Privacy Policy

1. Introduction

This Privacy Policy applies to all services provided by totoq2 through the website https://totoq2.cam and any associated mobile or web applications (collectively, "the Platform"). It governs the collection, use, storage, and disclosure of personal information provided by users, including individuals who browse, register, deposit funds, place bets, or otherwise interact with our services.

totoq2 operates as an online betting and gaming platform serving users primarily based in Indonesia. As a platform handling financial transactions and identity-verified accounts, we take data protection obligations seriously and align our practices with applicable privacy frameworks.

By accessing or using totoq2 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with these practices, you should discontinue using our services immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can be used to identify you as a natural person, directly or indirectly. This includes your name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means totoq2, which determines the purposes and means of processing your personal data.
• "User" or "you" means any individual who accesses, registers on, or uses the totoq2 Platform.
• "KTP" refers to Kartu Tanda Penduduk, the Indonesian national identity card used for mandatory identity verification.
• "Cookies" means small data files placed on your device by the Platform to facilitate user experience, session management, and analytics.

3. Information We Collect

totoq2 collects personal data in several categories depending on your level of engagement with the Platform:

3.1 Identity and Contact Information

• Full legal name (as it appears on your KTP)
• Date of birth and age confirmation
• Indonesian national identity card number (KTP number)
• Email address (primary contact and account recovery)
• Mobile phone number (Indonesian, for two-factor authentication and WhatsApp support)
• Residential address in Indonesia
• KTP document image (uploaded during identity verification)

3.2 Financial Information

• Indonesian bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, and others)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction records including deposit amounts, withdrawal requests, and bet history
• Account balance history and bonus utilization records

3.3 Technical and Usage Information

• IP address and geolocation data derived from network connection
• Device type, operating system, and browser information
• Session duration and pages visited on the Platform
• Betting and gaming activity logs, including game types played (togel, sabung ayam, sports betting, slots, live casino)
• Login timestamps and authentication records
• Customer support interactions (live chat transcripts, WhatsApp messages, email correspondence)

3.4 Summary Table — Data Categories

4. How We Collect Your Data

totoq2 collects personal data through the following channels:

• Direct Submission: When you register an account, complete identity verification, make deposits or withdrawal requests, contact customer support, or participate in promotions, you provide data directly to us.
• Automated Collection: Our Platform automatically collects technical and behavioural data when you visit the website, log in to your account, or interact with games and betting markets. This includes server logs, session cookies, and analytics tools.
• Third-Party Payment Providers: When you deposit or withdraw using Indonesian banks or e-wallets, our payment processing partners may transmit transaction confirmation data to our systems.
• Identity Verification Services: We may use third-party identity verification providers to cross-check the KTP information you submit against Indonesian government records for anti-fraud and anti-money-laundering compliance.
• Game Providers: Our partner game studios may share aggregated or session-level gaming activity data to enable our game history and responsible gaming tools to function correctly.

5. How We Use Your Information

totoq2 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your totoq2 account; enabling login authentication; resetting passwords; communicating important account updates.
• Identity Verification (KYC): Verifying that you meet our eligibility criteria (21+ age, Indonesian residency), complying with anti-money-laundering (AML) obligations, and confirming account ownership for withdrawal processing.
• Financial Transactions: Processing deposits from and withdrawals to your registered Indonesian bank accounts and e-wallets; maintaining accurate transaction records; detecting and preventing payment fraud.
• Service Delivery: Enabling you to place bets, play games, receive bonuses, and participate in promotions. Providing accurate real-time odds and game outcomes.
• Customer Support: Responding to inquiries, resolving disputes, handling complaints, and providing assistance through live chat, WhatsApp, and email.
• Responsible Gaming: Monitoring your betting activity to detect signs of problem gambling; enforcing self-exclusion periods, deposit limits, and loss limits you have voluntarily set; communicating responsible gaming resources.
• Security and Fraud Prevention: Detecting and preventing unauthorized account access, cheating, collusion, bonus abuse, money laundering, and other prohibited activities.
• Legal Compliance: Meeting obligations under applicable Indonesian law, responding to lawful requests from government authorities, and maintaining records as required by anti-money-laundering regulations.
• Platform Improvement: Analysing aggregated user behaviour to improve game offerings, website performance, payment flows, and customer support processes.
• Marketing (with Consent): Sending promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, or platform features — only where you have explicitly opted in to receive marketing communications.

6. Legal Basis for Processing

totoq2 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the services you have contracted with us — including account operation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable Indonesian laws and regulations, including anti-money-laundering and identity verification requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests do not override your fundamental rights.
• Consent: Processing based on your explicit consent, specifically for optional marketing communications. You may withdraw this consent at any time by contacting our customer support team or using the unsubscribe option in any marketing communication.

7. Data Sharing and Disclosure

totoq2 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

• Payment Processors: We share necessary financial data with Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposit and withdrawal transactions.
• Identity Verification Providers: We may share your KTP details with licensed identity verification service providers for the purpose of completing mandatory KYC checks.
• Game Technology Partners: Partner studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level data necessary to deliver their games on our Platform. These providers process data solely to provide their contracted services and are bound by confidentiality obligations.
• Legal and Regulatory Authorities: We will disclose personal data to Indonesian government agencies, law enforcement bodies, or courts when required to do so by applicable law, valid legal process, or enforceable governmental request.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of totoq2's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• Fraud Prevention Agencies: We may share data with fraud prevention and anti-money-laundering agencies to protect against financial crime, in accordance with our legal obligations.

All third parties with whom we share your data are required to handle it in accordance with applicable privacy standards and are prohibited from using it for any purpose beyond the specific service they provide to totoq2.

8. Cookies and Tracking Technologies

totoq2 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your experience, and to gather analytical insights about how users interact with our services.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to operate. These enable session management, login authentication, and security verification. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to personalise your experience across sessions.
• Analytical Cookies: Allow us to understand how visitors use the Platform — which pages are visited most, where users encounter difficulties, and how navigation flows can be improved. Data collected is aggregated and anonymised wherever possible.
• Security Cookies: Help us detect and prevent fraud, unauthorised access, and unusual account activity by maintaining a fingerprint of trusted device sessions.

8.2 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's preferences menu. You can configure your browser to reject non-essential cookies, delete existing cookies, or receive alerts before a cookie is stored. Please note that disabling certain cookies may impair the functionality of the totoq2 Platform, including the ability to log in or complete transactions.

9. Data Retention

totoq2 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Active Accounts: Personal data associated with an active account is retained for the full duration of your account's existence on the Platform.
• Closed Accounts: Following account closure — whether voluntary or due to breach of terms — we retain your identity, transaction, and communications records for a minimum of five (5) years to comply with Indonesian anti-money-laundering regulations and to facilitate the resolution of any post-closure disputes.
• Financial Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years from the date of the transaction.
• Customer Support Records: Support communications are retained for three (3) years following resolution of the relevant inquiry.
• Marketing Data: If you have opted in to marketing communications, we retain your contact details for this purpose until you withdraw your consent or we determine the data is no longer required.

Once retention periods expire and no legal obligation requires continued storage, your personal data will be securely deleted or irreversibly anonymised.

10. Security Measures

totoq2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-Bit SSL Encryption: All data transmitted between your device and the totoq2 Platform is encrypted using industry-standard TLS/SSL protocols, ensuring that your information cannot be intercepted in transit.
• Secure Data Storage: Personal data and financial records are stored in access-controlled, encrypted databases hosted on secure servers. Access is restricted to authorised personnel on a need-to-know basis.
• Two-Factor Authentication (2FA): We offer and strongly recommend two-factor authentication for account login to prevent unauthorised access even if your password is compromised.
• Regular Security Audits: Our systems undergo regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Staff Training: All totoq2 personnel who handle personal data receive mandatory privacy and data security training and are bound by confidentiality obligations.
• Incident Response: We maintain a data breach response plan. In the event of a confirmed breach affecting your personal data, we will notify you promptly and take immediate steps to contain and remediate the incident.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

11. Your Data Rights

As a totoq2 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our customer support team using the details in Section 15.

We will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with prior notification. We may request proof of identity before fulfilling a data rights request to ensure we do not disclose your data to an unauthorised third party.

12. Protection of Minors

totoq2 services are strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. All accounts require KTP verification, which confirms age eligibility prior to full account activation.

If we become aware that we have collected personal data from a person under the age of 21 without verified parental or guardian consent, we will immediately suspend the account, delete the associated data, and return any funds deposited to the verified payment source.

If you are a parent or guardian and believe your child may have accessed totoq2 services, please contact our customer support team immediately at [email protected] so we can investigate and take corrective action.

13. Third-Party Links and Services

The totoq2 Platform may reference or display content sourced from third-party game providers, payment processors, or sports data feeds. These third-party services operate under their own privacy policies and data handling practices. totoq2 is not responsible for the privacy practices of these external services.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the totoq2 Platform. Our Privacy Policy applies solely to data processed directly by totoq2.

14. Changes to This Policy

totoq2 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The revised policy will be posted to https://totoq2.cam/privacy-policy with an updated "Last Updated" date at the top of the document.

For material changes that significantly affect how we handle your personal data, we will provide advance notice via email to your registered address or through a prominent notice on the Platform. Continued use of totoq2 services after the effective date of any revised policy constitutes your acceptance of the updated terms.

We recommend reviewing this page periodically to stay informed about how totoq2 protects your personal information.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or totoq2's handling of your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week on the totoq2 Platform
• WhatsApp: Indonesian-speaking support available daily from 8 AM to 12 AM WIB (UTC+7)

We are committed to addressing all privacy-related inquiries promptly, fairly, and in full accordance with our obligations under applicable data protection law.