Your privacy matters to us. This Privacy Policy explains exactly what personal data toto70 collects, why we collect it, how we use and protect it, and what rights you hold over your information.
A plain-language summary of our core privacy commitments. The full legal text follows below — this summary does not replace it.
All data transmitted between your browser and toto70's servers is protected by 256-bit SSL/TLS encryption. This applies to every page — login, cashier, game sessions, and customer support interactions — without exception.
toto70 does not sell, rent, or trade your personal information to unaffiliated third parties for marketing or commercial purposes. Your data is used solely to operate your account, verify your identity, process transactions, and improve platform services.
As a toto70 member, you have the right to request access to the personal data we hold about you, to correct inaccuracies, and to request deletion of your data under certain conditions. Submit requests in writing to our support team.
toto70 uses strictly necessary and functional cookies to operate the platform, plus analytics cookies (anonymized) to understand usage patterns and improve the member experience. We do not use cross-site advertising trackers.
Transaction records and identity verification documents are retained for a minimum of five years in compliance with international anti-money laundering standards. Account data for closed accounts is retained for the legally required period and then securely deleted.
toto70 serves Indonesian members and handles data in the context of the Indonesian market — including local bank credentials (BCA, BRI, BNI, Mandiri), e-wallet accounts (OVO, DANA, GoPay), and national identity documents (KTP). All such data is treated with the highest security standards.
toto70 ("we", "us", "our") operates the online betting platform accessible at toto70.bio (the "Platform"). We are committed to protecting the privacy and personal data of every individual who registers an account, visits our website, or otherwise interacts with our services ("you", "Member", "User").
This Privacy Policy describes in detail the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, the circumstances in which data may be shared with third parties, the security measures we apply, and the rights available to you as a data subject. This policy applies to all Members, regardless of whether they access the Platform from Jakarta, Surabaya, Bandung, Medan, Bali, or any other location within Indonesia.
This Privacy Policy forms part of our Terms & Conditions and should be read alongside that document. In the event of any conflict between the two, the Terms & Conditions will prevail to the extent of that inconsistency, except where this Privacy Policy imposes a higher standard of data protection.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
toto70 collects only the Personal Data that is necessary for the purposes described in this policy. The categories of data we collect include:
toto70 collects Personal Data through the following channels:
We process Personal Data for the purposes listed below. For each purpose, we identify the legal basis on which we rely:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your Member account | Performance of contract |
| Verifying your identity and age (KYC) before enabling withdrawals | Legal obligation & performance of contract |
| Processing deposits and withdrawals via Indonesian banks and e-wallets | Performance of contract |
| Detecting and preventing fraud, collusion, bonus abuse, and money laundering | Legal obligation & legitimate interests |
| Enforcing responsible gaming controls (deposit limits, self-exclusion) | Legal obligation & legitimate interests |
| Providing customer support and resolving disputes | Performance of contract & legitimate interests |
| Sending transactional communications (deposit confirmations, withdrawal notices, security alerts) | Performance of contract |
| Sending promotional communications about bonuses and new game releases | Consent (you may opt out at any time) |
| Improving Platform performance, UX, and game portfolio | Legitimate interests |
| Complying with applicable anti-money laundering (AML) record-keeping obligations | Legal obligation |
toto70 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:
We engage carefully vetted third-party processors who act under our instructions and are bound by contractual data protection obligations. These include:
We may disclose Personal Data to competent authorities, regulators, or law enforcement agencies when required to do so by applicable law, a valid court order, or a regulatory directive from our licensing authority. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and, where permitted by law, will notify you of the disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of toto70's assets, Personal Data held by toto70 may be transferred to the acquiring entity as part of that transaction. We will notify affected Members of any such transfer via their registered email address at least 30 days prior to the effective date, and Members will have the option to close their accounts and withdraw their Real Money Balance before the transfer takes effect.
We may share your data with additional third parties in circumstances not described above where we have obtained your explicit prior consent. You may withdraw that consent at any time by contacting support.
toto70 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and understand how Members use our services. The table below describes the categories of cookies we use:
| Cookie Category | Purpose | Can You Disable? |
|---|---|---|
| Strictly Necessary | Session management, authentication, CSRF protection, load balancing. Required for the Platform to function. | No — disabling these will prevent the Platform from working correctly. |
| Functional | Remembering language preferences, game display settings, and session time-out configurations. | Yes — disabling will reset your preferences on each visit. |
| Analytics | Anonymized page-view data, navigation paths, and feature usage statistics used to improve the Platform. No personally identifiable information is included. | Yes — opt out via your browser's cookie settings. |
| Security | Device fingerprinting and behavioral analysis used to detect unusual login activity, bot traffic, and potential account takeover attempts. | Partial — these are essential to account security and cannot be fully disabled without affecting account protection. |
You may manage cookie preferences through your browser settings. Note that disabling cookies beyond the "Functional" and "Analytics" categories may impair your ability to log in or use core Platform features. toto70 does not use cross-site advertising cookies or tracking pixels connected to social media advertising networks.
toto70 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data (active accounts) | Duration of account plus 5 years after closure | AML legal obligation |
| KYC identity documents | 5 years from date of submission | AML legal obligation |
| Transaction records (deposits, withdrawals, wagers) | 5 years from transaction date | AML legal obligation |
| Customer support correspondence | 3 years from date of last communication | Legitimate interests (dispute resolution) |
| Analytics and session logs | 13 months (rolling) | Legitimate interests (platform improvement) |
| Self-exclusion records | Duration of exclusion plus 7 years | Responsible gaming obligation |
| Marketing consent records | Until consent is withdrawn plus 2 years | Consent accountability |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be attributed to any individual. Anonymized, aggregated statistical data derived from your activity may be retained indefinitely for business intelligence purposes.
toto70 implements a comprehensive, layered information security program to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:
toto70 respects your rights over your Personal Data. The following rights are available to all Members:
You may request a copy of the Personal Data we hold about you. We will provide this in a structured, commonly used format within 30 days of receiving your written request. The first copy is provided free of charge; subsequent requests within a 12-month period may incur a reasonable administrative fee.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For changes to identity information (name, date of birth), we may require supporting documentation to verify the change before updating our records.
You may request deletion of your Personal Data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) you object to processing and there are no overriding legitimate grounds. Note that erasure requests cannot be fulfilled where data retention is required by law — for example, AML regulations require us to retain transaction records for five years regardless of account closure.
You may request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing based on legitimate interests is being assessed.
Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your Personal Data in a machine-readable format (CSV or JSON) suitable for transfer to another controller.
You have the right to object at any time to processing of your Personal Data based on legitimate interests or for direct marketing purposes. We will cease processing for marketing purposes immediately upon receipt of your objection. For other legitimate-interest processing, we will assess whether compelling grounds exist to continue.
toto70 uses automated systems for fraud detection, bonus-abuse monitoring, and AML transaction screening. Where an automated decision produces a significant adverse effect on your account (such as suspension or withdrawal hold), you have the right to request human review of that decision by contacting our compliance team in writing.
To exercise any of the rights listed above, please contact toto70 support via live chat or email at [email protected]. We will respond to all valid requests within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
toto70 is strictly an adults-only platform. The minimum age to register and use toto70 is 21 years of age. We do not knowingly collect Personal Data from individuals under the age of 21. Our KYC verification process is specifically designed to detect and reject underage registration attempts.
If we become aware that Personal Data has been collected from a person under 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on toto70 using false information, please contact our support team immediately at [email protected].
The Platform integrates third-party game engines and payment systems that operate under their own privacy policies. While toto70 selects third-party providers carefully and requires contractual data protection standards, we are not responsible for the privacy practices of third-party services accessed through our Platform.
toto70.bio does not contain links to external third-party websites. All navigation on the Platform remains within the toto70.bio domain. If you independently navigate to any external site from your browser, toto70's Privacy Policy does not apply to that site and we recommend reviewing its own privacy notice.
toto70's primary infrastructure is hosted in data centers selected for their security certifications and proximity to the Indonesian user base. Some third-party processors — including certain game studio providers and fraud detection services — may process data in jurisdictions outside Indonesia. In such cases, toto70 ensures that appropriate safeguards are in place, including:
By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. toto70 will always ensure such transfers comply with applicable data protection principles and that your data receives an equivalent level of protection to that described in this policy.
toto70 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal obligations, or improvements to our services. Material changes — meaning changes that significantly affect how we use your Personal Data or the rights available to you — will be communicated to all registered Members by email to their registered address at least 14 days before the change takes effect.
Minor amendments, such as clarifications of existing provisions or corrections of typographical errors, may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically.
Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, please cease using the Platform and contact support to close your account and arrange return of any Real Money Balance.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how toto70 handles your Personal Data, please contact our support team:
We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 days. For complex requests involving large volumes of data or requiring legal assessment, we may notify you of an extension of up to a further 30 days.
If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint in writing to toto70's compliance team. We will provide a final written determination within 30 days of escalation. If the matter remains unresolved, you may seek independent redress through any applicable data protection supervisory authority or dispute resolution mechanism available under toto70's licensing framework.
Now that you understand how we protect your personal data, explore everything toto70 has to offer — sports betting, live casino, slots, togel, and Mahjong — all in a secure, SSL-encrypted Rupiah environment.
21+ only. Gambling involves financial risk. Please play responsibly. Responsible Gaming