Platform Improvement and Analytics

• To analyze user behavior and preferences to improve our platform and services
• To troubleshoot technical issues and optimize platform performance
• To conduct research and statistical analysis for business intelligence purposes
• To develop new features, games, and services based on user feedback and trends

3.4 Marketing and Communications

• To send promotional offers, bonus notifications, and marketing communications (with your consent)
• To provide personalized gaming recommendations based on your activity and preferences
• To inform you about platform updates, new games, and service changes
• To send transactional communications such as deposit confirmations, withdrawal notifications, and security alerts

3.5 Responsible Gaming and Player Protection

• To monitor gaming patterns and identify potential problem gambling behavior
• To implement and enforce deposit limits, session limits, and self-exclusion measures
• To provide responsible gaming tools and resources
• To protect vulnerable players and minors from accessing our services

4. Legal Basis for Processing (GDPR Compliance)

Where applicable under international data protection laws, including the European Union's General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services) or to take steps requested by you prior to entering into a contract
• Legal Obligation: Processing is required to comply with legal obligations, including KYC, AML, and gaming regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights and freedoms
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit consent, which you may withdraw at any time

5. How We Share Your Information

69toto does not sell your personal information to third parties. We may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other game suppliers to deliver gaming content
• Identity Verification Providers: Third-party KYC service providers to verify your identity and comply with regulatory requirements
• Customer Support Platforms: Cloud-based customer service software providers to manage support tickets and live chat
• Marketing and Analytics Providers: Services that help us understand user behavior and deliver targeted communications (subject to your consent)

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulatory bodies, courts, or other governmental authorities when required by law, in response to legal process, or to protect our rights, property, or safety, or that of our users or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

5.4 Fraud Prevention Networks

We may share information with fraud detection agencies and databases to prevent fraud, money laundering, and other illegal activities across the gaming industry.

6. Data Security Measures

69toto implements comprehensive technical, physical, and administrative security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmissions between your device and our servers are protected using industry-standard SSL/TLS encryption (minimum 256-bit encryption)
• Secure Data Storage: Personal information is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems
• Password Protection: Passwords are hashed and salted using strong cryptographic algorithms; we never store passwords in plain text
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis, subject to confidentiality obligations
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses
• Employee Training: All 69toto staff receive regular training on data protection principles and security best practices
• Incident Response: We maintain an incident response plan to address potential data breaches promptly and notify affected users as required by law

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

7. Data Retention

69toto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our data retention practices are guided by the following principles:

• Active Accounts: Personal information is retained for the duration of your active account relationship with 69toto
• Closed Accounts: After account closure, we retain certain information for up to 7 years to comply with legal obligations, including tax, anti-money laundering, and gaming regulations
• Transaction Records: Financial transaction records are retained for a minimum of 7 years as required by Indonesian financial regulations
• Marketing Data: If you consent to marketing communications, we retain your contact information until you withdraw consent or your account is closed
• Legal Claims: Information may be retained longer if necessary to establish, exercise, or defend legal claims

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection requirements.

8. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete personal information
• Right to Erasure: You may request deletion of your personal information, subject to legal and regulatory retention requirements
• Right to Restrict Processing: You may request that we limit how we use your personal information in certain circumstances
• Right to Data Portability: You may request a machine-readable copy of your personal information to transfer to another service provider
• Right to Object: You may object to processing of your personal information based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time
• Right to Lodge a Complaint: You may file a complaint with a relevant data protection authority if you believe your privacy rights have been violated

To exercise any of these rights, please contact our Data Protection Officer at [email protected] (not a clickable link). We will respond to your request within 30 days. Please note that we may require verification of your identity before processing requests related to your personal information.

9. Cookies and Tracking Technologies

69toto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze site usage.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly, including account login, security, and transaction processing
• Performance Cookies: Collect anonymous data on site usage to help us improve platform performance and user experience
• Functionality Cookies: Remember your preferences, settings, and choices to provide a personalized experience
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (used only with your consent)

9.2 Managing Cookies

Most web browsers allow you to control cookies through settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. Please note that disabling essential cookies may affect the functionality of the 69toto platform.

10. International Data Transfers

Your personal information may be transferred to, processed, and stored in countries outside of Indonesia, including countries that may have different data protection standards. When we transfer your information internationally, we implement appropriate safeguards to ensure your data receives adequate protection, including:

• Utilizing standard contractual clauses approved by data protection authorities
• Ensuring third-party processors comply with internationally recognized data protection frameworks
• Implementing technical and organizational measures equivalent to those required under Indonesian data protection principles

11. Children's Privacy

69toto's services are strictly intended for individuals aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a person under 21, we will delete that information immediately and close the associated account. If you believe a minor has provided personal information to 69toto, please contact us immediately at [email protected] (not a clickable link).

12. Changes to This Privacy Policy

69toto reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated Privacy Policy on our website with a revised "Last Updated" date. For significant changes that materially affect your rights, we may provide additional notice via email or prominent website notification.

Your continued use of 69toto services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected] (not a clickable link)
• Customer Support Email: [email protected] (not a clickable link)
• Live Chat: Available 24/7 on the 69toto website

We are committed to resolving privacy concerns promptly and will respond to all inquiries within 30 days.