Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how tot777 ("tot777," "we," "us," or "our") collects, processes, stores, and protects the personal information of users ("you," "your") who register for, access, or interact with the tot777 online betting platform available at https://tot777.cam ("Platform").

tot777 primarily serves English-preference players based in Indonesia. We recognize our users' right to privacy as fundamental and are committed to handling personal data with transparency, integrity, and proportionality. This Policy applies to all personal information we collect through the Platform, our customer support channels, and any related communications. It does not apply to third-party websites, services, or providers linked from or integrated into the Platform, each of which maintains its own privacy practices.

By creating a tot777 account or continuing to use our Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree, please discontinue your use of the Platform and contact customer support to close your account.

2. Definitions

The following terms have specific meanings throughout this Policy:

• Personal Data — any information relating to an identified or identifiable natural person; this includes names, identification numbers, location data, email addresses, financial information, and device identifiers.
• Processing — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• Data Controller — tot777, which determines the purposes and means of processing Personal Data.
• Data Processor — a third party that processes Personal Data on behalf of tot777 under a contractual obligation.
• Consent — a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data.
• KYC (Know Your Customer) — identity and age verification procedures required by international gaming regulations to confirm player eligibility.
• Cookies — small text files placed on your device by the Platform to store session information and user preferences.
• Device Data — technical information about the device used to access the Platform, including IP address, browser type, operating system, and device identifiers.

3. Information We Collect

We collect several categories of information to provide a safe, personalized, and compliant betting experience. The specific data we collect depends on how you interact with the Platform.

3.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile phone number, username, password, and residential address.
• Identity Verification (KYC) Documents: Government-issued identification (Indonesian KTP, passport, or driver's licence), proof of address (utility bill, bank statement), and payment method verification documents.
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet credentials (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. We do not store full card numbers or complete banking credentials; these are handled by our certified payment processors.
• Support Communications: Messages, emails, or chat transcripts exchanged with our customer support team.
• Voluntary Submissions: Any additional information you choose to provide, such as in feedback forms or survey responses.

3.2 Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features accessed, betting and gaming activity logs, session duration, clickstream data, and error reports.
• Location Data: Approximate geographic location derived from your IP address for fraud prevention and regulatory compliance.
• Cookies & Similar Technologies: Session cookies, persistent cookies, pixel tags, and local storage data as detailed in Section 7.

3.3 Information from Third Parties

• Identity verification data from KYC service providers used to confirm your identity and age.
• Fraud detection signals from security intelligence partners to protect your account and the Platform.
• Payment status and transaction confirmation data from your bank or e-wallet provider.

4. How We Use Your Information

tot777 uses collected personal data for the following purposes:

4.1 Account Management & Service Delivery

• Creating and managing your tot777 account, including authentication and security.
• Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets.
• Providing access to sports betting, live casino games, togel (Indonesia's traditional numbers lottery) markets, sabung ayam (live cockfighting streams), and all other Platform features.
• Calculating and crediting winnings, bonuses, and promotions to your account.

4.2 Identity Verification & Regulatory Compliance

• Verifying your age (21+ requirement) and identity through KYC procedures.
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Meeting international gaming license requirements and regulatory reporting obligations.

4.3 Security & Fraud Prevention

• Detecting, investigating, and preventing fraud, unauthorized account access, bonus abuse, and other prohibited activities.
• Monitoring betting patterns for suspicious activity consistent with match-fixing or collusion.
• Maintaining platform integrity and protecting other players from harm.

4.4 Responsible Gaming

• Monitoring gameplay for signs of problem gambling behavior as part of our commitment to player welfare.
• Implementing deposit limits, session reminders, and self-exclusion restrictions requested by you.
• Referring players to appropriate support resources where necessary.

4.5 Customer Support

• Responding to inquiries, complaints, and support requests via live chat, WhatsApp, and email.
• Resolving disputes and processing refund or withdrawal requests.
• Improving support quality through review of communication records.

4.6 Marketing & Personalization

• Sending promotional offers, bonus notifications, and platform updates where you have consented to receive marketing communications.
• Personalizing your Platform experience based on your gaming preferences, deposit history, and navigation behavior.
• You may opt out of marketing communications at any time by contacting customer support.

5. Legal Basis for Processing

tot777 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to create and manage your account, process transactions, and deliver Platform services under our Terms & Conditions.
• Legal Obligation: Processing necessary to comply with KYC, AML, CTF, and international gaming regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform integrity, and responsible gaming oversight — balanced against your rights and interests.
• Consent: Processing for direct marketing communications, optional personalization features, or any purpose where we have specifically requested and obtained your consent. You may withdraw consent at any time without affecting prior processing.

6. Data Sharing & Disclosure

tot777 shares personal data only in the circumstances described below. We do not sell or rent your data to any third party for their own commercial purposes.

6.1 Service Providers & Data Processors

We engage third-party companies to support our operations. These processors act only on our documented instructions and are contractually prohibited from using your data for their own purposes:

• Payment Processors: Indonesian bank partners and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate financial transactions.
• KYC & Identity Verification Providers: Specialist services that verify government-issued identification and address documents.
• Fraud Prevention Partners: Security intelligence companies that help identify and prevent fraudulent activity.
• Game Content Providers: Licensed studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) that operate the games accessible on the Platform. These providers may receive limited session data necessary for game delivery.
• Customer Support Technology: Live chat and communication platforms used to deliver 24/7 support in Indonesian and English.
• Cloud & Hosting Infrastructure: Secure server and content delivery network providers that host the Platform and its data.

6.2 Legal & Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of tot777's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via the Platform or by email if such a transfer occurs and if it materially affects the handling of your personal data.

7. Cookies & Tracking Technologies

tot777 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and gather analytical data. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, authentication, security, and payment processing. They cannot be disabled without breaking core functionality.
• Performance & Analytics Cookies: Collect anonymized data about how users navigate the Platform, which features are most used, and where errors occur. This data helps us improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as language, display settings, and notification options to provide a more personalized experience during and between sessions.
• Marketing & Targeting Cookies: Used with your consent to deliver relevant promotional content and measure the effectiveness of marketing campaigns. You may opt out of these at any time via your browser settings or by contacting support.

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of the Platform. For detailed guidance on managing cookies, consult your browser's help documentation.

8. Data Retention

tot777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable regulatory requirements. Our standard retention periods are as follows:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and KYC regulatory obligations.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by international financial regulations.
• Betting & Gaming Activity Logs: Retained for three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Communications: Retained for two (2) years from the date of last interaction for quality assurance and dispute reference purposes.
• Marketing Preferences & Consent Records: Retained for the duration of your account plus three (3) years to demonstrate compliance with consent requirements.
• Device & Technical Data: Typically retained for twelve (12) months for security and fraud prevention analysis.

Once data is no longer required for its primary purpose and relevant retention periods have expired, we securely delete or anonymize it in a manner that prevents reconstruction or identification.

9. Data Security

tot777 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• SSL/TLS Encryption: All data transmitted between your device and the tot777 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo regular security training and background screening.
• Two-Factor Authentication (2FA): Available for player accounts to provide an additional layer of login security. We strongly recommend enabling 2FA on your tot777 account.
• Regular Security Audits: Our systems undergo periodic penetration testing, vulnerability assessments, and third-party security audits to identify and remediate risks.
• Payment Security: All payment transactions are processed by PCI-DSS-compliant payment processors. tot777 does not store full card numbers or complete banking credentials on its own servers.

Despite our robust security practices, no system is entirely immune to risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable regulatory timelines.

10. International Data Transfers

tot777 operates on a global infrastructure. As a result, your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy, including:

• Contractual clauses with third-party processors requiring them to apply equivalent data protection standards.
• Use of processors certified under recognized international security frameworks.
• Regular assessment of third-country data protection adequacy before engaging new processors in those jurisdictions.

By using the tot777 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia for the purposes described in this Policy.

11. Your Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by tot777:

• Right of Access: You may request a copy of the personal data we hold about you, along with information on how it is processed.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request correction. You can update basic profile information directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to regulatory retention obligations that may override this right.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute is being investigated.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Upon such objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our customer support team via live chat or email. We will respond to verifiable requests within a reasonable timeframe and no later than 30 calendar days. Identity verification may be required before we can action certain requests.

12. Children's Privacy

tot777 is strictly an adults-only platform. Our services are intended exclusively for individuals who are at least 21 years of age. We do not knowingly collect, process, or store personal data from anyone under the age of 21.

Age verification is a mandatory part of our registration and KYC process. If we become aware that a user is under 21, or that personal data has been inadvertently collected from an individual below that age threshold, we will immediately suspend the account, void any associated transactions, and securely delete all related personal data.

If you believe that a minor has created a tot777 account or that we have unintentionally collected data from someone under 21, please contact our customer support team immediately so we can investigate and take appropriate action.

13. Changes to This Policy

tot777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Display a prominent notice on the Platform or send you a notification via your registered email address.

Your continued use of the tot777 Platform after the updated Policy has been published constitutes your acceptance of the revised terms. If you do not agree with any changes, you should discontinue use of the Platform and contact customer support to close your account. We recommend reviewing this page periodically to remain informed of how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tot777 handles your personal data, please reach out to our dedicated privacy support team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week directly on the tot777 Platform.
• WhatsApp Support: Indonesian-speaking agents available around the clock for real-time assistance.

For data access, rectification, or erasure requests, please include your registered username and a clear description of your request. We may need to verify your identity before processing certain types of requests to protect the security of your account.