Privacy Policy toto20 – Our Commitment to Protecting Your Data

Toto20 ("we", "our platform") takes personal data protection seriously. This Privacy Policy explains our practices regarding the collection, use, storage, sharing, and protection of personal information you provide when registering and using the toto20 platform at toto20.pw.

This document applies to all toto20 users and members without exception — including website visitors, registered members, and any individual who interacts with our platform, mobile app, or support channels.

We comply with applicable data protection laws and are committed to ensuring your personal information is handled responsibly, securely, and transparently. Your trust is the foundation of our relationship, and we do not take this responsibility lightly.

Toto20 collects various types of personal information depending on your interaction with our platform. The following are categories of data we may collect:

We only collect data required to deliver our services properly. Should you choose not to provide certain required information, we may be unable to fully process your registration or request.

Toto20 collects your personal information through several different channels:

• Account Registration — When you complete the registration form, you provide us directly with basic information such as your name, email, and phone number.
• Identity Verification (KYC) — During the KYC process, you are required to upload identification documents for age and identity verification purposes.
• Financial Transactions — Every time you make a deposit or withdrawal, the relevant payment information is securely recorded in our system.
• Platform Usage — Technical and usage data is collected automatically when you browse the website or use the toto20 mobile app.
• Communications with Us — When you contact our support team via Live Chat, email, or other channels, conversations may be recorded for training and quality control purposes.
• Cookies & Similar Technologies — Our website uses cookies and other tracking technologies to enhance the user experience and analyse platform usage patterns.

The personal information we collect is used for legitimate and specific purposes. toto20 does not use your data for any purpose beyond what is stated here:

• Account Management — To create, verify, and manage your member account and facilitate secure login.
• Transaction Processing — To accurately and securely process deposits, withdrawals, and all other financial transactions.
• Identity Verification (KYC) — To fulfil legal compliance obligations including fraud prevention and anti-money laundering.
• Service Provision — To provide access to all games, promotions, and platform features you are eligible to use.
• Communications — To send important account notifications, security updates, and promotional information (where you have consented to receive them).
• Platform Improvements — To analyse usage patterns and improve the user experience, stability, and performance of the platform.
• Security & Fraud — To detect, investigate, and prevent any fraudulent activity, misuse, or security threats against our platform and members.
• Legal Compliance — To comply with applicable legal requirements, regulations, or directives from relevant authorities when required.

Toto20 does not sell or disclose your personal information to third parties for marketing purposes. However, there are limited situations where we need to share your data with certain parties for service operation purposes:

• Payment Service Providers — Payment gateways, e-wallet providers, and financial institutions that process your transactions. They receive only the data necessary to process your payment.
• Gaming Technology Providers — Game software companies that provide slots, Live Casino, and other gaming products on the toto20 platform. Data sharing is limited to technical requirements only.
• Identity Verification Services — Third-party KYC service providers that assist us in verifying member identities to meet compliance requirements.
• Relevant Authorities — Government authorities, law enforcement bodies, or regulatory agencies when we are legally required to do so.
• Cloud Service Providers — IT infrastructure and cloud storage providers that store and process data on our behalf, subject to strict data processing agreements.

All third parties involved in processing toto20 member data are required to uphold security and privacy standards equal to or higher than our own. Contractually binding data protection agreements are in place with all third-party partners.

The security of your personal data is toto20's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• Data Encryption — All data transmitted through our platform is protected with 256-bit SSL/TLS encryption. Sensitive data at rest is also encrypted using robust encryption algorithms.
• Firewall & Intrusion Detection — Our servers are protected by multi-layered firewall systems and intrusion detection systems (IDS) that monitor suspicious activity continuously, 24 hours a day.
• Strict Access Controls — The principle of least privilege is applied — only staff who require access to specific data to perform their duties are granted that access.
• Regular Security Audits — We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA) — You are encouraged to enable two-factor authentication on your account for an additional layer of security.
• Continuous Monitoring — Our security team continuously monitors systems to detect any unusual activity that may indicate a data security threat.

Toto20 retains your personal data for as long as your account is active or as needed to provide services to you. Specific retention periods are as follows:

• Active Account Data — Retained for as long as your account is active and in use.
• Post-Account Closure Data — Following account closure, certain data may be retained for up to seven (7) years to meet legal, tax, and audit compliance requirements.
• Transaction Records — Financial records are retained for a minimum of five (5) years in accordance with anti-money laundering legal requirements.
• Communication Logs — Customer support records are retained for two (2) years for quality control and dispute resolution purposes.
• Technical Data — Access logs and technical data are retained for ninety (90) days for troubleshooting and security purposes.

Once the retention period expires and there is no legal requirement to retain it, your personal data will be securely deleted or anonymised in accordance with our data deletion procedures.

As a toto20 member, you have the following rights regarding your personal data. We fully respect these rights and will process every request promptly:

To exercise any of the above rights, please contact our support team via Live Chat or email. We will process your request within thirty (30) business days. For complex cases, this period may be extended, with prior notification to you.

The toto20 website uses cookies and similar tracking technologies to enhance your browsing experience and allow us to analyze how our platform is used.

Types of cookies we use:

• Essential Cookies — Required for core website functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies — Collects information about how visitors use our website, such as the most frequently visited pages, to help us improve the platform.
• Functional Cookies — Allows the website to remember your preferences (such as language and display settings) to deliver a more personalised experience.
• Analytics Cookies — Used to analyse platform traffic and usage patterns for continuous improvement purposes. Data collected is anonymised.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the toto20 platform. Continued use of our website after acknowledging our cookie notice is considered your consent to the use of cookies.

Toto20 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new service features we introduce.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to you via your registered email or in-platform alerts.
• In the case of highly material changes, we may request your re-confirmation of consent before you can continue using the platform.

We encourage you to review this Privacy Policy periodically. Continued use of the toto20 platform after changes take effect signifies your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• Live Chat — Available 24 hours a day, 7 days a week via the toto20 platform.
• Email — Send your privacy enquiries to [email protected].
• General Support — [email protected] for general enquiries related to your account and services.

We value your trust in toto20 and are committed to upholding high privacy standards across all our operations. Your satisfaction and security as a member is our primary motivation to continuously improve our data protection practices.