Our Privacy Commitments

Bank-Grade Encryption

All personal and financial data transmitted to toto98 is protected with industry-standard SSL/TLS 256-bit encryption, the same technology used by major financial institutions worldwide.

No Data Selling

We never sell, rent, or share your personal information with third parties for marketing purposes. Your data stays with toto98 and is used solely to provide and improve our services.

Secure Storage

All user data is stored on secure servers with restricted access, regular security audits, and automated backup systems to prevent unauthorized access or data loss.

KYC Verification Only

We collect identification documents solely for Know Your Customer (KYC) compliance, age verification, and fraud prevention—never for any other purpose.

Full Data Control

You have the right to access, update, or delete your personal data at any time. Contact our support team to exercise your data privacy rights under applicable regulations.

Transparent Practices

We clearly communicate what data we collect, why we need it, how long we keep it, and who has access to it. No hidden practices, no fine print surprises.

Last Updated: January 15, 2026

Your Privacy is Our Priority

This Privacy Policy explains how toto98 collects, uses, discloses, and protects your personal information when you use our online betting platform. By creating an account and using toto98 services, you consent to the data practices described in this policy.

1. Introduction

toto98 operates an online gambling platform serving customers in Indonesia. We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy applies to all personal information collected through our website, mobile applications, customer support channels, and related services.

We comply with applicable data protection laws and regulations, including international best practices for online gaming operators. This policy should be read in conjunction with our Terms & Conditions, which govern your use of toto98 services.

2. Information We Collect

To provide our services and comply with legal obligations, toto98 collects several types of information from users:

2.1 Personal Identification Information

During account registration and verification, we collect:

  • Full Name: Your legal name as it appears on government-issued identification documents
  • Date of Birth: To verify you are at least 21 years of age as required by Indonesian law
  • Email Address: For account notifications, security alerts, and communication
  • Mobile Phone Number: For SMS verification, two-factor authentication, and account recovery
  • Physical Address: Your residential address in Indonesia for identity verification
  • Government ID: Copies of KTP (Indonesian identity card), passport, or driver's license for KYC compliance
  • Selfie Verification Photo: A photograph of you holding your identification document for fraud prevention

2.2 Financial Information

To process deposits and withdrawals, we collect:

  • Bank Account Details: Account holder name, bank name (BCA, BRI, BNI, Mandiri, etc.), and account number
  • E-Wallet Information: OVO, DANA, GoPay, ShopeePay, or LinkAja account details
  • Transaction History: Records of all deposits, withdrawals, bets placed, and winnings

We do not store complete credit card numbers or CVV codes. Payment processing is handled by certified third-party processors compliant with PCI-DSS standards.

2.3 Technical and Usage Data

When you access toto98, we automatically collect:

  • IP Address: To verify geographic location and prevent fraudulent access
  • Device Information: Device type, operating system, browser type and version
  • Usage Data: Pages visited, time spent on platform, games played, bet history
  • Login Records: Timestamps of account access for security monitoring
  • Cookies and Similar Technologies: See Section 6 for detailed information

2.4 Communication Data

We retain records of your communications with toto98 customer support, including:

  • Live chat transcripts
  • Email correspondence
  • WhatsApp messages with support team
  • Phone call recordings (with prior notice)

3. How We Use Your Information

toto98 uses collected data for the following legitimate purposes:

3.1 Service Delivery

  • Create and manage your toto98 account
  • Process deposits, withdrawals, and payment transactions
  • Facilitate sports betting, casino games, and togel (lottery) gameplay
  • Track bet history and calculate winnings/losses
  • Provide customer support and respond to inquiries

3.2 Legal and Regulatory Compliance

  • Verify you are at least 21 years old (age verification)
  • Confirm identity and prevent identity theft (KYC/AML compliance)
  • Detect and prevent fraud, money laundering, and bonus abuse
  • Comply with legal obligations and regulatory requests
  • Enforce our Terms & Conditions and investigate violations

3.3 Platform Improvement and Security

  • Monitor and analyze platform usage to improve user experience
  • Detect technical issues and optimize website performance
  • Enhance security measures and prevent unauthorized access
  • Conduct internal audits and quality assurance

3.4 Marketing Communications (with Consent)

  • Send promotional offers, bonus notifications, and new game announcements
  • Deliver personalized recommendations based on gameplay preferences
  • Inform you of platform updates and new features

You may opt out of marketing communications at any time through your account settings or by contacting support.

4. Data Sharing and Disclosure

toto98 does not sell your personal information to third parties. We may share data only in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist in delivering toto98 services:

  • Payment Processors: To facilitate bank transfers and e-wallet transactions with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and others who power our casino games
  • Identity Verification Services: Third-party KYC providers who verify your identification documents
  • Cloud Storage and Hosting: Secure server infrastructure providers
  • Customer Support Tools: Live chat and ticketing systems

All third-party providers are contractually obligated to maintain data confidentiality and security.

4.2 Legal Obligations

We may disclose your information if required by law or in response to:

  • Valid legal processes (court orders, subpoenas, search warrants)
  • Regulatory investigations or compliance requests
  • Requests from law enforcement or government authorities
  • Protection of toto98 rights, property, or safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy's protections.

5. Data Security Measures

toto98 implements comprehensive security measures to protect your personal information:

  • Encryption: All data transmitted between your device and toto98 servers is encrypted using SSL/TLS protocols
  • Secure Storage: Personal data is stored on secure servers with restricted physical and network access
  • Access Controls: Only authorized toto98 personnel with legitimate business needs can access user data
  • Password Protection: User passwords are hashed using industry-standard algorithms and never stored in plain text
  • Two-Factor Authentication: Optional 2FA adds an extra layer of account security
  • Regular Audits: Periodic security assessments and penetration testing to identify vulnerabilities
  • Fraud Detection: Automated systems monitor for suspicious account activity and unauthorized access attempts

While we implement robust security measures, no method of electronic storage or transmission is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

6. Cookies and Tracking Technologies

toto98 uses cookies and similar technologies to enhance your experience and analyze platform usage:

6.1 What Are Cookies?

Cookies are small text files stored on your device that allow websites to recognize you and remember your preferences.

6.2 Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality (login sessions, security features)
  • Performance Cookies: Collect anonymous usage data to improve website performance
  • Functional Cookies: Remember your preferences (language, currency display)
  • Analytics Cookies: Help us understand how users interact with toto98 (most popular games, navigation patterns)

6.3 Managing Cookies

Most browsers allow you to control cookies through settings. Note that disabling essential cookies may impair platform functionality.

7. Your Privacy Rights

As a toto98 user, you have the following data privacy rights:

  • Right to Access: Request a copy of all personal data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete information in your account
  • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Right to Restrict Processing: Limit how we use your data in certain circumstances
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Opt out of marketing communications or data processing for certain purposes
  • Right to Withdraw Consent: Revoke previously granted consent for data processing

To exercise any of these rights, contact our support team at [email protected]. We will respond to your request within 30 days.

8. Data Retention

toto98 retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Active Accounts: Data is retained while your account remains active
  • Closed Accounts: After account closure, we retain data for 5 years to comply with regulatory requirements, resolve disputes, and prevent fraud
  • Transaction Records: Financial records are kept for 7 years as required by anti-money laundering regulations
  • Marketing Data: Deleted immediately upon opt-out unless required for legal purposes

After retention periods expire, personal data is securely deleted or anonymized.

9. Children's Privacy

toto98 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that a user is underage:

  • The account will be immediately suspended
  • All personal data will be deleted
  • Any remaining funds will be returned to the funding source

If you believe a minor has created an account on toto98, please contact us immediately at [email protected].

10. Changes to This Privacy Policy

toto98 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. Material changes will be notified via:

  • Email notification to your registered address
  • Prominent notice on the toto98 homepage
  • In-account notification upon next login

The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. Continued use of toto98 after changes take effect constitutes acceptance of the updated policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how toto98 handles your personal data, please contact us:

  • Email: [email protected]
  • Live Chat: Available 24/7 through your toto98 account
  • WhatsApp: Indonesian-speaking support during WIB business hours

We commit to investigating all privacy-related inquiries and responding within 7 business days.

Additional Resources

For more information about your rights and toto98 policies, please review our Terms & Conditions and Responsible Gaming pages.

Questions About Your Privacy?

Our support team is ready to address any privacy concerns or data requests you may have.

Visit FAQ Return to Home