Privacy Policy

1. Data Controller & Contact Information

18toto, operating through https://18toto.cam, is the data controller responsible for processing your personal information. We are committed to compliance with international data protection standards and best practices in safeguarding user privacy.

Privacy Contact: For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at [email protected] (displayed as plain text only). Our data protection team will respond to privacy inquiries within 7 business days.

2. Information We Collect

2.1 Information You Provide Directly

When you register an Account with 18toto, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document.
• Contact Information: Residential address, email address, and mobile phone number.
• Account Credentials: Username and encrypted password (we never store passwords in plain text).
• Financial Information: Bank account details, e-wallet information (OVO, DANA, GoPay account identifiers), and payment transaction records for deposits and withdrawals.
• Verification Documents: Copies of government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills or bank statements), and payment method verification documents as required for KYC (Know Your Customer) compliance.
• Communication Records: Customer support chat transcripts, emails, and any other communications you send to us.

2.2 Information Collected Automatically

When you access and use 18toto's platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, geographic location (country, city, region derived from IP address), internet service provider, and connection timestamps.
• Usage Data: Pages visited, features accessed, time spent on the platform, navigation patterns, betting history, game activity, deposit and withdrawal transactions, and interaction with promotional offers.
• Cookies & Tracking Data: Session cookies, persistent cookies, and similar tracking technologies (see Section 9 for detailed cookie information).

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment success/failure status, and fraud detection signals from BCA, BRI, BNI, Mandiri, and e-wallet providers.
• Verification Services: Identity verification results from third-party KYC service providers.
• Marketing Partners: Referral information if you were referred to 18toto by an affiliate or marketing partner.

3. How We Use Your Information

18toto processes your personal data for the following purposes:

3.1 Account Management & Service Provision

• Create, maintain, and manage your gaming Account
• Verify your identity and age to comply with legal requirements (21+ age restriction in Indonesia)
• Process deposits, withdrawals, and other financial transactions
• Provide access to sports betting, casino games, togel lottery, and other gaming services
• Track your gaming activity, betting history, and account balance
• Administer bonuses, promotions, and loyalty rewards

3.2 Customer Support & Communication

• Respond to your inquiries, support requests, and complaints
• Send important account notifications (deposit confirmations, withdrawal updates, security alerts)
• Provide technical support and troubleshooting assistance
• Communicate changes to our Terms & Conditions, Privacy Policy, or game rules

3.3 Security & Fraud Prevention

• Detect and prevent fraudulent activity, money laundering, underage gambling, and other illegal activities
• Monitor for suspicious betting patterns, collusion, and bonus abuse
• Verify the legitimacy of payment methods and source of funds
• Enforce our Terms & Conditions and take action against rule violations
• Protect the security and integrity of our platform and other players

3.4 Legal & Regulatory Compliance

• Comply with international gaming licensing requirements
• Fulfill anti-money laundering (AML) and counter-terrorist financing (CTF) obligations
• Respond to legal requests from law enforcement or regulatory authorities
• Maintain records as required by applicable gaming regulations

3.5 Marketing & Personalization (With Your Consent)

• Send promotional emails about new games, bonuses, and special offers (you can opt out anytime)
• Personalize your gaming experience based on your preferences and activity
• Conduct market research and analyze player behavior to improve our services
• Display targeted advertising (only with your explicit consent)

3.6 Platform Improvement & Analytics

• Analyze usage patterns to optimize website performance and user experience
• Test new features and gaming products
• Generate aggregate, anonymized statistics for business intelligence

4. Legal Basis for Processing

Under international data protection standards, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and 18toto (our Terms & Conditions), including account management, transaction processing, and service provision.
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including age verification, KYC procedures, and anti-money laundering laws.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, customer support, and platform improvement, provided these interests do not override your fundamental rights.
• Consent: Where required by law, we obtain your explicit consent before processing data for marketing purposes, tracking technologies, or sharing data with third parties beyond what is necessary for service provision.

5. Sharing Your Information

18toto does not sell your personal information to third parties. However, we may share your data with the following categories of recipients when necessary:

5.1 Service Providers

We share data with trusted third-party service providers who perform functions on our behalf:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals.
• Identity Verification Providers: KYC service providers to verify your identity and comply with regulatory requirements.
• Cloud Hosting Providers: Servers and database hosting services to store data securely.
• Customer Support Tools: Live chat and ticketing systems to manage support communications.
• Analytics Providers: Tools to analyze website usage and performance (anonymized where possible).

All service providers are contractually bound to protect your data and use it only for specified purposes.

5.2 Legal & Regulatory Authorities

We may disclose your information to government authorities, law enforcement, or regulatory bodies when:

• Required by law, court order, or legal process
• Necessary to investigate fraud, money laundering, or other illegal activities
• Required to comply with gaming licensing obligations
• Necessary to protect the rights, property, or safety of 18toto, our players, or the public

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Security Measures

18toto employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same technology used by major financial institutions.
• Secure Data Storage: Personal information is stored in encrypted databases with restricted access controls. Sensitive data such as passwords are hashed using one-way encryption algorithms.
• Access Controls: Only authorized personnel with a legitimate business need can access personal data. Access is logged and monitored.
• Regular Security Audits: Our systems undergo regular vulnerability assessments and penetration testing by independent security firms.
• Firewall Protection: Network firewalls and intrusion detection systems protect against unauthorized access attempts.
• Employee Training: All staff handling personal data receive training on data protection best practices and confidentiality obligations.

While we implement robust security measures, no internet transmission or electronic storage system is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

7. Data Retention

18toto retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Data is retained for the duration your Account remains active and operational.
• Closed Accounts: After you close your Account, we retain certain information for up to 7 years to comply with gaming regulations, tax laws, and legal record-keeping requirements. This includes transaction history, KYC documents, and records related to fraud prevention.
• Marketing Data: If you opt out of marketing communications, your email address is retained on our suppression list to ensure we do not contact you in the future.
• Legal Hold: Data may be retained longer if required for ongoing legal proceedings, investigations, or regulatory inquiries.

After retention periods expire, personal data is securely deleted or anonymized such that it can no longer be linked to you.

8. Your Privacy Rights

Under international data protection standards, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your Account settings, or contact customer support for assistance.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to certain exceptions. We must retain some data to comply with legal obligations (e.g., financial transaction records for tax purposes, KYC documents for 7 years under gaming regulations).

8.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of information you have disputed.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer this data to another service provider where technically feasible.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing emails by clicking the unsubscribe link in any promotional message.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Exercising Your Rights: To exercise any of these rights, please contact us at [email protected] (plain text only). We may request verification of your identity before processing your request to prevent unauthorized access to your data.

9. Cookies & Tracking Technologies

18toto uses cookies and similar tracking technologies to enhance your experience and collect usage data:

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you on return visits and remember your preferences.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly, including session management, security, and login authentication. These cannot be disabled without affecting functionality.
• Performance Cookies: Collect anonymous information about how you use our website to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences (e.g., language, currency display) to personalize your experience.
• Advertising Cookies: (If applicable) Track your activity across websites to display relevant ads. These require your consent.

9.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can typically block or delete cookies, but this may affect website functionality. Consult your browser's help documentation for instructions on cookie management.

10. Third-Party Services

Our platform may contain links to external websites, payment providers, or social media platforms. 18toto is not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information. Third-party services include:

• Banking and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
• Game providers and live casino studios
• Analytics and advertising services (if used with your consent)

11. International Data Transfers

18toto operates internationally and may transfer your personal data to servers located outside Indonesia for processing and storage. When data is transferred internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with third-party providers requiring equivalent data protection standards
• Use of secure, encrypted transmission channels
• Compliance with international data transfer regulations

By using 18toto's services, you consent to the transfer of your data to international locations where our servers and service providers are located.

12. Children's Privacy

18toto's services are strictly limited to individuals aged 21 years or older, in compliance with Indonesian legal gambling age restrictions. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from someone under the legal age, we will immediately delete that information and permanently close the associated Account. Parents or guardians who believe their child has provided information to 18toto should contact us immediately at [email protected] (plain text only).

13. Changes to This Policy

18toto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or prominent notice on our website
• Request your renewed consent if required by law

We encourage you to review this Privacy Policy periodically. Your continued use of 18toto's services after changes take effect constitutes acceptance of the updated policy.

14. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or how 18toto handles your personal data, please contact our data protection team:

• Email: [email protected] (displayed as plain text only)
• Live Chat: Available 24/7 through our website
• Response Time: We aim to respond to all privacy inquiries within 7 business days

For general customer support inquiries unrelated to privacy, please use our standard customer service channels accessible through your Account dashboard.