totocc is committed to protecting the privacy and personal data of every member. This Privacy Policy explains what information we collect, how we use it, how long we retain it, and what rights you have over your own data.
1.1 totocc ("we", "us", "the Company") operates the online betting and gaming platform accessible at https://totocc.cam (the "Platform"). As part of delivering our Services to members based primarily in Indonesia, we collect and process certain personal data about you.
1.2 This Privacy Policy ("Policy") describes in plain, honest language what personal data totocc collects, the purposes for which it is processed, with whom it may be shared, how long it is retained, and what rights you hold as a data subject. This Policy forms part of our broader Terms & Conditions and should be read alongside them.
1.3 By registering an Account on the totocc Platform or by continuing to use our Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the Platform.
1.4 We may update this Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance. The current version is always available at https://totocc.cam/privacy-policy, with the "Last Updated" date shown at the top of this page.
For the purposes of this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, national ID number, email address, IP address, device identifiers, and financial data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| "Member" / "You" | Any individual who has registered and holds an active totocc Account. |
| "Account" | The individual registered account created by a Member to access totocc's Services. |
| "Services" | All betting, gaming, lottery (togel), live casino, and related products available on the Platform. |
| "Third Party" | Any natural person or legal entity that is neither totocc nor the Member whose data is being processed. |
| "Data Controller" | totocc, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
3.1 totocc collects only the data that is necessary to deliver our Services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of Personal Data we collect are as follows:
4.1 Directly from you: The majority of your Personal Data is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
4.2 Automatically through the Platform: When you visit or use the Platform, certain technical and usage data is collected automatically through our servers, cookies, and analytics tools. This includes your IP address, device identifiers, and session activity.
4.3 From third-party verification providers: We engage internationally accredited identity verification and fraud detection services to cross-check the accuracy of the information you provide during KYC. These providers return a verification result to totocc; totocc does not store the raw data provided to those providers independently of the documents you submit directly to us.
4.4 From payment processors: When you initiate a deposit or withdrawal through a local bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the respective payment provider shares transaction confirmation data with totocc to reconcile your Account balance.
5.1 totocc processes your Personal Data for the following specific and legitimate purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your Account; authenticating your identity at login; enabling two-factor authentication. |
| Service Delivery | Processing your wagers across sportsbook, togel, slots, and live casino; crediting winnings; managing bonus eligibility. |
| KYC & Age Verification | Verifying that you are at least 21 years of age and that your identity matches your registered account details before processing withdrawals. |
| Payment Processing | Processing deposits and withdrawals via local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). |
| Fraud & AML Prevention | Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited activities on the Platform. |
| Responsible Gaming | Monitoring gaming behaviour to identify signs of problem gambling; enforcing self-exclusion requests; applying deposit and loss limits. |
| Customer Support | Responding to your queries, complaints, and requests via live chat and email; maintaining records of support interactions for quality assurance. |
| Platform Security | Protecting the integrity of our technical infrastructure; detecting and responding to security incidents and unauthorised access attempts. |
| Legal Compliance | Complying with applicable international gaming regulations, anti-money laundering laws, and any lawful requests from competent authorities. |
| Service Improvement | Analysing aggregated, anonymised usage patterns to improve Platform functionality, game selection, and user experience. |
6.1 totocc processes your Personal Data on the following legal bases:
7.1 totocc does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:
Your financial data (bank account number, e-wallet identifier, and transaction amounts) is shared with our payment processing partners — including local Indonesian bank transfer intermediaries and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to execute your deposit and withdrawal instructions.
Your identity documents and biometric selfie data are shared with our accredited KYC and age verification partners for the purpose of confirming your identity and age (21+). These providers are contractually prohibited from using your data for any purpose other than completing the verification requested by totocc.
Certain technical data — including IP addresses, device fingerprints, and behavioural signals — may be shared with specialised fraud detection and cybersecurity service providers to protect the integrity of the Platform and its members.
We may disclose your Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to investigate suspected fraud, money laundering, or other criminal activity. In such cases, totocc will disclose only the minimum data necessary to satisfy the lawful request.
In the event of a merger, acquisition, restructuring, or sale of all or part of totocc's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.
We engage carefully vetted third-party service providers (for example, cloud hosting providers, analytics platforms, and customer support software vendors) who process data on our behalf under strict data processing agreements. These providers act as data processors and may not use your Personal Data for any purpose other than providing the contracted service to totocc.
8.1 totocc retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes that may arise. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of Account plus 5 years after Account closure (for AML compliance). |
| Financial Transaction Records | 7 years from the date of each transaction (standard international financial record-keeping practice). |
| KYC Documents | Duration of Account plus 5 years after Account closure. |
| Betting & Gaming Logs | 3 years from the date of each wager, unless required for ongoing dispute resolution. |
| Customer Support Records | 3 years from the date of each support interaction. |
| Technical & Usage Logs | 13 months from the date of collection (rolling basis). |
| Cookie & Analytics Data | Up to 13 months, depending on cookie type (see Section 10). |
8.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with totocc's internal data disposal procedures. Anonymised data may be retained indefinitely for statistical and research purposes, as it can no longer be linked to an identifiable individual.
9.1 totocc implements a comprehensive, layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:
9.2 While totocc takes every reasonable precaution to protect your data, no method of electronic transmission or storage is entirely without risk. You are responsible for maintaining the confidentiality of your Account password and for any activities that occur under your Account.
10.1 totocc uses cookies and similar tracking technologies (such as pixel tags and local storage) on the Platform to enhance your experience, maintain your login session, and collect analytics data. The main categories of cookies we use are as follows:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Essential for Platform functionality — login session management, security tokens, load balancing. Cannot be disabled without breaking the Platform. | Session / up to 24 hours |
| Functional | Remembering your preferences — preferred language, display settings, and notification settings. | Up to 12 months |
| Analytics | Collecting aggregated, anonymised data on how members navigate the Platform, which pages are most visited, and where technical errors occur. Used to improve the Platform. | Up to 13 months |
| Security | Detecting and preventing fraudulent logins, bot activity, and other malicious behaviour on the Platform. | Up to 12 months |
10.2 totocc does not deploy third-party advertising or behavioural profiling cookies that track your activity across external websites for targeted advertising purposes.
10.3 You may control or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Deleting cookies will not delete your Account or any Personal Data held in our databases.
11.1 As a Member of totocc, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of any inaccurate or incomplete Personal Data we hold about you.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is pending.
Receive a copy of your Personal Data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
Object to the processing of your Personal Data where we rely on legitimate interests as our legal basis, including profiling for responsible gaming monitoring.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with a competent data protection supervisory authority if you believe your rights have been infringed.
11.2 Please note that certain rights are subject to limitations. For example, we cannot erase data that we are legally required to retain for AML compliance purposes, nor can we provide data portability for data that is not technically separable from our core operational systems.
12.1 totocc requires all Members to verify that they are at least 21 years of age as part of the KYC process. If totocc discovers that Personal Data has been collected from a person under the age of 21, we will immediately close the relevant Account, void all associated wagers, return any deposited funds to the original payment source where technically possible, and permanently delete the Personal Data in question.
12.2 Parents and guardians are encouraged to use appropriate parental controls and to discuss the risks of online gambling with minors in their household. totocc supports the use of third-party parental control software to prevent access to gambling websites.
13.1 totocc's primary operations serve members based in Indonesia. However, certain data processing activities — including cloud hosting, KYC verification, and fraud detection — may involve the transfer of Personal Data to servers or processors located outside Indonesia.
13.2 Where such international transfers occur, totocc ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that which applies within Indonesia. These safeguards may include:
13.3 By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia where necessary for the delivery of our Services, subject to the safeguards described in this section.
14.1 totocc reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify you via a prominent notice on the Platform and/or by sending an email to the address registered to your Account at least seven (7) days before the changes take effect.
14.2 The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how totocc protects your Personal Data.
14.3 Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure by contacting our support team.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by totocc, please contact our Data Protection team using the details below:
Data Protection Enquiries:
Email: [email protected] (plain text — not a clickable link)
Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
Live Chat: Available 24/7 on the Platform
Response Time: Within 30 calendar days for formal data rights requests; within 24 hours for general privacy enquiries via live chat or email
Support Hours: 24/7 — WIB (UTC+7), covering members across Jakarta, Surabaya, Bandung, Bali, Medan, and all other Indonesian cities
15.2 Our customer support team includes native Indonesian-speaking agents who can assist you with privacy-related queries. All formal data rights requests must be submitted in writing (via email) and will be processed in English in accordance with this Policy.
Our Data Promise
totocc designs privacy protections into every part of the Platform — from the moment you register to the day you close your Account. Here is what that commitment looks like in practice.
totocc has never sold, rented, or bartered member data to third-party marketers, and we never will. Your personal information exists solely to deliver and improve our Services to you.
Every byte of data exchanged between your device and the totocc Platform is encrypted using TLS 1.2+ in transit, and AES-256 at rest. Your financial data and identity documents are fully encrypted at all times.
We verify every member's identity and age (21+) using accredited KYC partners. This protects not only the Platform but also you — ensuring your Account cannot be accessed or exploited by any unauthorised party.
You can request access to, correction of, or deletion of your Personal Data at any time. Our Data Protection team responds to all formal requests within 30 calendar days — in plain English, with no jargon.
Our payment data integrations are purpose-built for the Indonesian market — BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and more — and all financial data is processed in IDR with local bank-grade security standards.
totocc undergoes regular independent penetration testing and security audits. We identify and address vulnerabilities before they can impact our members — not after.
Our FAQ answers the most common member questions in plain English. You can also review our full Terms & Conditions or visit our Responsible Gaming page for more on how we protect you.
21+ only | Play Responsibly | totocc promotes responsible gambling