toto00 Privacy Policy

1 Information We Collect

1.1 Information You Provide Directly

When you register a toto00 account or interact with our platform, you actively provide us with certain personal information. This includes the data you enter during the registration form, KYC verification, support communications, and any other direct interaction with toto00 services. The categories of information collected in this way include:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document.
• Contact data: Mobile phone number (used for account verification and notifications), email address, and residential address.
• Identity verification documents: Copies of your National ID card, passport, or driving licence submitted during KYC, along with any supporting proof-of-address documents.
• Payment method data: The mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account identifiers you register for deposits and withdrawals. toto00 does not store full card numbers or wallet PINs.
• Support communications: Records of live chat sessions, emails, and any other communications you initiate with the toto00 support team.

1.2 Information Collected Automatically

When you access and use the toto00 platform, certain technical information is collected automatically by our systems. This data is used to ensure platform security, prevent fraud, and improve the quality of our services. Automatically collected information includes:

1.3 Information from Third Parties

In some circumstances, toto00 may receive personal information about you from third-party sources in order to fulfil its legal and operational obligations. These sources include:

• KYC and identity verification partners: Third-party verification services may confirm the authenticity of identity documents you submit and cross-reference your details against sanctions and politically exposed persons (PEP) databases.
• Payment service providers: bKash, Nagad, Rocket, Upay, and bank partners may share transaction confirmation data, including transaction status and originating account references, with toto00 for payment reconciliation purposes.
• Anti-fraud and AML screening services: toto00 may use external databases to screen accounts for suspicious activity patterns, money laundering risk indicators, and regulatory watchlist entries.

2 How We Use Your Data

2.1 Primary Purposes

toto00 uses the personal data we collect exclusively to operate, maintain, and improve our platform and to fulfil our legal obligations. The lawful bases under which we process your data, and the specific purposes for each, are set out below:

• Contract performance: Processing your registration, operating your account, processing deposits and withdrawals, delivering gaming services, and providing customer support are all necessary for the performance of your contract with toto00.
• Legal compliance: Age verification (18+ requirement), KYC identity checks, anti-money laundering (AML) monitoring, and fraud detection are legal obligations that require us to process your personal data. toto00 cannot operate your account without fulfilling these requirements.
• Legitimate interests: Platform security monitoring, fraud prevention, abuse detection, and internal analytics to improve our service quality are pursued under toto00's legitimate business interests, provided these do not override your fundamental privacy rights.
• Consent: Where toto00 sends you optional promotional communications (bonus alerts, seasonal offer notifications, newsletter updates), this is done only with your explicit consent, which you may withdraw at any time.

2.2 Responsible Gaming Monitoring

toto00 uses your gaming activity data — including bet frequency, session durations, deposit patterns, and wager volumes — to power our responsible gaming systems. This data analysis helps toto00 identify players who may be displaying signs of problematic gambling behaviour, enabling our team to reach out proactively with support resources. This processing is carried out in your best interests and in compliance with our responsible gaming obligations. For full details on the tools available to you, visit the Responsible Gaming page.

2.3 What We Do NOT Do With Your Data

• We do not sell your personal data to any third party for commercial gain.
• We do not share your data with third-party advertisers for targeted marketing without your explicit consent.
• We do not use automated decision-making processes that produce significant legal effects on your account without human review.
• We do not retain your data for longer than is necessary for the purposes for which it was collected — see the Data Retention section below.

3 Data Sharing & Disclosure

3.1 Service Providers and Processors

toto00 works with a carefully selected set of third-party service providers who process personal data on our behalf in order to deliver the toto00 platform. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to toto00. These providers include:

• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers to facilitate game delivery. These studios do not receive your full identity data or payment information.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum payment information necessary to process your transactions.
• Identity verification services: Third-party KYC providers may receive copies of your identity documents to confirm their authenticity and perform regulatory screening.
• Cloud hosting and infrastructure providers: toto00 uses secure cloud infrastructure to host the platform. Hosting providers operate under strict data security agreements and do not have access to your data for their own purposes.
• Customer support platform: Our live chat and helpdesk software provider processes your support chat transcripts and email communications to enable our support team to assist you.

3.2 Legal and Regulatory Disclosure

toto00 may disclose your personal data to government authorities, law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so. This includes disclosures made in connection with:

• Anti-money laundering (AML) investigations and suspicious transaction reporting obligations.
• Court orders, warrants, or other legally binding instruments requiring data disclosure.
• Regulatory audits or inspections conducted by authorised bodies.
• Fraud investigations initiated by law enforcement or financial institutions.

In all such cases, toto00 discloses only the minimum data necessary to satisfy the legal requirement and, where legally permitted, will notify you of such a disclosure.

3.3 No Cross-Border Transfers Without Safeguards

Where toto00 uses service providers whose infrastructure is located outside Bangladesh, we ensure that appropriate data transfer safeguards are in place. This includes contractual data protection clauses and security standards that provide a level of protection equivalent to that applied within Bangladesh. toto00 does not transfer your personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate supplementary safeguards.

4 Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit the toto00 platform. They allow toto00 to recognise your device across sessions, remember your preferences, keep you securely logged in, and collect anonymous usage analytics that help us improve the platform. Cookies do not contain your password or payment credentials.

4.2 Types of Cookies Used by toto00

4.3 Managing Your Cookie Preferences

Essential and security cookies are strictly necessary for the toto00 platform to function and cannot be disabled without impairing your ability to use the service. All other cookie categories — preference, analytics, and marketing cookies — can be managed through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menu. Note that disabling certain cookies may affect the functionality of the toto00 platform, including the ability to maintain your responsible gaming tool settings across sessions.

toto00 does not use third-party advertising or re-targeting cookies that track you across other websites outside of the toto00 platform domain.

5 Data Security

5.1 Technical Security Measures

toto00 implements a multi-layered technical security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption across all data transmissions between your browser and the toto00 platform.
• Encrypted data storage for all sensitive fields including identity document copies, payment method records, and account credentials. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Firewalls and intrusion detection systems that monitor network traffic for anomalous patterns indicative of attack or unauthorised access attempts.
• Access controls and role-based permissions ensuring that toto00 staff can only access the personal data they require to perform their specific job functions.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) available to all players as an optional additional layer of account security. toto00 strongly recommends enabling 2FA on your account.

5.2 Organisational Security Measures

Beyond technical controls, toto00 enforces strict organisational policies governing how staff handle personal data. All toto00 employees and contractors who have access to player data are bound by confidentiality obligations. Data access is logged and audited. Staff receive regular data protection training to ensure awareness of their responsibilities under this Privacy Policy and applicable data protection standards.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, toto00 will notify affected players without undue delay and in any case within 72 hours of becoming aware of the breach (where technically feasible). The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures toto00 has taken or intends to take to address the breach. Notifications will be sent to the email address registered on your toto00 account.

6 Data Retention

6.1 Retention Periods

toto00 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, accounting, or reporting obligations. The following standard retention periods apply:

6.2 Deletion and Anonymisation

At the end of the applicable retention period, toto00 will either securely delete your personal data or anonymise it in a way that permanently prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data once re-identification is impossible.

Players who request account closure for responsible gaming reasons (self-exclusion) should note that while their account access will be disabled immediately, toto00 is legally required to retain the underlying account data for the full statutory retention periods described above. Retention in this context does not mean continued use of the data for marketing or gaming purposes — it means secure archival for legal compliance purposes only.

7 Your Privacy Rights

As a toto00 player, you hold a set of rights over your personal data. toto00 is committed to honouring these rights and processing all valid requests within 30 calendar days of receipt. The rights available to you are summarised below:

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to toto00's data protection contact at [email protected] with the subject line "Data Privacy Request". Please include your registered account email address and a clear description of the right you wish to exercise. toto00 may require you to verify your identity before processing the request to prevent unauthorised access to another person's data.

toto00 will respond to all valid privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.

8 Contact & DPO

8.1 Data Protection Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way toto00 processes your personal data, you may contact our data protection team using the details below. All privacy-related enquiries are handled by dedicated personnel with specific training in data protection obligations.

8.2 Updates to This Privacy Policy

toto00 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, toto00 will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Continued use of the toto00 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated terms, you should discontinue use of the platform and contact [email protected] to request account closure.

8.3 Governing Framework

This Privacy Policy is governed by applicable data protection standards. toto00 is committed to maintaining data processing practices that are transparent, fair, and proportionate. In the event of any conflict between this Privacy Policy and applicable law, the applicable law shall prevail. toto00's privacy commitments described in this document represent the minimum standard of protection we apply to all player data — we may apply higher standards where circumstances require.