xx1toto Privacy Policy

This page describes what we collect when you use xx1toto and how we keep that data protected. We at xx1toto take your privacy seriously—your email, phone number, identity documents, and transaction history are sensitive information that we handle with care. We encrypt your data, limit access to authorised staff only, and never sell your information to third parties without your explicit consent. Our servers may sit outside your jurisdiction, but we apply the same data-protection standards regardless of location.

When you create an account with us—whether from Jakarta, Surabaya, Bandung, Medan, or Semarang—you're trusting us with personal information. This privacy policy explains exactly what we collect, why, how we use it, and what rights you have. We believe transparency builds trust, so we've structured this policy to be clear and readable. If you have questions about our data practices, our support team can help clarify.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

What Data We Collect on xx1toto

We collect your email address, phone number, and password when you register. These are essential—without them, we cannot send you account notifications or help you reset your access if you forget your password. We also collect your full name and date of birth during Know Your Customer (KYC) verification, along with a copy of your government-issued identity document (passport, national ID, or driver's license). This verification is a legal requirement in many jurisdictions and protects both you and us from fraud.

Beyond registration data, we at xx1toto collect transaction records: every deposit you make, every withdrawal you request, every sportsbook selection, live-table bet, or slot spin. This information is necessary for settling your bets fairly, processing your withdrawals, and maintaining an audit trail. We log the date, time, amount, and outcome of each activity. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we retain a record of the transaction for accounting and regulatory purposes.

We also collect technical data: your IP address, browser type, device model, and operating system. This helps us diagnose technical issues, improve our platform, and detect suspicious activity. When you interact with our live-dealer tables or sportsbook, we may log which tables you visit, how long you stay, and which markets you browse. We do not record video of you—we only record how you interact with our platform.

Account Data

Email, phone, password, full name, date of birth, identity document. Required for account opening and legal compliance.

Transaction Data

Deposit records, withdrawal requests, gaming activity, settlement outcomes. Necessary for processing and audit trails.

Technical Data

IP address, device type, browser, operating system. Used for security and platform improvement.

Communication Data

Emails and support messages you send to us. Retained to respond to your inquiries and document support history.

How We Use Your Data on xx1toto

We at xx1toto use your data primarily to operate the platform and service your account. Your email and phone are used to send you account notifications (deposit confirmation, withdrawal status, password reset links). Your transaction data allows us to settle your bets fairly and process your withdrawals on time. We rely on your identity information to comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations—these are legal requirements we cannot waive.

We use technical data to maintain platform security. If we detect unusual activity—multiple failed login attempts, withdrawals from unusual locations, deposits followed by immediate large withdrawals—we may flag your account for manual review. This protects you from unauthorised access and protects us from fraud. We do not use your data for marketing without your consent. We do not sell your information to third parties, and we do not share it with gaming affiliates, betting syndicates, or data brokers.

Our third-party processors—payment gateways (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banks), identity verification services, and fraud-detection systems—receive only the data necessary to perform their specific function. For instance, when you deposit via online payment, e-wallet receives your mobile banking ID and transaction amount but not your full gaming history. Identity verifiers receive your ID document and name but not your gaming activity. Each processor is contractually obligated to protect your data and not use it for their own purposes.

Cookies and Tracking on xx1toto

We at xx1toto use cookies to remember your login status, so you don't have to sign in every time you visit. These are session cookies that expire when you close your browser, or persistent cookies that remain until you delete them. We do not use cookies to track you across websites, nor do we sell cookie data to advertisers. Third-party analytics services (if present) may use cookies to measure page traffic, but they are not permitted to identify individuals.

You can disable cookies in your browser settings. Doing so will not affect your ability to access xx1toto, but you may need to enter your login credentials more frequently. We do not use fingerprinting, pixel tracking, or other covert tracking methods. When you visit xx1toto, you can be confident that we are collecting only the data necessary to serve your account and comply with regulations.

Your Rights and Data Access on xx1toto

We at xx1toto believe you have the right to access your data. You can log into your account and view your registration details, transaction history, and gaming activity at any time. If you want a complete export of your data in a portable format, contact our support team and we will provide it. You also have the right to correct inaccurate information—for instance, if your phone number changes, update it in your account settings immediately.

You have the right to request deletion of your account. If you do so, we will remove your personal data from active systems within thirty days, subject to retention requirements for regulatory compliance. Some data—transaction records needed for tax or anti-money laundering purposes—may be retained in archived form for the legally required period. We will not delete your name from our ledgers if doing so would break regulatory auditing requirements.

If you believe we have misused your data, or if our data practices violate your local privacy laws, you may file a complaint with your jurisdiction's data-protection authority. We at xx1toto take such complaints seriously and will cooperate fully with any official investigation.

Data Security and Cross-Border Transfers on xx1toto

We at xx1toto encrypt all sensitive data using industry-standard encryption (TLS/SSL). Your passwords are hashed and cannot be read by anyone, including our staff. Personal information is stored on secure servers with restricted access—only authorised employees can view your data, and only for purposes directly related to serving your account. We maintain firewalls, intrusion-detection systems, and regular security audits to prevent unauthorised access.

Our servers may be located outside your home jurisdiction—for instance, in data centres in Southeast Asia or beyond. We treat data stored anywhere with the same security standards and privacy protections. If local law requires us to transfer your data to government authorities, we will notify you if legally permitted to do so. We do not voluntarily hand over user data to any third party without a valid legal order.

If a data breach occurs—an extremely unlikely but possible scenario—we at xx1toto will notify affected users promptly and honestly. We will explain what data was compromised, what steps we've taken to secure it, and what actions users should take to protect themselves. We maintain cyber-liability insurance to cover the costs of breach notification and remediation. Your trust in our security practices is paramount, and we do not take data protection lightly.