Your privacy matters. Learn how toto38 collects, uses, and protects your personal information with industry-leading security and transparency.
toto38 (hereinafter "we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users (hereinafter "you", "your", or "the User") who access or use our online betting services. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding your data. By registering an account, depositing funds, placing bets, or otherwise using toto38, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.
This Privacy Policy should be read in conjunction with our Terms & Conditions. If you do not agree with any part of this Privacy Policy, you must cease using the Platform immediately.
toto38 collects and processes several categories of personal data to provide, maintain, and improve our services, comply with legal obligations, and protect the security and integrity of the Platform.
When you register an account, deposit funds, or interact with customer support, you provide us with the following personal information:
When you access or use toto38, we automatically collect certain technical and behavioral information through cookies, log files, and tracking technologies:
We may receive information about you from third-party service providers, including:
toto38 processes your personal data for the following legitimate business purposes:
toto38 does not sell, rent, or lease your personal data to third parties. However, we may share your information with the following categories of recipients under strict data protection agreements:
We may disclose your information to law enforcement agencies, regulatory bodies, courts, or government authorities if required by law, legal process, or to comply with our licensing obligations. This includes responding to subpoenas, court orders, anti-money-laundering (AML) investigations, and national security requests.
In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to a successor entity as part of the business transaction. We will notify you via email and/or a prominent notice on the Platform before your information is transferred and becomes subject to a different Privacy Policy.
toto38 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, alteration, or destruction:
While we implement robust security measures, no system is completely immune to cyber threats. You are responsible for maintaining the confidentiality of your login credentials and for reporting any suspected unauthorized account access immediately to .
toto38 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:
After the applicable retention period expires, personal data will be securely deleted or anonymized in accordance with data protection best practices.
Subject to applicable Indonesian data protection laws and international privacy standards, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. To exercise this right, contact us at with "Data Access Request" in the subject line. We will provide your data in a structured, commonly used, machine-readable format within 30 days of verification.
If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly from your user dashboard. For changes to KYC-verified data (name, date of birth), contact customer support with supporting documentation.
You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, we may be legally required to retain certain records (e.g., financial transactions, KYC documents) to comply with AML regulations, tax laws, and licensing obligations. We will inform you if legal retention obligations prevent full erasure.
You have the right to request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively process it except with your consent or for legal claims.
You have the right to receive your personal data in a portable format and request that we transmit it directly to another service provider, where technically feasible.
Where we rely on your consent to process personal data (e.g., marketing communications), you have the right to withdraw that consent at any time. To unsubscribe from promotional emails, click the "Unsubscribe" link at the bottom of any marketing email, or adjust your communication preferences in your account settings.
If you believe toto38 has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
toto38 uses cookies and similar tracking technologies to enhance your user experience, analyze Platform performance, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.
You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, although doing so may limit certain Platform features. To opt out of third-party analytics and advertising cookies, visit the Network Advertising Initiative opt-out page or adjust your browser's "Do Not Track" settings.
toto38 operates internationally and may transfer, store, or process your personal data in countries outside the Republic of Indonesia. When we transfer data across borders, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), adequacy decisions, or binding corporate rules, to protect your data in accordance with this Privacy Policy.
toto38 strictly prohibits underage gambling. Our services are intended solely for individuals 21 years of age or older. We do not knowingly collect personal data from anyone under 21. If we discover that we have inadvertently collected information from a minor, we will delete it immediately and permanently suspend the associated account. Parents or guardians who believe a minor has provided personal data to toto38 should contact us at .
toto38 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when the most recent revisions were made. We will notify you of material changes via email or by displaying a prominent notice on the Platform. Your continued use of toto38 after such notice constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:
We will respond to all privacy-related inquiries within 10 business days. For data access requests and other rights exercised under this Privacy Policy, please allow up to 30 days for processing and verification.
Thank you for trusting toto38 with your personal information. We are committed to safeguarding your privacy and providing a secure, transparent, and enjoyable betting experience.
toto38 implements multiple layers of security and transparency to ensure your data is always protected and your rights are always respected.