toto777 Platform Privacy Notice

This page describes what we collect when you use toto777 and how we keep that data protected. We at toto777 operate an online entertainment service available where local law permits. Our commitment is to handle your personal information with transparency and care, and to explain exactly how your data moves through our systems.

When you create an account on toto777, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or place a wager on Liga 1 matches or live-dealer tables, we collect specific details to verify your identity, process your transactions, and comply with applicable regulations. We do not sell your data to third parties, and we do not use it for marketing beyond your own account activity on toto777.

Our servers may sit outside your jurisdiction, but we apply the same data-protection standards regardless of where your information is stored. This notice sets out what we collect, who can access it, how long we keep it, and what rights you have.

What we collect on toto777

We collect your email address, phone number, full name, date of birth, and residential address when you register. During account verification, we may request a copy of your national ID, passport, or driver's licence. We also collect your banking details when you link a payment method—whether that is DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a direct bank transfer via mobile banking, local payment, online payment, or e-wallet.

Every time you log in, deposit, withdraw, or place a wager on toto777, we record the timestamp, the amount, the game or market you accessed, and the outcome. We log your IP address and device type. We store cookies to remember your login session and your language preference. We do not track your browsing outside toto777.

Data retention: We keep your account data for as long as your account is active. After closure, we retain transaction records for seven years to meet regulatory obligations.

How we use your data

We use your personal information to verify your identity, prevent fraud, and settle your deposits and withdrawals. We use your transaction history to calculate your account balance and to generate your monthly statement. We use your email and phone number to send you account notifications—such as login alerts, deposit confirmations, and withdrawal status updates.

We do not use your data to send unsolicited marketing emails or SMS. We do not share your name, address, or banking details with other gaming operators. We may share anonymised transaction data with our payment processors (the banks and e-wallet providers behind mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment) to complete your payment requests.

Our live-dealer studios in Jakarta and Surabaya may record video feeds of the tables you play on, but your face is not captured or stored. The video is used only to settle disputes about game outcomes and is deleted after 90 days.

Third-party processors

We work with payment processors, identity-verification vendors, and cloud-hosting providers. These third parties may access your data only to the extent needed to perform their service. They are contractually bound to keep your information confidential and not to use it for their own purposes. Our hosting provider may store your data on servers outside Indonesia, but we apply encryption in transit and at rest.

We do not sell your data. We do not share your information with advertisers, data brokers, or affiliate networks. If we are required by law to disclose your data to a government agency or court, we will notify you unless we are legally prohibited from doing so.

Your rights and our commitments

You have the right to request a copy of all personal data we hold about you. You may ask us to correct inaccurate information or to delete your account and associated records (subject to our legal retention obligations). You may withdraw consent for us to use your data for non-essential purposes, such as account notifications, by updating your preferences in your account settings on toto777.

We undertake to respond to data-access requests within 14 days. We undertake to notify you of any data breach that affects your account security. We undertake to keep your password encrypted and never to display it in plain text, even to our support team.

Our services are available only where local law permits. We do not offer our services in jurisdictions where online wagering is prohibited. Users are responsible for verifying that access and use comply with their own jurisdiction's law. If you have questions about our privacy practices or wish to exercise your data rights, contact our support team via email or the contact form on toto777. We aim to respond within two business days.

Last updated: This notice reflects our current data practices. We may update it if our systems or regulations change. We will notify you of material changes by email.