Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, storage, and protection of personal data by tot303 (referred to as "we," "us," or "our"), operating at https://tot303.cam. By creating an account and using our services, you consent to the data practices described in this policy.

tot303 operates as an online betting platform licensed under international gaming regulations. We serve players primarily in Indonesia and process personal information in accordance with applicable data protection laws and industry best practices.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at [email protected].

2. Information We Collect

tot303 collects personal information necessary to provide our services, comply with legal obligations, and improve your user experience. The types of data we collect include:

2.1 Information You Provide Directly

When you register an account, complete KYC verification, or interact with our platform, you provide the following information:

• Personal Identification: Full legal name, date of birth, nationality, residential address, email address, phone number.
• Identity Verification Documents: Indonesian ID card (KTP), passport, or other government-issued identification required for KYC compliance and age verification (21+ requirement).
• Financial Information: Bank account details (for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers.
• Communication Data: Messages sent to customer support, survey responses, feedback submissions, chat transcripts.

2.2 Information Collected Automatically

When you use tot303, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, mobile carrier, unique device identifiers.
• Usage Data: Pages visited, features used, games played, bet history, win/loss records, session duration, clickstream data, referral sources.
• Location Data: Approximate geographic location based on IP address to verify Indonesian residency and comply with geo-restriction requirements.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar technologies (see Section 7 for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmations, payment status, fraud detection data from Indonesian banks and e-wallet providers.
• Identity Verification Services: Age verification results, identity authentication data, fraud prevention scores.
• Game Providers: Gameplay data, game outcomes, bonus usage from third-party casino and sports betting suppliers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, etc.).

3. How We Use Your Information

tot303 uses your personal data for the following legitimate business purposes:

3.1 Service Delivery and Account Management

• Create and maintain your player account
• Process deposits and withdrawals to/from BCA, BRI, BNI, Mandiri, and e-wallet accounts
• Facilitate sports betting, live casino, slots, and other gaming activities
• Calculate and credit winnings, bonuses, and promotional rewards
• Provide customer support via live chat, WhatsApp, email, and in-app messaging
• Send transactional notifications (deposit confirmations, withdrawal status, bonus activations)

3.2 Legal and Regulatory Compliance

• Verify your age (21+ requirement) and identity through KYC procedures
• Comply with anti-money laundering (AML) regulations and financial transaction reporting requirements
• Prevent fraud, money laundering, and other illegal activities
• Respond to law enforcement requests and legal proceedings
• Enforce our Terms & Conditions and detect Terms violations
• Maintain responsible gaming controls including deposit limits, loss limits, and self-exclusion records

3.3 Platform Improvement and Marketing

• Analyze usage patterns to improve website functionality and user experience
• Personalize content and game recommendations based on your preferences
• Send promotional offers, bonus notifications, and marketing communications (you may opt out at any time)
• Conduct surveys and research to understand Indonesian player preferences
• Display relevant advertisements for sports events (BRI Liga 1, EPL, La Liga, Champions League) and casino promotions

3.4 Security and Fraud Prevention

• Monitor for suspicious betting patterns, collusion, and bonus abuse
• Detect and prevent unauthorized account access
• Identify duplicate accounts and multi-accounting violations
• Protect against technical attacks, data breaches, and cyber threats

4. Data Sharing and Disclosure

tot303 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who perform functions on our behalf:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Game Suppliers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and other game providers to deliver casino and betting content
• KYC Verification Services: Identity verification providers to confirm your age and identity
• Customer Support Tools: Live chat platforms, email services, WhatsApp Business API
• Analytics Providers: Website analytics and user behavior tracking services

All service providers are contractually bound to protect your data and use it only for specified purposes.

4.2 Legal Obligations

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Law enforcement or regulatory authority requests
• Protection of tot303's legal rights, property, or safety
• Prevention of fraud, illegal activity, or Terms violations

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email of any such change in ownership or control of your data.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as participating in promotional partnerships or third-party loyalty programs.

5. Data Security Measures

tot303 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols
• Encrypted Data Storage: Sensitive information including passwords and financial data is stored in encrypted form
• Secure Servers: Data is hosted on secure servers in licensed offshore jurisdictions with restricted physical and network access
• Firewall Protection: Multi-layer firewall systems prevent unauthorized network intrusions
• DDoS Protection: Distributed denial-of-service mitigation to ensure platform availability

5.2 Organizational Safeguards

• Access Controls: Personal data access is restricted to authorized personnel on a need-to-know basis
• Employee Training: Staff receive regular data protection and security awareness training
• Regular Security Audits: Third-party security assessments and penetration testing
• Incident Response Plan: Procedures for detecting, responding to, and recovering from data breaches

5.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, tot303 will notify you within 72 hours via email and account notification. We will provide details of the breach, data affected, and steps we are taking to mitigate harm.

6. Your Privacy Rights

As a tot303 user, you have the following rights regarding your personal information:

6.1 Right to Access

You may request a copy of all personal data we hold about you. We will provide this information within 30 days in a commonly used electronic format. To request your data, contact [email protected] with "Data Access Request" in the subject line.

6.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you may request corrections. You can update most information directly through your account settings, or contact customer support for assistance.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances. Note that we are required to retain certain data for legal and regulatory compliance (AML, transaction records) even after account closure. Typically, we retain data for 7 years after account closure as required by gaming regulations.

6.4 Right to Data Portability

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

6.5 Right to Object and Restrict Processing

You may object to certain types of data processing, particularly marketing communications. You can opt out of promotional emails by clicking "unsubscribe" in any marketing message or adjusting preferences in your account settings.

6.6 Right to Withdraw Consent

Where we process data based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing conducted prior to withdrawal.

6.7 Right to Lodge a Complaint

If you believe tot303 has violated your privacy rights, you may lodge a complaint with our Data Protection Officer at [email protected] or with the relevant data protection authority in your jurisdiction.

7. Cookies and Tracking Technologies

tot303 uses cookies and similar tracking technologies to enhance your experience and analyze platform usage:

7.1 Types of Cookies We Use

7.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may impair platform functionality and prevent you from accessing certain features.

7.3 Third-Party Cookies

Some cookies are set by third-party services including game providers, analytics platforms, and payment processors. These parties have their own privacy policies governing cookie use.

8. Data Retention

tot303 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your account's active status.
• Inactive Accounts: If your account is inactive for 3 consecutive years, we may archive your data and restrict account access.
• Closed Accounts: After voluntary account closure, we retain data for 7 years to comply with anti-money laundering regulations and licensing requirements.
• Transaction Records: Financial transaction records are retained for 10 years as required by Indonesian banking regulations.
• Marketing Data: If you opt out of marketing communications, we retain minimal data necessary to honor your opt-out preference.

9. Children's Privacy

tot303 services are strictly for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under 21. If we discover that a minor has created an account, we will immediately close the account and delete all associated data. Parents or guardians who believe a minor has accessed our services should contact us immediately at [email protected].

10. International Data Transfers

tot303 operates under an international gaming license. Your personal data may be transferred to and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have different data protection laws than Indonesia.

When transferring data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Service provider commitments to GDPR-equivalent data protection standards
• Encryption of data in transit and at rest

11. Changes to This Privacy Policy

tot303 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via email and a prominent notice on the website. The "Last Updated" date at the top of this policy indicates when changes were made.

Your continued use of tot303 services after changes are posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy regularly.

12. Contact Information

For privacy-related inquiries, data access requests, or to exercise your privacy rights, please contact:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via your account dashboard
• WhatsApp: +62 812-3456-7890 (text only)

We will respond to privacy inquiries within 30 days. For urgent security matters, please mark your message "URGENT - SECURITY" in the subject line.