At toto26, the security and privacy of your personal information is a fundamental commitment — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, and the rights you hold over your information.
Last updated: January 2026A concise overview of how toto26 approaches data privacy. These highlights are for quick reference — the full legal policy document follows below.
toto26 collects only the personal data that is strictly necessary to provide our services, verify your identity, process transactions, and comply with our regulatory obligations. We do not collect data for its own sake.
All personal and financial data transmitted between your device and toto26's servers is protected by SSL 256-bit encryption — the same standard used by major Indonesian banks such as BCA and Mandiri. Your data is never sent in plain text.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within seven business days.
toto26 uses cookies solely to maintain your session, remember your preferences, and improve platform performance. We do not use advertising-network cookies or sell cookie data to any third party.
Player financial records are stored in segregated systems, physically and logically separated from operational infrastructure. Access is restricted to authorised personnel on a strict need-to-know basis, with all access events logged and audited.
Where data must be shared with third-party service providers — such as payment processors (BCA, OVO, DANA) and game studios (Pragmatic Play, Evolution Gaming) — sharing is limited to what is operationally necessary and governed by strict data-processing agreements.
toto26 ("we," "us," or "the Company") operates the online betting and gaming platform available at toto26.cam (the "Platform"). We are committed to protecting the privacy and security of all personal information entrusted to us by our players, prospective players, and website visitors (collectively, "you" or "Data Subject").
This Privacy Policy describes, in clear and plain terms, what personal data toto26 collects, the purposes for which it is processed, with whom it may be shared, how long it is retained, and what rights you hold as the individual to whom that data relates. This Policy applies to all services offered through the toto26 Platform, including the website, any mobile interface, and all associated customer support channels.
This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the toto26 Platform. By creating a toto26 account or continuing to use the Platform after any update to this Policy, you acknowledge that you have read and understood its contents.
Plain-language summary: We collect the information we need to run a safe, fair, and legal gaming platform for Indonesian players. We protect it with industry-standard security, we do not sell it, and you can ask us to access, correct, or delete it at any time.
toto26 collects several categories of Personal Data, depending on how you interact with the Platform:
When you create a toto26 account, we collect: full legal name, date of birth, residential address (including city and province within Indonesia — e.g., Jakarta, Surabaya, Bandung, Bali), email address, and mobile phone number.
To comply with our licensing obligations and to protect players from fraud, we collect: copies of government-issued identity documents (KTP, passport, SIM), selfie photographs for biometric cross-referencing, and, for high-value accounts, documentation evidencing the source of funds.
Transaction records, including deposit and withdrawal history, payment method details (bank account numbers for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay), and account balance history. We do not store full debit or credit card numbers on our servers.
A complete log of all bets placed, games played, bonus offers claimed, and real-money outcomes. This data is retained for regulatory compliance and dispute resolution purposes.
IP address, device type, browser type and version, operating system, referring URL, pages visited, session duration, and clickstream data. This information is collected automatically when you access the Platform.
Records of all communications between you and toto26 support staff, including live chat transcripts, email correspondence, and any complaints or feedback submitted through the Platform.
Note on Sensitive Data: toto26 does not intentionally collect sensitive special-category personal data (e.g., racial or ethnic origin, religious beliefs, health information) unless you voluntarily provide it — for example, in the context of a responsible gaming self-exclusion request where you may describe the nature of your concern.
toto26 collects your Personal Data through the following methods:
toto26 processes your Personal Data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details |
| Identity verification (KYC) | KYC documents, selfie images |
| Processing deposits and withdrawals | Financial data, KYC data |
| Providing gaming and betting services | Gaming data, account data |
| Fraud prevention and platform security | Technical data, financial data, gaming data |
| Regulatory compliance and audit | All categories as required |
| Customer support and dispute resolution | Communications data, gaming data |
| Responsible gaming monitoring | Gaming data, deposit history |
| Platform improvement and analytics | Technical data, usage data (aggregated/anonymised) |
| Promotional communications (with consent) | Contact details, gaming preferences |
toto26 processes your Personal Data on the following legal bases:
toto26 does not sell, rent, or trade your Personal Data to any third party for marketing, advertising, or commercial purposes. This is an unconditional commitment.
We share Personal Data with trusted third-party service providers who process data on our behalf and under our instruction. These include:
All Data Processors are bound by written data-processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to maintain appropriate security standards.
toto26 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a binding regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, or sale of substantially all of toto26's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.
toto26 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account and registration data | Duration of account plus 5 years after closure |
| KYC and identity documents | Duration of account plus 5 years after closure |
| Financial transaction records | Minimum 5 years from date of transaction |
| Gaming and betting history | Duration of account plus 3 years after closure |
| Customer support communications | 3 years from date of last interaction |
| Technical and usage logs | 13 months from date of collection |
| Marketing consent records | Until consent is withdrawn, plus 2 years |
Where data is retained beyond the account closure date solely to fulfil a legal obligation, it will be stored in a restricted-access archive and will not be used for any active processing purpose. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.
toto26 implements a comprehensive, layered security programme to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
While toto26 takes every reasonable precaution to protect your data, no system is entirely immune to attack. In the event of a data breach that poses a risk to your rights and freedoms, toto26 will notify affected players as promptly as practicable and in accordance with applicable regulatory notification requirements.
Your role in security: You are responsible for keeping your toto26 login credentials confidential. Use a strong, unique password and do not share your account details with anyone. Enable two-factor authentication on your account for an additional layer of protection.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time, so you do not have to re-enter them whenever you return to the site or navigate between pages.
toto26 uses the following categories of cookies:
toto26 does not use advertising-network cookies, cross-site tracking cookies, or any cookies that report your browsing behaviour to third-party marketing platforms. We do not participate in any real-time bidding (RTB) advertising ecosystem.
You can control and delete cookies through your browser settings. Please refer to your browser's help documentation for instructions. Note that disabling strictly necessary cookies will impair your ability to use the toto26 Platform, as session management depends on them.
As an individual whose Personal Data is processed by toto26, you hold the following rights. To exercise any of these rights, contact our support team at support@toto26.cam and we will respond within seven (7) business days:
How to exercise your rights: Email support@toto26.cam with the subject line "Data Rights Request" and specify which right you wish to exercise. Include your registered email address and, if possible, your account username to help us locate your record promptly.
The toto26 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from any individual under the age of 21. If you are a parent or guardian and believe that a minor has provided Personal Data to toto26, please contact us immediately at support@toto26.cam. Upon confirmation, we will delete the relevant data without undue delay and permanently close the associated account.
toto26 uses age-verification checks during the registration process and as part of the KYC programme specifically to prevent underage individuals from accessing the Platform. Any account found to belong to a person under 21 years of age will be immediately suspended and permanently closed.
toto26 operates with infrastructure and service providers located in multiple countries. As a result, your Personal Data may be transferred to, stored in, or processed in a country outside Indonesia. Where such transfers occur, toto26 takes steps to ensure that your data receives an equivalent level of protection to that afforded within Indonesia, including through the use of standardised contractual clauses, binding corporate rules, or transfers to jurisdictions with an internationally recognised adequate level of data protection.
By using the toto26 Platform, you acknowledge that your data may be transferred internationally in accordance with this section. If you have concerns about international data transfers, please contact our support team for further information about the specific safeguards in place.
toto26 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, service offerings, or applicable legal requirements. Material changes will be communicated to registered players via email notification and/or a prominent banner on the Platform at least seven (7) days before the updated Policy takes effect.
The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the toto26 Platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with a material change, you may close your account before the effective date by contacting our support team.
Stay informed: We recommend bookmarking this page and reviewing it periodically. Notifications of significant changes will always be sent to your registered email address — please ensure your contact details are kept up to date within your toto26 account profile.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way toto26 handles your Personal Data, please do not hesitate to get in touch through any of the following channels:
For matters relating to responsible gaming — including requests for deposit limits, cool-off periods, or self-exclusion — please visit our dedicated Responsible Gaming page, where detailed guidance and self-service tools are available.
Our support team is available around the clock to address any privacy concern. You can also review our full Terms & Conditions or visit our FAQ for quick answers about account security and data handling.