Privacy Policy

1. Introduction and Scope

tstoto is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and safeguard information obtained from users of our online betting platform at https://tstoto.asia (the "Platform"). This policy applies to all personal data processed by tstoto in connection with the services we provide.

By creating an account, accessing, or using the tstoto Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our data handling practices, you should discontinue use of the Platform immediately.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. We reserve the right to update this Privacy Policy periodically to reflect changes in our practices or applicable regulations. Material changes will be communicated to you via email and prominent notice on the Platform.

2. Data Controller Information

For the purposes of applicable data protection legislation, tstoto acts as the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data collected through the Platform.

If you have questions, concerns, or requests regarding how we handle your personal data, you may contact us through the following channels:

• Email: [email protected] (displayed as plain text)
• Live Chat: Available 24/7 through the Platform
• Data Protection Officer: For specific privacy inquiries, you may request to speak with our designated Data Protection Officer through customer support

3. Information We Collect

tstoto collects several categories of personal information to provide, maintain, and improve our services. The information we collect includes:

3.1 Information You Provide Directly

When you register for an account on the tstoto Platform, we collect the following information that you provide:

• Personal Identification: Full legal name as it appears on your government-issued identification, date of birth, nationality, and gender
• Contact Information: Email address, mobile phone number, residential address (street address, city, postal code)
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), payment transaction history
• Verification Documents: Copies of government-issued identification (KTP Nasional, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Customer support correspondence, chat logs, email communications, feedback, and complaints

3.2 Information Collected Automatically

When you access and use the tstoto Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address where permitted)
• Connection Information: IP address, internet service provider, connection type, geographic location (country, city based on IP address)
• Usage Data: Pages visited, features used, games played, betting history, login timestamps, session duration, clickstream data, search queries within the Platform
• Transaction Information: Deposit amounts, withdrawal requests, bonus claims, payment method used, transaction timestamps, transaction success/failure status
• Performance Data: Error logs, crash reports, loading times, and other diagnostic information to improve Platform performance

3.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Confirmation of payment completion, transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
• Fraud Prevention Services: Identity verification results, fraud risk assessments, blacklist checks from specialized security providers
• Marketing Partners: Referral source information (where you clicked from to reach our Platform) if you arrive via affiliate or marketing partners

4. Purpose of Data Collection

tstoto processes your personal information for the following specific purposes:

4.1 Account Management and Service Delivery

• Creating and managing your user account
• Verifying your identity and age (21+ requirement) through KYC procedures
• Processing deposits and withdrawals to/from your account
• Enabling you to place bets and play games on the Platform
• Maintaining accurate records of your gaming activity and transactions
• Providing customer support and responding to your inquiries

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing fraud, money laundering, and other illegal activities
• Meeting licensing requirements and regulatory obligations
• Responding to legal requests from law enforcement or government authorities
• Enforcing our Terms and Conditions and protecting our legal rights

4.3 Platform Security and Integrity

• Detecting and preventing unauthorized access to accounts
• Identifying suspicious betting patterns or potential fraud
• Protecting against technical attacks (DDoS, hacking attempts)
• Monitoring for responsible gaming compliance and problem gambling indicators
• Ensuring fair play and preventing collusion between players

4.4 Service Improvement and Personalization

• Analyzing usage patterns to improve Platform functionality and user experience
• Personalizing content and game recommendations based on your preferences
• Conducting research and statistical analysis to develop new features
• Testing new services and features before full deployment

4.5 Marketing and Communications

• Sending promotional offers, bonuses, and updates about tstoto services (with your consent)
• Informing you about changes to our Terms and Conditions or Privacy Policy
• Sending transactional communications (deposit confirmations, withdrawal notifications)
• Conducting surveys and gathering feedback to improve our services

5. Legal Basis for Processing

Under applicable data protection laws, we must have a lawful basis to process your personal information. tstoto relies on the following legal grounds:

5.1 Contractual Necessity

Processing is necessary to perform the contract between you and tstoto (our Terms and Conditions). This includes account creation, transaction processing, customer support, and all services you request from the Platform.

5.2 Legal Obligation

Processing is required to comply with legal obligations to which tstoto is subject, including KYC/AML regulations, tax reporting requirements, age verification laws, and responses to lawful requests from authorities.

5.3 Legitimate Interests

Processing is necessary for our legitimate business interests, such as fraud prevention, security measures, service improvement, and business analytics, provided these interests do not override your fundamental rights and freedoms.

5.4 Consent

For certain processing activities, particularly marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Third Parties

tstoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for specific legitimate purposes:

6.1 Payment Service Providers

We share necessary payment information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These providers handle your financial data in accordance with Indonesian banking regulations and their own privacy policies.

6.2 Identity Verification Services

To verify your identity during KYC procedures, we may share identification documents and personal details with specialized verification service providers who assist in authenticating documents and detecting fraudulent identities.

6.3 Game Providers and Software Suppliers

We work with licensed game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) who power the casino games on our Platform. These providers may receive limited information about your gameplay for technical operation and fairness verification purposes.

6.4 Fraud Prevention and Security Services

We share relevant information with fraud detection services, risk assessment platforms, and cybersecurity providers to protect the Platform and users from fraudulent activity, money laundering, and security threats.

6.5 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulatory bodies, courts, or government authorities when legally required or when necessary to protect our legal rights, investigate suspected violations of our Terms and Conditions, or respond to claims of illegal activity.

6.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.7 Service Providers and Contractors

We engage third-party service providers for hosting infrastructure, customer support systems, email delivery, analytics, and other operational functions. These providers access personal data only to perform services on our behalf and are contractually bound to maintain confidentiality and security.

7. Data Storage and Retention

7.1 Storage Location

Your personal data is stored on secure servers located in data centers with enterprise-grade physical and digital security measures. Data may be processed in multiple jurisdictions as necessary to provide our services efficiently.

7.2 Retention Periods

tstoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your account's active status plus any legally required retention period
• Closed Accounts: After voluntary account closure, we retain essential records (identification documents, transaction history) for a minimum of 5 years to comply with financial regulations and AML requirements
• Transaction Records: Financial transaction data is retained for at least 7 years as required by Indonesian tax and financial regulations
• Communication Records: Customer support correspondence and chat logs are retained for 3 years for quality assurance and dispute resolution purposes
• Marketing Data: If you unsubscribe from marketing communications, we retain a record of your opt-out preference indefinitely to honor your request

7.3 Data Deletion

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer identify you. Certain aggregated, anonymized data may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

tstoto implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, alteration, or disclosure:

8.1 Technical Security Controls

• Encryption: All data transmission between your device and our servers is protected by SSL/TLS 256-bit encryption. Sensitive data stored in databases is encrypted at rest.
• Access Controls: Personal data access is restricted to authorized personnel only through role-based access controls, multi-factor authentication, and regular access audits.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by advanced firewalls, intrusion detection systems, and continuous security monitoring.
• Regular Security Testing: We conduct periodic penetration testing, vulnerability assessments, and security audits by independent cybersecurity firms.
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms and never stored in plain text.

8.2 Organizational Security Measures

• Employees and contractors with access to personal data are bound by confidentiality obligations and receive regular data protection training
• Background checks are conducted on personnel handling sensitive information
• We maintain incident response procedures to address potential data breaches promptly
• Regular internal audits ensure compliance with security policies and procedures

8.3 Your Role in Security

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Be cautious of phishing attempts and verify that you're accessing the legitimate tstoto Platform
• Report any suspicious account activity to customer support immediately

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit the tstoto Platform. We use cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance user experience, analyze Platform usage, and provide personalized content.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These enable core features like account login, secure transactions, and remembering your preferences during a session. Essential cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the Platform, such as pages visited and errors encountered. This helps us improve Platform performance and user experience.
• Functionality Cookies: Remember your preferences (language, region, display settings) to provide a more personalized experience on future visits.
• Analytics Cookies: Help us understand user behavior through aggregated statistics, allowing us to optimize our services and develop new features based on actual usage patterns.
• Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies may track your activity across different websites (with your consent).

9.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling certain cookies may limit your ability to use some Platform features. To manage cookies, consult your browser's help documentation or visit industry resources for cookie management instructions.

10. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

10.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data along with information about how it is processed.

10.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings, or contact customer support for assistance.

10.3 Right to Erasure ("Right to be Forgotten")

Under certain circumstances, you may request deletion of your personal data. This right is subject to limitations, particularly where we must retain data to comply with legal obligations or establish, exercise, or defend legal claims.

10.4 Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of data or object to processing.

10.5 Right to Data Portability

You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

10.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

10.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you may lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can address your concerns directly.

10.9 Exercising Your Rights

To exercise any of these rights, please contact our customer support team via email at [email protected] or through live chat. We will respond to your request within 30 days and may require identity verification to protect against fraudulent requests.

11. Protection of Minors

tstoto is committed to protecting minors from exposure to online gambling. Our services are strictly intended for individuals aged 21 years and above, in accordance with Indonesian legal standards and international responsible gaming best practices.

We do not knowingly collect or maintain personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will delete that information immediately and close the associated account. Any funds in the account will be returned to the source of deposit.

If you are a parent or guardian and believe your child has provided personal information to tstoto, please contact us immediately so we can take appropriate action. We encourage parents to use parental control software to prevent minors from accessing age-inappropriate content online.

12. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside Indonesia where our service providers, data centers, or business partners are located. These countries may have data protection laws that differ from those in Indonesia.

When we transfer your personal data internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection, including:

• Ensuring recipients are located in countries with adequate data protection frameworks
• Implementing Standard Contractual Clauses approved by relevant data protection authorities
• Requiring service providers to maintain data security standards equivalent to those we enforce
• Conducting due diligence on international partners' data protection practices

By using the tstoto Platform, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

13. Policy Updates

tstoto reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send email notification to registered users at least 14 days before changes take effect
• Display a prominent notice on the Platform homepage and during login
• For significant changes affecting your rights, we may require explicit consent before continuing to use the Platform

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Platform after policy updates constitutes acceptance of the revised Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

• General Privacy Inquiries: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 through the Platform for immediate assistance
• Data Protection Officer: For formal privacy complaints or complex data protection questions, request to speak with our Data Protection Officer through customer support
• Response Time: We aim to respond to all privacy inquiries within 7 business days

When contacting us about privacy matters, please include your full name, registered email address, and a detailed description of your inquiry to help us assist you efficiently.