toz88 Privacy Policy

1.1 Scope. This Privacy Policy applies to all personal data collected by or on behalf of toz88 through the website toz88.vip, all associated subdomains, mobile-optimized pages, customer support channels (live chat, email), and any other digital touchpoint operated by toz88. It applies to all Members (registered users) and to non-registered visitors who browse toz88.vip.

1.2 Data Controller. For the purposes of this Privacy Policy, toz88 acts as the data controller in respect of personal data collected through toz88.vip. toz88 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with this policy and applicable data protection law.

1.3 Acceptance. By registering an account on toz88.vip or by continuing to browse the website after this policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this policy, you should discontinue use of toz88 and contact support to arrange account closure.

1.4 Relationship to Terms & Conditions. This Privacy Policy forms an integral part of toz88's Terms & Conditions and should be read alongside them. In the event of a conflict between this policy and the Terms & Conditions on a data-related matter, this Privacy Policy takes precedence.

toz88 collects the following categories of personal data from Members and, where applicable, from visitors to toz88.vip:

toz88 collects personal data through the following channels:

• Direct submission: When you complete the toz88 registration form, submit KYC documents, initiate a deposit or withdrawal, or contact customer support, you directly provide us with personal data.
• Automated technical collection: When you browse toz88.vip, our servers automatically collect technical data including your IP address, device identifiers, and browsing behavior through server logs, cookies, and similar tracking technologies. See Section 8 for full details on cookies.
• Payment processors: When you transact via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction confirmation data is shared with toz88 by the relevant payment processor in order to credit or debit your account.
• Identity verification partners: In the course of KYC verification, toz88 may use trusted third-party identity verification services that cross-reference the documents you submit against authoritative data sources. These partners operate under strict data processing agreements with toz88.
• Fraud prevention and security services: toz88 may receive data from third-party fraud detection and cybersecurity providers that assist in identifying suspicious activity, account takeover attempts, and unauthorized transactions on the platform.

toz88 processes your personal data only where we have a valid legal basis to do so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

5.1 General Principle. toz88 does not sell your personal data. We share personal data with third parties only where strictly necessary to operate the platform, comply with legal obligations, or protect the rights and security of toz88 and its Members.

5.2 Categories of Recipients. Personal data may be shared with the following categories of third parties:

• Payment processors and financial institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and international card networks (Visa, Mastercard) receive only the financial data required to process your transactions.
• Identity verification service providers: Third-party KYC partners who verify your identity documents and confirm your age and eligibility to use toz88.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session and wager data for the purpose of delivering their games within the toz88 platform. These providers do not receive your full identity data.
• Fraud prevention and cybersecurity providers: Services that help toz88 detect unauthorized account access, fraudulent transactions, and platform abuse.
• IT infrastructure and hosting providers: Cloud hosting and server infrastructure partners who provide the technical environment in which toz88.vip operates.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, toz88 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities.

5.3 Data Processing Agreements. All third-party service providers who process personal data on behalf of toz88 are bound by written data processing agreements that require them to maintain confidentiality, implement appropriate security measures, process data only for the purposes specified by toz88, and not share data with further parties without prior authorization.

toz88 operates an international platform, and in the course of providing our services, your personal data may be transferred to and processed in countries outside Indonesia. This may occur when toz88 uses cloud hosting infrastructure, KYC verification services, or game content providers whose servers are located in other jurisdictions.

Whenever personal data is transferred internationally, toz88 ensures that appropriate safeguards are in place to protect your data to at least the same standard as required in Indonesia. These safeguards include contractual data protection clauses, compliance with the data protection requirements of the jurisdiction in which toz88 holds its international operating license, and the application of toz88's internal data security standards.

By using toz88.vip and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data where necessary for the provision of toz88's services as described in this policy.

7.1 Retention Principle. toz88 retains personal data for no longer than is necessary for the purposes for which it was collected, unless a longer retention period is required by applicable law or regulation.

7.2 Active Account Data. While your toz88 account remains active, we retain all account, identity, financial, and gaming data necessary to operate your account and comply with our legal obligations. You may request a copy of your data at any time (see Section 10).

7.3 Post-Closure Retention. Following the closure of a toz88 account — whether by the Member voluntarily or by toz88 — personal data is retained for a period of five (5) years from the date of closure. This retention period is necessary to comply with anti-money-laundering record-keeping requirements, to respond to regulatory inquiries, and to resolve any outstanding disputes.

7.4 KYC Documents. Identity verification documents (copies of KTP, passport, or other government-issued ID) are retained for the same five-year post-closure period, after which they are securely and permanently deleted from toz88's systems.

7.5 Communications Data. Customer support transcripts and email correspondence are retained for three (3) years from the date of the communication, unless the communication forms part of an active dispute, in which case it is retained until the dispute is fully resolved.

7.6 Marketing Data. If you have provided consent to receive promotional communications from toz88, your contact preferences are retained until you withdraw consent. Upon withdrawal of consent, your data will be removed from marketing lists within 30 days.

8.1 What Are Cookies. Cookies are small text files stored on your device by your browser when you visit a website. toz88 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and analyze how Members use toz88.vip.

8.2 Types of Cookies Used by toz88.

8.3 Managing Cookies. You may control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your toz88 account or using core platform features. Most modern browsers allow you to configure cookie preferences granularly; please refer to your browser's help documentation for instructions.

9.1 Technical Safeguards. toz88 implements a comprehensive set of technical security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and toz88's servers.
• AES-256 encryption for sensitive data at rest, including stored KYC documents and financial records.
• Hashed and salted storage of account passwords — toz88 does not store passwords in readable form and cannot retrieve your password; only a secure reset is possible.
• Firewall protection, intrusion detection systems, and regular third-party penetration testing of toz88's infrastructure.
• Strict access controls limiting internal staff access to personal data on a need-to-know basis, with all access logged and audited.
• Two-factor authentication (2FA) available for Member accounts to provide an additional layer of protection against unauthorized login.

9.2 Organizational Safeguards. toz88 maintains internal data protection policies, conducts regular staff training on data handling obligations, and appoints designated personnel responsible for overseeing data privacy compliance across the organization.

9.3 Data Breach Response. In the event of a personal data breach that poses a risk to the rights and freedoms of Members, toz88 will take immediate containment action, conduct a full investigation, and notify affected Members and relevant authorities in accordance with applicable data protection law. Members will be informed of any breach affecting their data without undue delay.

9.4 Your Responsibility. While toz88 takes extensive measures to protect your data, the security of your toz88 account also depends on you maintaining the confidentiality of your login credentials. toz88 will never ask for your password via email, live chat, or any other channel. If you suspect that your account has been compromised, contact support immediately at [email protected].

As a toz88 Member, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. toz88 will respond to verified data rights requests within 30 days.

toz88 is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires all applicants to confirm their date of birth and age, and KYC verification is used to confirm age where there is any doubt.

If toz88 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and the matter may be referred to relevant authorities. Any deposits made by an underage individual will be returned where traceably possible; however, any winnings generated during the underage period will be forfeited.

Parents and guardians who believe that their child may have registered on toz88.vip should contact us immediately at [email protected]. We will investigate all such reports promptly and with full confidentiality.

toz88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. When material changes are made, toz88 will notify registered Members by email or through a prominent notice on toz88.vip prior to the changes taking effect. The updated policy will be published at toz88.vip/privacy-policy with a revised effective date at the top of the document.

We encourage you to review this Privacy Policy periodically to stay informed about how toz88 protects your personal data. Your continued use of toz88.vip after any update constitutes your acceptance of the revised policy. If you do not agree to a material change, you should contact support to arrange account closure before the change takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data toz88 holds about you, please contact our support team through the channels below. All data rights requests are handled by trained staff and will receive a response within 30 days of receipt.

When submitting a data rights request, please include your registered username and the email address associated with your toz88 account so that we can verify your identity and locate your records efficiently. toz88 will not action data rights requests without identity verification, in order to protect Members from unauthorized data access.