Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how toto1000 ("toto1000," "we," "us," or "our") collects, uses, stores, and discloses personal information obtained from users ("you," "Player") of the toto1000 website at toto1000.top and all associated services (collectively, the "Platform").

This Policy applies to all personal data processed by toto1000 in connection with the operation of the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications. It should be read alongside our Terms & Conditions.

toto1000 acts as the data controller in respect of personal data collected through the Platform. We are committed to handling your personal data in a lawful, fair, and transparent manner, consistent with applicable data protection laws and regulations in the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173).

2. Data We Collect

toto1000 collects personal data that you provide directly to us, as well as data generated automatically through your use of the Platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and nationality
• Email address and mobile phone number
• Residential address (including city, province, and postal code)
• Government-issued identification documents (e.g., Philippine passport, SSS ID, driver's license, PhilSys national ID) submitted for KYC verification
• Selfie or facial image submitted for identity verification purposes

2.2 Financial Data

• GCash or PayMaya account details linked to your toto1000 account
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) used for deposits or withdrawals
• Transaction history, including deposit amounts, withdrawal requests, and bonus redemptions

2.3 Usage & Technical Data

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and pages visited
• Game history, bet amounts, and wagering activity
• Geolocation data (city/region level) derived from your IP address

2.4 Communications Data

• Records of live chat, email, and support ticket interactions with the toto1000 team
• Responses to surveys, promotions, or feedback requests
• Marketing preferences and communication opt-in/opt-out status

3. How We Use Your Data

toto1000 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your toto1000 player account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification (KYC): To verify your identity and age (21+) as required by applicable gaming regulations and anti-money laundering (AML) obligations.
• Service Delivery: To provide access to games, promotions, and all features of the toto1000 Platform.
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and effective manner.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Regulatory Compliance: To comply with applicable laws, regulations, and requests from competent authorities, including PAGCOR and the National Privacy Commission (NPC) of the Philippines.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the toto1000 Platform.
• Responsible Gaming: To monitor gaming behavior and implement responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion, where applicable.

4. Legal Basis for Processing

toto1000 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable data protection principles:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you have agreed to, including account management and payment processing.
• Legal Obligation: Processing is required to comply with applicable laws, including AML regulations, KYC requirements, and gaming licensing conditions.
• Legitimate Interests: Processing is necessary for toto1000's legitimate interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies & Tracking Technologies

toto1000 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage, and deliver relevant content. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement.
• Preference Cookies: Used to remember your settings and preferences, such as language and display options.
• Marketing Cookies: Used to deliver relevant promotional content based on your activity on the Platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the toto1000 Platform.

6. Data Sharing & Disclosure

toto1000 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients:

• Payment Processors: GCash, PayMaya, and Philippine banking partners (BPI, BDO, Metrobank) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify player identities and screen for sanctions or politically exposed persons (PEPs).
• Technology Service Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law.
• Law Enforcement: Philippine law enforcement agencies or courts, where we are legally required or permitted to disclose data in connection with the investigation or prosecution of criminal offences.
• Professional Advisers: Legal, accounting, and auditing firms engaged by toto1000, subject to professional confidentiality obligations.

All third parties with whom toto1000 shares personal data are required to handle such data in accordance with applicable data protection laws and toto1000's data processing standards.

7. International Data Transfers

toto1000 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to recipients located outside the Philippines (for example, to cloud infrastructure providers or technology partners), toto1000 ensures that appropriate safeguards are in place to protect your data, consistent with the requirements of the Data Privacy Act of 2012 and the rules of the National Privacy Commission.

Such safeguards may include contractual clauses approved by the NPC, adequacy decisions, or other legally recognized transfer mechanisms. By using the toto1000 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines.

8. Data Retention

toto1000 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required by AML regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Retained for a minimum of 5 years following the end of the business relationship.
• Support Communications: Retained for 2 years from the date of the last interaction.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications.

After the applicable retention period, personal data is securely deleted or anonymized in accordance with toto1000's data disposal procedures.

9. Your Data Rights

Under the Data Privacy Act of 2012 and applicable regulations, you have the following rights in respect of your personal data held by toto1000:

• Right to Be Informed: The right to be informed about how your personal data is collected and processed, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data toto1000 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to toto1000's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact the toto1000 Data Privacy Officer via the support team. toto1000 will respond to all verified data rights requests within 30 calendar days.

10. Children's Privacy

The toto1000 Platform is strictly intended for persons who are 21 years of age or older, as required under Philippine gaming regulations. toto1000 does not knowingly collect personal data from individuals under the age of 21. If toto1000 becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on the toto1000 Platform, please contact our support team immediately so that we can take appropriate action.

11. Security Measures

toto1000 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the toto1000 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Access controls limiting personal data access to authorized toto1000 personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Two-factor authentication (2FA) options for player accounts.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While toto1000 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying toto1000 immediately of any suspected unauthorized access to your account.

12. Third-Party Links

The toto1000 Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the toto1000 Platform. toto1000 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Updates to This Policy

toto1000 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the effective date at the top of this page and may notify registered players via email or in-platform notification. Your continued use of the toto1000 Platform following the posting of any changes constitutes your acceptance of the revised Policy.

We recommend that you review this Privacy Policy periodically to stay informed about how toto1000 protects your personal data.

14. Contact & Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by toto1000, please contact our Data Privacy Officer through the toto1000 support team. Our support staff is available 24 hours a day, 7 days a week via live chat on the Platform.

You may also reach us by email at: [email protected]