Privacy Policy

Last Updated: January 15, 2026

Effective Date: January 15, 2026

1. Introduction

Welcome to the toto13 Privacy Policy. This document explains how toto13 ("we", "us", "our", or "the Company") collects, uses, stores, protects, and shares your personal information when you use our online betting platform at https://toto13.cam (the "Platform" or "Website"). We are committed to protecting your privacy and handling your personal data transparently in accordance with international data protection standards and best practices.

By creating an account on toto13, accessing our Website, or using any of our services (sports betting, casino gaming, lottery, customer support), you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy. If you do not agree with our data handling practices, you should not use toto13 services.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. Together, these documents form the complete legal framework governing your relationship with toto13.

2. Data Controller

For the purposes of data protection law, the data controller responsible for your personal information is toto13, operating under international gaming licenses. The data controller determines the purposes and means of processing your personal data.

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection Officer at:

• Email: [email protected]
• General Support: [email protected]
• Mailing Address: Available upon request for formal data protection inquiries

3. Information We Collect

toto13 collects several types of personal information to provide, maintain, and improve our services. The information we collect falls into the following categories:

3.1 Information You Provide Directly

When you register for a toto13 account, you voluntarily provide us with the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (Indonesian national ID card / KTP) required for KYC (Know Your Customer) verification.
• Contact Information: Email address, mobile phone number, residential address (street address, city, postal code, province).
• Account Credentials: Username, password, and security questions/answers for account protection.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment transaction history.
• Verification Documents: Proof of address documents (utility bills, bank statements), selfie photographs holding identification for identity verification purposes.

3.2 Information Collected Automatically

When you access and use toto13, we automatically collect certain technical and behavioral information:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers.
• Usage Data: Pages visited, features used, time spent on the Platform, click patterns, navigation paths, games played, bets placed, deposits and withdrawals made.
• Connection Information: IP address, internet service provider (ISP), geographic location (country, city), time zone, connection timestamp.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 9 for detailed Cookies Policy).

3.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment Processors: Transaction data, payment confirmation, fraud detection signals from our Indonesian banking partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Verification status, fraud risk scores, document authenticity checks from KYC service providers.
• Marketing Partners: Referral information, campaign tracking data (only where you have consented to such data sharing).

4. How We Use Your Data

toto13 processes your personal information for the following specific purposes, each based on a lawful basis for processing:

4.1 Account Management and Service Provision

• Creating and maintaining your toto13 user account
• Verifying your identity and age (ensuring you are 21 years or older)
• Processing deposits, withdrawals, and financial transactions
• Managing your bets, game sessions, and account balance
• Providing customer support and responding to your inquiries

Lawful Basis: Performance of contract (providing the services you requested when registering).

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing fraud, underage gambling, and criminal activity
• Maintaining records for audit and regulatory reporting purposes
• Responding to legal requests from law enforcement or regulatory authorities
• Enforcing our Terms and Conditions and other policies

Lawful Basis: Legal obligation and legitimate interests (protecting our business and users from fraud and illegal activity).

4.3 Platform Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, account takeovers, and multi-accounting
• Monitoring betting patterns for suspicious activity or bonus abuse
• Securing our IT infrastructure and protecting against cyberattacks
• Investigating disputes, chargebacks, and policy violations

Lawful Basis: Legitimate interests (maintaining platform security and integrity).

4.4 Service Improvement and Analytics

• Analyzing user behavior to improve website usability and user experience
• Understanding which games, sports betting markets, and features are most popular
• Testing new features and optimizing platform performance
• Conducting market research and statistical analysis

Lawful Basis: Legitimate interests (improving our services and understanding our users' preferences).

4.5 Marketing and Promotional Communications

• Sending promotional emails about bonuses, tournaments, and special offers (only with your consent)
• Displaying personalized promotional content based on your gaming preferences
• Notifying you about new games, features, and platform updates
• Administering loyalty programs and VIP rewards

Lawful Basis: Consent (you can opt out of marketing communications at any time via account settings or email unsubscribe links).

5. Data Sharing and Disclosure

toto13 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality agreements:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• KYC Verification Services: Third-party identity verification providers who check the authenticity of your documents and perform fraud screening.
• Gaming Software Providers: Companies that supply our casino games, live dealer tables, and sports betting platforms (they receive limited data necessary to operate games).
• Cloud Hosting Services: Infrastructure providers who host our servers and databases (all data is encrypted and stored securely).
• Customer Support Tools: Live chat and ticketing system providers who help us manage customer inquiries.
• Analytics Services: Tools like Google Analytics that help us understand website traffic and user behavior (anonymized where possible).

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, or government authorities when required by law or when necessary to:

• Comply with legal obligations or court orders
• Respond to lawful requests for information
• Protect our rights, property, or safety, or that of our users
• Investigate suspected fraud, money laundering, or criminal activity

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Website before your data is transferred and becomes subject to a different Privacy Policy.

6. Data Security Measures

toto13 takes data security extremely seriously and implements comprehensive technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected using industry-standard SSL/TLS encryption. Sensitive financial data and passwords are encrypted at rest using AES-256 encryption.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS certified payment gateways. We do not store complete credit card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions. All personnel sign confidentiality agreements.
• Regular Security Audits: Our systems undergo regular security assessments, penetration testing, and vulnerability scanning to identify and address potential risks.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS protection.
• Data Backup: Regular encrypted backups ensure data integrity and availability in case of system failures or disasters.

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and must not share your password with others. If you suspect unauthorized access to your account, contact us immediately at [email protected].

7. Data Retention Periods

toto13 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations:

• Active Accounts: We retain your account data and transaction history for the duration of your active account plus a reasonable period thereafter for customer service and dispute resolution.
• Closed Accounts: After you close your account, we retain certain information (identity verification documents, financial transaction records) for up to 7 years to comply with anti-money laundering regulations and tax reporting requirements.
• Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again.
• Technical Logs: Server logs and analytics data are typically retained for 12-24 months unless longer retention is required for security investigation or legal purposes.

At the end of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be used to identify you.

8. Your Privacy Rights

Under international data protection principles, you have the following rights regarding your personal information held by toto13:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
• Right to Rectification: If your personal information is inaccurate or incomplete, you may request that we correct or update it. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances (e.g., when it is no longer necessary for the purposes for which it was collected). Note that we may need to retain certain data to comply with legal obligations.
• Right to Restriction of Processing: You may request that we limit how we use your data in certain situations (e.g., while we verify the accuracy of information you have disputed).
• Right to Data Portability: You may request to receive your personal data in a portable format and transmit it to another service provider (where technically feasible).
• Right to Object: You may object to our processing of your data for direct marketing purposes or based on legitimate interests. We will stop processing unless we have compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we process your data based on consent (e.g., marketing communications), you may withdraw your consent at any time.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days. You may also lodge a complaint with a data protection authority in your jurisdiction if you believe we have violated your privacy rights.

9. Cookies and Tracking Technologies

toto13 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

Types of Cookies We Use:

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable basic features like account login, secure transactions, and session management. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how visitors use toto13, such as which pages are visited most often. This helps us improve website performance and user experience.
• Functionality Cookies: Remember your preferences (e.g., language settings, display options) to provide a more personalized experience.
• Advertising Cookies: Used to deliver targeted advertisements relevant to your interests. These cookies may track your activity across multiple websites.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may affect the functionality of toto13 services.

10. Marketing Communications

With your consent, toto13 may send you promotional emails about bonuses, tournaments, new games, and special offers. We may also display personalized promotional content on the Platform based on your gaming preferences and behavior.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email
• Adjusting your communication preferences in your account settings
• Contacting customer support at [email protected]

Please note that even if you opt out of marketing communications, we will still send you essential transactional emails related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts), as these are necessary for providing our services.

11. Protection of Minors

toto13 is committed to preventing underage gambling. Our services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors.

During the KYC verification process, we verify that all users are at least 21 years old by checking government-issued identification documents. If we discover that we have inadvertently collected personal information from a minor, we will immediately delete that information and permanently close the associated account.

Parents and guardians are encouraged to monitor their children's internet usage and use parental control software to prevent minors from accessing gambling websites. If you believe a minor has accessed toto13 or provided personal information to us, please contact us immediately at [email protected].

12. Privacy Policy Updates

toto13 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address (for significant changes)
• Displaying a prominent notice on the toto13 homepage or in your account dashboard

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of toto13 services after policy changes indicates your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how toto13 handles your personal data, please contact us using the following channels:

• Data Protection Officer: [email protected]
• General Customer Support: [email protected]
• Live Chat: Available 24/7 through the toto13 website (for non-urgent privacy inquiries)
• Support Hours: 24 hours per day, 7 days per week (Indonesian time zone / WIB)

Our team is fluent in both English and Bahasa Indonesia and is committed to addressing your privacy concerns promptly and professionally. For formal data protection requests (e.g., data access, deletion requests), please allow up to 30 days for a complete response.