Your privacy matters to totoq. This policy explains how we collect, use, protect, and manage your personal information in compliance with international data protection standards.
Last Updated: January 1, 2026 | Effective Date: January 1, 2026
This Privacy Policy ("Policy") describes how totoq ("we", "us", "our", "Company") collects, uses, discloses, stores, and protects personal information obtained from users ("you", "User", "Player", "Member") of our online gaming platform located at https://totoq.cam (the "Platform" or "Website"). This Policy applies to all personal data processed by totoq in connection with your use of our sports betting, casino gaming, and lottery services.
By creating an account with totoq, accessing our Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with this Policy, you must not use our services and should immediately discontinue access to the Platform.
totoq is committed to protecting your privacy and complying with applicable data protection laws and regulations, including international standards for data security and user rights. We employ industry-standard technical and organizational measures to safeguard your personal information against unauthorized access, disclosure, alteration, or destruction.
totoq acts as the data controller for personal information collected through the Platform. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable privacy laws.
For questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact our Data Protection Officer:
totoq collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, and improve user experience. The types of data we collect include:
When you register for a totoq account, you voluntarily provide the following personal information:
When you access or use the totoq Platform, we automatically collect certain technical and usage data:
We may receive personal information about you from third-party sources, including:
totoq processes your personal data for the following purposes, based on applicable legal grounds:
Legal Basis: Performance of our contract with you (Terms & Conditions)
Legal Basis: Compliance with legal obligations
Legal Basis: Legitimate interests in protecting our business, users, and systems from security threats
Legal Basis: Your explicit consent (which you can withdraw at any time by clicking "unsubscribe" in emails or adjusting your account communication preferences)
Legal Basis: Legitimate interests in improving our services and maintaining a competitive platform
Legal Basis: Legal obligation to promote responsible gaming and legitimate interest in user welfare
totoq does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described above:
All service providers are contractually bound to process your data only on our instructions, maintain confidentiality, and implement appropriate security measures.
We may disclose your personal information to government authorities, regulators, law enforcement agencies, or courts when:
In the event of a merger, acquisition, corporate reorganization, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Website before your data is transferred and becomes subject to a different privacy policy.
We may share your information with other third parties when you have given explicit consent to such sharing for a specific purpose.
totoq takes data security seriously and implements comprehensive technical and organizational measures to protect your personal information:
While we implement robust security measures, you also play a critical role in protecting your account:
totoq retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 7 years after closure | Legal and regulatory compliance (gaming license requirements) |
| KYC Verification Documents | 7 years after account closure | Anti-money laundering regulations and licensing requirements |
| Financial Transaction Records | 7 years from transaction date | Tax compliance and financial auditing requirements |
| Betting and Gaming History | 7 years from bet placement | Gaming license requirements and dispute resolution |
| Customer Support Communications | 3 years from last interaction | Quality assurance and legal defense |
| Marketing Communications Data | Until consent is withdrawn + 6 months | Honoring unsubscribe requests and regulatory grace period |
| Technical Logs and Analytics | 12 months | Security monitoring and platform optimization |
After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you. Deletion methods include secure overwriting of digital files and physical destruction of hard copy documents in compliance with data protection standards.
Under applicable data protection laws, you have the following rights regarding your personal information. totoq respects these rights and provides mechanisms to exercise them:
You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (such as PDF or CSV) within 30 days of your request.
If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact customer support for assistance.
You may request deletion of your personal data under certain circumstances, such as when data is no longer necessary for the purposes for which it was collected. However, we may be legally required to retain certain information for compliance purposes (see Section 7 above).
You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of data or object to processing. During the restriction period, we will store the data but not actively process it.
You have the right to receive your personal data in a portable format and to transmit that data to another service provider. We will provide your data in CSV, JSON, or other commonly used electronic formats.
You may object to processing of your personal data for direct marketing purposes at any time. You can opt out by clicking "unsubscribe" in promotional emails, adjusting your account communication preferences, or contacting customer support. We will cease marketing communications within 48 hours of your request.
Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
If you believe totoq has violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. We encourage you to contact us first so we can attempt to resolve your concerns directly.
To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. Include your account username and specify which right you wish to exercise. We may request additional information to verify your identity before processing your request. We will respond to all valid requests within 30 days.
totoq operates internationally and may transfer your personal data to countries outside Indonesia, including to our servers located in secure data centers and to third-party service providers operating in various jurisdictions. Some of these countries may not have data protection laws equivalent to those in Indonesia.
When we transfer data internationally, we implement appropriate safeguards to ensure your data remains protected, including:
totoq strictly prohibits use of our services by individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to totoq should contact us immediately at [email protected].
totoq uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.
Most web browsers allow you to control cookies through settings. You can block or delete cookies, but this may affect Website functionality and your user experience. Refer to your browser's help documentation for instructions on managing cookies.
totoq reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of totoq services after changes to this Policy constitutes acceptance of the updated terms.
If you have questions, concerns, or requests regarding this Privacy Policy or totoq's data practices, please contact us:
By using totoq, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. We are committed to maintaining the trust you place in us and will continue to prioritize the security and privacy of your data.
All personal data transmitted to and stored by totoq is protected with 256-bit SSL encryption, the same security standard used by major financial institutions.
Our payment processing meets Payment Card Industry Data Security Standards, ensuring your financial information is handled with the highest level of security.
We collect only the data necessary to provide our services and implement privacy protections throughout our entire platform architecture.
Exercise your rights to access, correct, delete, or port your personal data at any time. We respond to all valid requests within 30 days.
Quarterly penetration testing and vulnerability assessments by independent security firms ensure our defenses stay ahead of emerging threats.
Questions about how your data is used? Our dedicated privacy team is available 24/7 to address your concerns and process data requests.
Learn more about data protection, review our Terms, or get answers to common questions about account security.