Your Privacy Is Protected: toto25 does not sell, rent, or trade your personal information to third parties for marketing purposes. All data handling described in this policy is carried out solely to deliver, improve, and protect our services for Indonesian players.
1. Introduction
toto25 ("we," "us," "our") operates the online betting platform accessible at https://toto25.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses or uses our services. This Privacy Policy sets out in clear, transparent terms the types of personal information we collect, the lawful purposes for which we process it, the parties with whom we may share it, and the rights available to you as a data subject.
This policy applies to all users of the toto25 Platform, including registered members, visitors who browse without registering, and individuals who contact us through any support channel. By accessing our Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should discontinue use of the toto25 Platform immediately.
This Privacy Policy is to be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and toto25. In the event of any conflict between the two documents, the Terms & Conditions shall prevail with respect to contractual matters, while this Privacy Policy shall govern all data protection matters.
2. Definitions
- "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, email address, phone number, financial account details, and device identifiers.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
- "Data Controller" refers to toto25 as the entity that determines the purposes and means of processing your personal data.
- "Data Processor" refers to any third-party service provider that processes personal data on behalf of toto25 under a written data processing agreement.
- "Cookies" refers to small text files placed on your device by the Platform to store session and preference information.
- "KYC" refers to Know Your Customer identity verification procedures conducted by toto25 to confirm user identity and comply with anti-money laundering obligations.
3. Data We Collect
toto25 collects the following categories of personal data from users of the Platform:
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, nationality, government ID number |
Account registration, KYC verification, age verification |
| Contact Data |
Email address, WhatsApp number, city of residence |
Account communication, support, promotional notifications (with consent) |
| Financial Data |
Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history |
Payment processing, fraud prevention, AML compliance |
| Transaction Data |
Bet history, game logs, win/loss records, bonus usage |
Account management, dispute resolution, responsible gaming monitoring |
| Technical Data |
IP address, device type, operating system, browser type, session timestamps |
Security, fraud detection, platform optimization |
| Usage Data |
Pages visited, games played, session duration, click patterns |
Platform improvement, personalization, responsible gaming analysis |
| Communications Data |
Live chat transcripts, support emails, WhatsApp messages |
Customer service delivery, quality assurance, dispute resolution |
4. How Data Is Collected
toto25 collects personal data through the following means:
- Direct submission: Information you provide during account registration, KYC document upload, support requests, or form completions on the Platform.
- Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools as you browse and interact with the Platform.
- Payment processors: Financial data received from your bank or e-wallet provider when you initiate a deposit or withdrawal transaction.
- Identity verification providers: Data returned by third-party KYC service providers following submission of your identification documents.
- Fraud detection services: Risk signals and device intelligence received from fraud-prevention partners to protect the integrity of your account.
5. Purpose of Processing
We process your personal data only for defined, legitimate purposes. The primary purposes for which toto25 processes personal data are:
- Account creation and management: To register, maintain, and administer your toto25 account, including enforcing the one-account-per-person rule and managing account security.
- Identity and age verification: To confirm that you are at least 21 years of age and to comply with our KYC obligations, in line with international anti-money laundering standards.
- Payment processing: To facilitate deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
- Service delivery: To provide you with access to our sports betting, live casino, togel (Indonesia's traditional numbers lottery), and slot game services.
- Security and fraud prevention: To detect, investigate, and prevent unauthorized access, cheating, collusion, money laundering, and other prohibited conduct.
- Responsible gaming: To monitor betting patterns that may indicate problem gambling and to enforce self-exclusion or limit settings that you have activated.
- Customer support: To respond to your queries, complaints, and support requests promptly and accurately.
- Platform improvement: To analyze usage patterns and improve the performance, design, and content of the toto25 Platform based on aggregate user behaviour data.
- Marketing communications: To send you promotional offers, bonus notifications, and newsletters where you have given explicit consent. You may withdraw consent at any time by contacting our support team.
- Legal compliance: To fulfill obligations under applicable laws, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.
6. Legal Basis for Processing
toto25 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfill our obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery.
- Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and responses to court orders or regulatory requests.
- Legitimate interests: Processing carried out in pursuit of our legitimate business interests — including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and freedoms.
- Consent: Processing of data for optional purposes such as marketing communications, where you have given free, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment to your account status.
7. Data Sharing & Disclosure
toto25 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, only to the extent necessary for the purposes described in this policy:
- Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your financial transactions.
- KYC and identity verification providers: Licensed third-party verification services that assist us in confirming user identity and complying with AML obligations.
- Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft (PGSoft), who may receive limited technical data to deliver game sessions and ensure game integrity.
- IT and hosting providers: Cloud infrastructure and data hosting companies that store Platform data on our behalf under strict confidentiality agreements.
- Analytics providers: Web analytics services that process aggregated and anonymized usage data to help us improve Platform performance.
- Fraud prevention services: Third-party providers who assist in identifying and preventing fraudulent, abusive, or suspicious activity on the Platform.
- Legal and regulatory authorities: Competent courts, law enforcement agencies, and regulators where disclosure is required by law, court order, or in the defense of legal claims.
Third-Party Data Processors: All third-party service providers engaged by toto25 are bound by written data processing agreements that require them to process personal data only on our documented instructions, maintain appropriate security standards, and prohibit onward transfer to unauthorized parties.
8. International Data Transfers
As an internationally operated platform serving Indonesian players, some of your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, toto25 ensures that appropriate safeguards are in place, including contractual data protection clauses equivalent to internationally recognized standards, to protect your personal data to a level consistent with this Privacy Policy. By using the toto25 Platform, you consent to such international transfers subject to these safeguards being in place.
9. Cookies & Tracking Technologies
toto25 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:
- Essential cookies: Strictly necessary for core Platform functionality, including session management and login authentication. These cannot be disabled.
- Performance cookies: Used to collect anonymized analytics data about how users interact with the Platform, enabling us to optimize page load times and user experience.
- Functional cookies: Store your preferences such as language settings, preferred bet types, and display options to personalize your experience.
- Security cookies: Support our fraud detection systems by identifying suspicious login patterns and flagging unusual account activity.
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the toto25 Platform. We do not currently use third-party advertising or retargeting cookies.
10. Data Retention
toto25 retains personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable legal or regulatory obligations. Our standard retention periods are as follows:
- Account data: Retained for the duration of your active account, plus a min
imum of 5 years following account closure, in compliance with financial record-keeping obligations.
- KYC documents: Retained for a minimum of 5 years from the date of verification, in accordance with anti-money laundering regulations.
- Transaction records: Retained for a minimum of 5 years from the date of each transaction.
- Support communications: Retained for 2 years following resolution of the relevant support case.
- Marketing consent records: Retained for the duration of consent and for 2 years following withdrawal of consent, as evidence of the consent previously given.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.
11. Data Security
toto25 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Encrypted storage of sensitive data fields, including financial account details and identity document copies, at rest.
- Access controls: Role-based access restrictions ensuring that only authorized toto25 personnel with a legitimate need can access your personal data.
- Regular security audits and penetration testing conducted by independent cybersecurity specialists.
- Two-factor authentication options for user accounts to reduce the risk of unauthorized access.
- Incident response procedures: A documented data breach response plan that includes timely notification to affected users in the event of a significant security incident involving their personal data.
Your Responsibility: While toto25 takes every reasonable step to protect your data, account security also depends on you. You are responsible for keeping your login credentials confidential and for notifying us immediately at
[email protected] if you suspect your account has been compromised.
12. Your Rights
As a user of the toto25 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 16.
- Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
- Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
- Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
- Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
- Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
We will respond to all verified data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
13. Minors
The toto25 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data, and return any deposited funds at our discretion. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and act without delay.
14. Third-Party Links
The toto25 Platform may contain references to or integrations with third-party game providers and payment processors. While we take care to engage only reputable partners, toto25 is not responsible for the privacy practices of third-party services. When interacting with third-party payment platforms such as OVO, DANA, GoPay, ShopeePay, or LinkAja, or when playing games delivered by studios such as Pragmatic Play or Evolution Gaming, those providers' own privacy policies will govern the handling of any data processed on their respective platforms. We encourage you to review the privacy notices of any third-party service you use in connection with your toto25 account.
15. Policy Amendments
toto25 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where material changes are made, we will provide notice via email to your registered address or through a prominent in-platform notification prior to the changes taking effect. The "Effective Date" shown at the top of this page will be updated accordingly. Your continued use of the toto25 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of how we protect your data.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how toto25 handles your personal information, please contact our Data Protection team through any of the following channels:
- Email: [email protected]
- Live Chat: Available 24/7 directly on the toto25 Platform
- WhatsApp: +62 812 3456 7890
We are committed to resolving all privacy-related queries and complaints promptly and fairly. Our Indonesian-speaking support agents are available around the clock to assist users based in Jakarta, Surabaya, Medan, Bandung, Bali, and across Indonesia.
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to a competent data protection authority or seek independent legal advice.