totowin Privacy Policy

This page describes what we collect when you use totowin and how we keep that data protected. We take your privacy seriously—our platform handles personal information, payment details, and account activity with encrypted storage and restricted access. When you register, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank, or place bets on Liga 1, Piala AFF, Champions League, or any other totowin service, we collect data to verify your identity, process your transactions, and comply with legal obligations.

We do not sell your personal information to advertisers or third parties unrelated to our service. We share data only with payment processors, compliance partners, and law enforcement where legally required. Our servers may sit outside your jurisdiction, but we maintain the same data-protection standards regardless of server location.

This privacy policy applies to all totowin services—sportsbook, live-dealer tables, slots, and esports markets. If you have questions about how we handle your data, contact our support team through the help section on totowin.

What data we collect on totowin

Account registration and verification

When you open an account on totowin, we collect your full name, date of birth, email address, and phone number. During KYC verification, we request identity documents (national ID, passport, or driver's license) and proof of address. We store these documents securely and use them only to verify your account and comply with anti-money-laundering regulations. We do not retain images longer than necessary—typically a few years for compliance purposes.

Payment and transaction data

We collect information about every deposit and withdrawal you make on totowin. This includes the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), the amount, the date, and transaction status. We use this data to process your payments, reconcile your account balance, and detect fraud. We do not store full bank account numbers or credit card details—payment processors handle sensitive financial data on our behalf.

Betting and gameplay data

We collect information about your bets, slots spins, live-dealer sessions, and account activity. This includes which matches you bet on (Liga 1, Piala Indonesia, Piala AFF, Champions League), your bet amounts, game outcomes, and timestamps. We use this data to settle bets, detect abuse or fraud, and improve our platform. We do not use this data for marketing purposes or share it with advertisers.

Technical and device data

We collect technical information about your device and internet connection—your IP address, browser type, operating system, and device ID. We use this data to prevent fraud, detect multiple accounts, and troubleshoot technical issues. We may log your access patterns to monitor for unusual activity (e.g., rapid login attempts, simultaneous sessions from different countries).

Cookies and local storage

We use cookies to keep you logged in, remember your preferences, and measure site usage. Cookies are small text files stored on your device. You can disable cookies in your browser settings, but some totowin features may not work properly without them. We do not use cookies to track you across other websites—only within totowin.

SSL encryption

Secure Sockets Layer—a protocol that encrypts data transmitted between your device and our servers to prevent interception.

KYC verification

Know Your Customer—our process of confirming your identity using government-issued documents and address proof.

Cookies

Small text files stored on your device that help us remember your login status and preferences.

IP address

Your device's unique internet identifier, which we use to detect fraud and prevent abuse.

How we use and protect your data on totowin

Our data protection practices

We store your personal data on secure servers with restricted access. Only authorized totowin staff can view your account information. We use passwords, encryption, and firewalls to protect against unauthorized access. We regularly audit our security systems and address vulnerabilities as they are discovered. We do not guarantee absolute security—no online system is completely immune to attack—but we maintain industry-standard protections.

Data retention on totowin

We retain your account data as long as your account is active and for a reasonable period afterward to comply with legal obligations (typically 5–7 years for financial records). If you request account deletion, we remove your personal information except where we are legally required to keep it for tax or regulatory purposes. Payment processors and banks may retain records independently according to their own policies.

Third-party processors

We share your data with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and banking partners mobile banking, local payment, online payment, e-wallet) to process your deposits and withdrawals. We also share data with compliance partners and law enforcement when legally required. These third parties are contractually bound to protect your data and use it only for the purpose we specify. We do not sell your data to marketers, data brokers, or advertisers.

Your rights on totowin

You have the right to access your personal data, correct inaccuracies, and request deletion where legal restrictions permit. You can update your account information directly in your totowin settings. If you wish to export your data or request permanent deletion, contact our support team. We will respond to legitimate requests within a reasonable timeframe. If you believe we have mishandled your data, you may lodge a complaint with your local data protection authority.

Cross-border data transfer

Our servers may be located outside Indonesia. When your data is transferred to servers outside your jurisdiction, we apply the same encryption and protection standards. We do not transfer your data to jurisdictions with weaker data-protection laws without additional safeguards.

Policy updates

We may update this privacy policy as our services evolve or legal requirements change. We will notify you of material changes by email or by posting a notice on totowin. Your continued use of the platform after updates means you accept the new policy. Check this page periodically for the latest version.

Services in Jakarta, Surabaya, Bandung, Medan and beyond

Our privacy commitments apply regardless of where you access totowin—whether from Jakarta, Surabaya, Bandung, Medan, or other regions. We apply the same data-protection standards across all jurisdictions where our services are available. Your rights to access, correct, and delete your data remain the same.

We at totowin recognize that your trust depends on transparent data handling. This privacy policy reflects our commitment to protect your information, use it responsibly, and give you control over your data. If you do not agree with our practices, you may close your account and request data deletion at any time.