This Privacy Policy explains how tot80 collects, uses, stores, and protects personal information provided by users of the tot80 platform. We are committed to handling your data responsibly and transparently.
tot80 ("we", "us", "our") operates the online betting and gaming platform accessible at https://tot80.cam (the "Platform"). In the course of providing our services to users in Indonesia and internationally, we process personal data about you. This Privacy Policy explains what personal data we collect, the purposes for which we use it, how we protect it, and the rights available to you in relation to your data.
This policy applies to all users of the tot80 Platform, including visitors who browse the Platform without registering an account, registered members, and any individuals who contact us through our support channels. It should be read alongside our Terms & Conditions, which govern the overall legal relationship between you and tot80.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Platform and contact us to request deletion of any data we hold about you.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could identify a living individual, including name, email address, date of birth, national identity number (KTP), bank account details, device identifiers, and IP addresses. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, and any other form of handling. |
| "Data Controller" | tot80, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of tot80 under a data processing agreement (e.g., payment processors, KYC verification providers, cloud hosting services). |
| "Cookies" | Small text files placed on your device by the Platform to store preferences, session information, and analytics data. |
| "KYC" | Know Your Customer — the identity and document verification process required before a User may withdraw funds from the Platform. |
| "User" / "You" | Any individual who accesses, registers on, or uses the tot80 Platform. |
tot80 collects the following categories of Personal Data, depending on how you interact with the Platform:
We collect Personal Data through the following means:
tot80 processes your Personal Data on one or more of the following legal bases:
| Legal Basis | Examples of Processing Activities |
|---|---|
| Contractual Necessity | Processing your account data, deposits, withdrawals, and bet settlements — activities necessary to deliver the service you have contracted for under our Terms & Conditions. |
| Legal Obligation | KYC identity verification, anti-money-laundering transaction monitoring, responsible gaming controls, and record-keeping required by our licensing authority. |
| Legitimate Interests | Fraud prevention, platform security, technical diagnostics, service improvement, and aggregate analytics — where our interests do not override your rights. |
| Consent | Sending optional promotional communications (bonus offers, platform updates) where you have opted in. You may withdraw consent at any time by contacting our support team. |
tot80 uses Personal Data for the following purposes:
tot80 does not sell, rent, or trade your Personal Data to third-party marketers. We share Personal Data only in the following circumstances:
We share data with carefully selected third-party service providers who process data on our behalf, including:
All Data Processors are bound by data processing agreements requiring them to process your data only on our documented instructions and to maintain appropriate security standards.
tot80 may disclose Personal Data to competent authorities, regulators, courts, or law enforcement agencies where required by law, court order, or our licensing obligations — including in connection with anti-money-laundering investigations or responsible gaming regulatory audits.
In the event of a merger, acquisition, or sale of all or part of tot80's business, Personal Data held about Platform users may be transferred to the acquiring entity as part of that transaction. Users will be notified in advance of any such transfer that changes the identity of the Data Controller.
tot80 may share aggregated, anonymized statistical information about Platform usage (e.g., total number of users in Jakarta, popular bet types) with business partners or in public reports. This data cannot be used to identify individual users.
tot80 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The following categories of cookies are used:
| Cookie Type | Examples | Purpose |
|---|---|---|
| Strictly Necessary | session_id, csrf_token | Required for the Platform to function. Cannot be disabled. Used for login sessions, security tokens, and load balancing. |
| Functional | lang_pref, odds_format | Remember your settings and preferences (e.g., language, odds display format) so you do not need to reconfigure them at each visit. |
| Analytics | _ga, _gid | Collect anonymized data on how users navigate the Platform, which pages are visited most, and where technical errors occur — used to improve the Platform. |
| Security | fraud_score | Support fraud detection and account security by tracking device fingerprints and behavioral signals across sessions. |
You can configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from using core Platform features including login. Our analytics cookies are processed in anonymized form and do not identify you as an individual.
tot80 retains Personal Data for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. Specific retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | For the duration of the account, plus 5 years after account closure (for regulatory compliance purposes). |
| KYC Documents | 5 years after the end of the business relationship, or longer if required by applicable anti-money-laundering regulations. |
| Transaction & Bet History | 5 years from the date of each transaction, to support regulatory audit, dispute resolution, and tax record requirements. |
| Support Communications | 2 years from the date of the interaction, unless the matter remains the subject of an ongoing dispute or investigation. |
| Technical / Log Data | 90 days, after which logs are anonymized or deleted. |
| Marketing Preferences | Until you withdraw consent, plus 1 year for suppression-list maintenance. |
When retention periods expire, data is securely deleted or irreversibly anonymized. You may request earlier deletion of specific data categories by contacting us — however, we may be unable to delete data that we are legally required to retain.
tot80 implements a comprehensive set of technical and organizational security measures to protect Personal Data against unauthorized access, accidental loss, alteration, disclosure, and destruction:
Subject to applicable law, you have the following rights in relation to your Personal Data held by tot80. To exercise any of these rights, contact us using the details in Section 16.
Request a copy of the Personal Data we hold about you, including the categories processed, the purposes for processing, and any third parties with whom it has been shared.
Request correction of any inaccurate or incomplete Personal Data we hold about you. Account holders can update standard profile data directly from Account Settings.
Request deletion of your Personal Data where it is no longer necessary for the original purpose, or where you have withdrawn consent — subject to our legal retention obligations.
Request that we limit how we use your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
Receive a copy of your Personal Data in a structured, machine-readable format (e.g., CSV or JSON) where technically feasible, to transfer to another service provider.
Object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will stop sending promotional communications immediately.
We will respond to rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days with notice. We will never charge a fee for handling rights requests unless they are manifestly unfounded or excessive.
tot80's primary infrastructure is hosted in data centers located in jurisdictions with recognized data protection frameworks. Where Personal Data is transferred outside of the jurisdiction in which it was collected — for example, to cloud service providers or KYC platforms operating in different countries — tot80 ensures that appropriate safeguards are in place, including:
Users in Indonesia should be aware that data may be processed on servers located outside Indonesia. In all cases, tot80 applies the same security standards and access controls regardless of the country where data is stored or processed.
The tot80 Platform integrates with certain third-party services to deliver its features — including payment processors for BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay transactions; identity verification providers for KYC processing; and analytics tools for Platform performance monitoring.
These third parties operate under their own privacy policies and are responsible for their own data handling practices. tot80 selects third-party partners that meet our security and data protection standards, but we are not responsible for the privacy practices of third parties beyond our contractual obligations to them as Data Processors.
The Platform does not contain links to external third-party websites. Any navigation on tot80 remains within the Platform domain (https://tot80.cam).
tot80 does not knowingly collect Personal Data from any individual under the age of 21. If we discover that an Account has been registered by a person under 21, we will immediately close the Account, return any real-money balance held (less any bonuses), and delete all associated Personal Data.
If you have reason to believe that a person under 21 has registered an Account on tot80, please contact us immediately using the details in Section 16 so we can investigate and take appropriate action.
tot80 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The current version number and effective date are always displayed at the top of this page.
Where changes are material — meaning they significantly affect how we use your data or your rights in relation to it — we will notify you by email to your registered address at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.
We encourage you to review this Privacy Policy periodically. If you object to any changes, you may close your Account and request deletion of your data under the terms of Section 11.
For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact tot80 using the details below. We are committed to responding to all privacy-related enquiries within 5 business days.
These are the concrete measures that underpin tot80's privacy commitments — not abstract statements, but specific practices you can hold us accountable to.
Every connection between your device and tot80 — including login, deposits, withdrawals, and game sessions — is encrypted with 256-bit TLS. Your financial data and account credentials are never transmitted in plaintext.
tot80 does not sell, rent, or trade your personal data to any third-party marketer. Your betting history, financial details, and identity documents are used exclusively to operate your account and comply with our legal obligations.
Access, correct, export, or delete your data at any time by contacting our team. We process all rights requests within 30 days and never charge a fee for legitimate requests.
Your password is stored as a one-way cryptographic hash (bcrypt / Argon2). tot80 staff cannot view your password and will never ask you to share it. If you forget it, a secure reset flow is provided.
We retain each category of data for the minimum period required by law and our licensing obligations. When retention periods expire, data is securely deleted or permanently anonymized — no indefinite storage.
Promotional emails and bonus notifications are sent only with your explicit consent. You can withdraw consent and opt out of all marketing communications at any time by contacting our support team — no dark patterns, no re-subscriptions.
Our support team is available 24/7 to address data requests. You can also review our full Terms & Conditions or visit our FAQ for quick answers about account and security topics.
tot80 is a platform for adults only (21+). We are committed to handling your personal data with the highest standards of care and transparency.