toto18 is committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, store, and safeguard your data.
At toto18, protecting your personal data is our top priority. We comply with international data protection standards and use industry-leading security measures to ensure your information remains confidential and secure. This Privacy Policy outlines our practices in clear, transparent language.
This Privacy Policy describes how toto18 ("we," "us," or "our") collects, uses, processes, and protects personal information from users ("you" or "your") of our online gaming platform accessible at https://toto18.cam and through our mobile applications. By creating an account or using our services, you consent to the data practices described in this policy.
toto18 operates as an online gaming platform serving the Indonesian market, offering sports betting, casino games, live dealer tables, and lottery games including togel draws. We are committed to transparency regarding our data handling practices and maintaining the trust our players place in us.
This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policies, which together form the complete legal framework governing your use of toto18 services.
When you register an account with toto18, we collect the following personal information:
When you access and use toto18 services, we automatically collect certain technical information:
We may receive information about you from third-party sources including payment processors (banks and e-wallet providers confirming transaction details), identity verification services (confirming the authenticity of submitted documents), and fraud prevention databases (screening for suspicious activity patterns).
toto18 uses your personal information to:
We process your data to comply with legal obligations including:
With your consent where required, we use data to:
All data transmitted between your device and toto18 servers is encrypted using 256-bit SSL technology — the same standard used by Indonesian banks like BCA, BRI, and Mandiri. This prevents interception or unauthorized access during transmission.
Personal information is stored on secure servers with restricted access, regular security audits, and automated backup systems. Payment card details are never stored on our servers — all transactions process through certified payment gateways.
We employ advanced fraud detection systems monitoring for suspicious login attempts, unusual betting patterns, and coordinated account activity. This protects both you and other players from fraudulent behavior.
Our platform is built with privacy as a core principle. We collect only necessary data, implement strict access controls limiting which employees can view personal information, and regularly review our data practices.
toto18 does not sell or rent your personal information to third parties. We share data only in the following limited circumstances:
Payment Processors: Your bank account details or e-wallet information are shared with respective financial institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process deposits and withdrawals you initiate. These institutions operate under their own privacy policies.
Game Providers: When you play casino games or slots, minimal information (user ID, bet amount, game session data) is shared with game studios to facilitate gameplay. Game providers do not receive your name, contact information, or financial details.
Identity Verification Services: We share your KTP photograph and personal details with specialized KYC verification services that confirm document authenticity and prevent identity fraud. These providers are contractually obligated to maintain confidentiality.
Legal Authorities: We may disclose personal information if required by law, court order, government investigation, or to protect toto18's legal rights, prevent fraud, or ensure platform security.
Some of our service providers and game studios operate outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place through contractual data protection clauses and compliance with international data protection standards.
toto18 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
Despite these measures, no internet transmission is completely secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach as required by applicable law.
toto18 retains your personal information for different periods depending on the type of data and legal requirements:
After retention periods expire, personal data is securely deleted or anonymized so it can no longer identify you personally.
Under applicable data protection laws and toto18 policies, you have the following rights regarding your personal information:
You may request a copy of all personal data we hold about you. This includes your account details, transaction history, KYC documents, and any other information we process. We will provide this information in a commonly used electronic format within thirty (30) days of your request.
If any personal information we hold is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly through your Account Settings. For information requiring verification (name, date of birth), contact our support team with supporting documentation.
You may request deletion of your personal data. However, this right is not absolute — we must retain certain information to comply with legal obligations including anti-money laundering regulations (7-year retention period), tax laws, and dispute resolution requirements. After legal retention periods expire, we will permanently delete your data upon request.
You can request that we limit how we use your data. For example, you can request we stop sending marketing emails while continuing to process essential account and transaction data.
You have the right to receive your personal data in a structured, machine-readable format and transfer it to another service provider if technically feasible.
You may object to processing of your data for marketing purposes at any time by clicking "Unsubscribe" in promotional emails or contacting support. For other types of processing, objection rights are limited by legal obligations and legitimate business interests.
To exercise any privacy right, contact us at or through Live Chat. We will respond within thirty (30) days. We may require verification of your identity before fulfilling requests to ensure data is released only to the legitimate account holder.
For questions specifically about how toto18 handles your personal data, email our dedicated Privacy Team at . For general account support, use or Live Chat.
Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences, keep you logged in, and analyze how you use the site.
toto18 uses the following types of cookies:
Some game providers and analytics services place their own cookies. These third parties operate under their own privacy policies and are subject to their own data practices.
Most browsers allow you to refuse or delete cookies through settings. However, disabling essential cookies will prevent you from logging in or using core features. Consult your browser's help documentation for cookie management instructions.
toto18 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. Our KYC verification process checks that all account holders meet the minimum age requirement.
If we discover that a user is under 21, we will immediately terminate their account, void all wagers, and attempt to return deposited funds to the source (minus any winnings, which will be forfeited). Parents or guardians who believe their child has created an account should contact us immediately at .
Indonesian parents concerned about underage gambling should utilize device-level parental controls, internet filters, and open communication about gambling risks with their children.
toto18 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of toto18 services after policy updates take effect constitutes acceptance of the revised terms.
Previous versions of this Privacy Policy are archived and available upon request to .
For questions, concerns, or requests regarding this Privacy Policy or toto18's data practices, please contact us through the following channels:
When contacting us about privacy matters, please include your username and registered email address to help us locate your account and respond efficiently. For security reasons, we may require additional verification before discussing account-specific information.
toto18 is committed to maintaining the highest standards of data protection and privacy. This Privacy Policy demonstrates our transparency and accountability in handling your personal information. We continuously review and improve our data practices to ensure your trust is well-placed. Thank you for choosing toto18 as your online gaming platform.
Contact our Privacy Team or review our related policies to understand your rights and our commitments.