1. Introduction

totogp ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have regarding your data. This Privacy Policy applies to all users of the totogp platform accessible at https://totogp.cam, including our website, mobile applications, and related services (collectively, the "Platform").

By creating an account or using any service on the totogp Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use the Platform.

We comply with applicable international data protection standards and Indonesian privacy regulations, including those governing the processing of personal data, anti-money laundering requirements, and Know Your Customer (KYC) obligations. We are committed to transparency in how we handle your data and will only process your information for legitimate business purposes as outlined in this Policy.

2. Information We Collect

totogp collects several types of information from users to provide, maintain, and improve our services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for a totogp account, you provide personal information including:

  • Identity Information: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification (Indonesian KTP).
  • Contact Information: Email address, mobile phone number, and residential address.
  • Account Credentials: Username and password you create for Platform access.
  • Financial Information: Bank account details (bank name, account number, account holder name) and e-wallet account information for deposits and withdrawals.
  • Verification Documents: Copies of your KTP (Indonesian national identity card), proof of address documents (utility bills, bank statements), and selfie photographs for KYC verification.
  • Communication Data: Content of messages you send to our customer support team via live chat, email, WhatsApp, or in-app messaging.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical information:

  • Device Information: Device type, operating system, browser type, unique device identifiers, and mobile network information.
  • Usage Data: Pages viewed, games played, bets placed, transaction history, login times, session duration, and navigation patterns within the Platform.
  • Location Data: IP address, geographic location derived from IP address, and GPS data (if you grant permission) to verify you are accessing the Platform from permitted jurisdictions.
  • Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies as described in Section 8 of this Policy.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

  • Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
  • Identity Verification Services: Results from KYC verification checks performed by third-party identity verification providers.
  • Game Providers: Game outcome data, betting patterns, and gameplay statistics from third-party game suppliers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, etc.).
  • Marketing Partners: If you access the Platform through an affiliate or marketing partner referral link, we may receive information about the source of your visit.

SSL Encryption

Bank-grade 256-bit SSL encryption protects all data transmission between your device and our servers.

Secure Data Storage

Personal information stored on encrypted servers in secure data centers with restricted physical access.

Privacy by Design

We collect only the minimum data necessary and implement privacy controls at every system level.

KYC Compliance

Strict identity verification prevents fraud and protects all users from unauthorized account access.

Limited Retention

Personal data retained only as long as legally required or necessary for service provision.

Right to Deletion

Request permanent deletion of your personal data after account closure, subject to legal obligations.

3. How We Use Your Information

totogp uses your personal information for the following legitimate business purposes:

3.1 Service Provision

  • Create and manage your user account
  • Process deposits, withdrawals, and internal account transfers
  • Enable you to place bets and play games on the Platform
  • Calculate and credit winnings to your account
  • Provide customer support and respond to your inquiries
  • Send transaction confirmations, account notifications, and service updates

3.2 Legal and Regulatory Compliance

  • Verify your identity and age (21+ requirement) through KYC procedures
  • Prevent fraud, money laundering, and other illegal activities
  • Comply with anti-money laundering (AML) regulations and reporting obligations
  • Enforce our Terms and Conditions and prevent prohibited activities
  • Respond to legal requests from law enforcement or regulatory authorities
  • Maintain records as required by gaming regulations and tax laws

3.3 Platform Improvement and Analytics

  • Analyze usage patterns to improve Platform functionality and user experience
  • Develop new features, games, and services based on player preferences
  • Conduct internal research and testing to enhance security and performance
  • Generate anonymized statistical data for business intelligence purposes

3.4 Marketing and Communications (With Your Consent)

  • Send promotional offers, bonus announcements, and special event notifications
  • Deliver personalized content based on your gaming preferences and history
  • Invite participation in surveys, competitions, or player feedback programs

Note: You may opt out of marketing communications at any time by adjusting your account preferences or clicking the "unsubscribe" link in any promotional email. Opting out does not affect essential service communications (transaction confirmations, security alerts, policy updates).

4. Data Sharing and Disclosure

totogp does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating the Platform, including:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals.
  • Identity Verification Services: KYC verification providers to confirm your identity and age.
  • Game Suppliers: Third-party game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming) to deliver live casino and slot games.
  • Cloud Hosting Providers: Secure server hosting and data storage services.
  • Customer Support Tools: Live chat and ticketing system providers to manage support communications.

All service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize. They are prohibited from selling or using your data for their own marketing purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, or government agencies when required by law or when we believe in good faith that disclosure is necessary to:

  • Comply with legal obligations, court orders, or regulatory requests
  • Investigate suspected fraud, money laundering, or other illegal activity
  • Enforce our Terms and Conditions or protect our legal rights
  • Protect the safety and security of users or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and the choices you have regarding your information.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Policy if we obtain your explicit consent.

5. Data Security Measures

totogp implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Controls

  • Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, payment details) is encrypted using industry-standard algorithms.
  • Firewalls: Network-level firewalls protect our servers from unauthorized external access.
  • Access Controls: Role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their job functions.
  • Two-Factor Authentication: Optional 2FA adds an extra security layer to your account login process.
  • Intrusion Detection: Automated monitoring systems detect and respond to suspicious activity in real-time.

5.2 Organizational Security Practices

  • All employees with access to personal data undergo background checks and sign confidentiality agreements.
  • Regular security awareness training ensures staff understand data protection responsibilities.
  • Third-party security audits and penetration testing validate our security posture.
  • Incident response procedures enable rapid containment and remediation of security breaches.

Your Responsibility

While we implement strong security measures, you are responsible for protecting your account credentials. Never share your password, enable two-factor authentication, use a strong unique password, and log out after each session on shared devices. Report any suspected unauthorized access to your account immediately.

6. Data Retention

totogp retains your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

6.1 Active Account Data

While your account remains active, we retain all personal information, transaction history, and gameplay data to provide ongoing service and comply with regulatory requirements.

6.2 Closed Account Data

After you close your account, we retain certain information for legal and regulatory compliance purposes, including:

  • Financial Records: Transaction history, deposits, withdrawals, and betting records are retained for 7 years as required by Indonesian tax and anti-money laundering regulations.
  • Identity Documents: KYC verification documents are retained for 5 years to comply with gaming license requirements.
  • Communication Records: Customer support correspondence and dispute records are retained for 3 years for legal protection purposes.

6.3 Data Deletion

After the applicable retention period expires, personal data is securely deleted or anonymized so it can no longer identify you. You may request early deletion of certain non-essential data by contacting our Data Protection Officer (see Section 12).

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You may request a copy of the personal information we hold about you, including account details, transaction history, and KYC documents. We will provide this information in a commonly used electronic format within 30 days of your request.

7.2 Right to Rectification

You may update or correct inaccurate personal information through your account settings or by contacting customer support. Certain changes (e.g., legal name, date of birth) may require supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information after closing your account, subject to our legal retention obligations. Data required for regulatory compliance cannot be deleted prematurely.

7.4 Right to Object

You may object to processing of your data for marketing purposes at any time. You cannot object to processing necessary for service provision or legal compliance.

7.5 Right to Data Portability

You may request that we export your personal data in a machine-readable format for transfer to another service provider.

7.6 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through our customer support channels. We may require identity verification before processing your request.

8. Cookies and Tracking Technologies

totogp uses cookies and similar tracking technologies to enhance your experience on the Platform:

8.1 What Are Cookies

Cookies are small text files stored on your device that help websites remember your preferences and recognize you on return visits. We use both session cookies (deleted when you close your browser) and persistent cookies (remain until expiration or manual deletion).

8.2 Types of Cookies We Use

  • Essential Cookies: Required for Platform functionality, including account login, session management, and security features. These cannot be disabled.
  • Performance Cookies: Collect anonymous usage data to help us improve Platform performance and identify technical issues.
  • Functionality Cookies: Remember your preferences (language, display settings) for a personalized experience.
  • Marketing Cookies: Track your interaction with promotional content and measure marketing campaign effectiveness (with your consent).

8.3 Managing Cookies

Most browsers allow you to control cookies through settings. However, disabling essential cookies may prevent you from accessing certain Platform features. You can manage cookie preferences through your browser settings or our cookie consent tool.

9. International Data Transfers

While totogp primarily serves Indonesian players, some of our service providers and data storage facilities are located outside Indonesia. When we transfer your personal data internationally, we ensure adequate protection through:

  • Standard contractual clauses approved by international data protection authorities
  • Transfers only to countries with adequate data protection frameworks
  • Binding corporate rules and data processing agreements with all third-party processors

We remain responsible for your data protection regardless of where your information is processed.

10. Children's Privacy

totogp strictly prohibits use of the Platform by anyone under 21 years of age. We do not knowingly collect personal information from minors. Our KYC verification process is designed to prevent underage registration.

If we discover that a user is underage, we will immediately suspend the account, delete all associated personal data (except as required for legal compliance), and refund any deposited funds to the payment source. Parents or guardians who believe a minor has accessed the Platform should contact us immediately at [email protected].

11. Policy Changes

totogp reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this Policy
  • Send email notification to your registered email address
  • Display a prominent notice on the Platform for 30 days

Your continued use of the Platform after receiving notice of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you must close your account and cease using the Platform.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact us:

General Privacy Inquiries

  • Email: [email protected]
  • Customer Support: 24/7 live chat available through the Platform
  • WhatsApp: +62 812-3456-7890 (text only, no calls)

Data Protection Officer

For formal data protection requests (access, deletion, portability) or to lodge a complaint, contact our Data Protection Officer:

  • Email: [email protected]
  • Response Time: We aim to respond to all privacy requests within 30 days

We take all privacy concerns seriously and are committed to resolving issues promptly and transparently.

Questions About Your Privacy?

Our Data Protection Officer is available to address your privacy concerns and assist with data requests. Visit our FAQ for common privacy questions or contact support for personalized help.