xx1toto Privacy Policy

This page describes what we collect when you use xx1toto and how we keep that data protected. We collect personal information only when necessary for account verification, payment processing, and legal compliance. Your data is held securely and shared only with third-party processors who handle payment settlement, identity verification, and customer support.

Our xx1toto privacy commitments are simple: we do not sell your data to marketers, we do not share your betting history with third parties outside our service, and we do not retain data longer than required by law or operational necessity. When you use xx1toto, you trust us with your identity, payment details, and account activity. This policy explains exactly how we handle that trust.

Our servers may sit outside your jurisdiction; your data may be transferred, stored, or processed internationally. By using xx1toto, you consent to this cross-border data handling, which is necessary to deliver live-dealer tables, payment processing, and sportsbook settlement. For questions about data handling, contact our support team via in-app chat or the channels listed at the end of this policy.

What Data We Collect on xx1toto

We at xx1toto collect the following personal information when you register an account: email address, phone number, full name, date of birth, and residential address. We request this information to verify your identity, comply with local gaming regulations, and process your withdrawals. Your email is used for login and account recovery; your phone number is used only for verification and support contact if you request it.

When you deposit or withdraw via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect transaction records and bank details. We store the last four digits of your linked bank account for reference, but we do not store full account numbers or passwords. Payment processors (not xx1toto directly) handle the full transaction details.

We also collect gameplay data: your bets on sportsbook markets (Liga 1, Piala Indonesia, Piala AFF, Champions League), your live-dealer table sessions, your slot game spins, and your account balance changes. This data is logged for settlement verification, dispute resolution, and fraud detection. We do not sell this data; it is retained only for operational and legal purposes. You can download your full account history anytime via your account settings.

How We Use Your Data at xx1toto

We at xx1toto use your personal information for five purposes: account verification (confirming your identity before withdrawal), payment processing (settling deposits and withdrawals through payment partners), legal compliance (maintaining records as required by gaming regulations), fraud prevention (detecting suspicious activity), and customer support (responding to your inquiries via in-app chat, email, or phone).

Your gameplay data is used to settle bets accurately, confirm winnings or losses, and investigate disputes. We do not use your data for marketing campaigns, algorithmic targeting, or selling to third parties. Your xx1toto account activity is never shared with external marketers or data brokers. We keep your data confidential within our team and our trusted processors.

When you request a withdrawal, we share only the minimum necessary information with our payment processors (your name, linked bank details, withdrawal amount) to execute the transfer. We do not share your betting history, IP address, or device data with payment processors. Your sportsbook bets, live-dealer sessions, and slot history remain within xx1toto's systems.

Third-Party Processors on xx1toto

We at xx1toto use third-party service providers to deliver our platform safely and reliably. Identity verification is handled by external KYC providers who check your documents but do not retain them beyond verification. Payment processing is managed by banking partners and e-wallet networks (mobile banking, local payment, online payment, e-wallet, mobile banking operate their own payment infrastructure). Customer support tools may log chat messages temporarily for training and dispute resolution.

Our live-dealer table providers (including Pretty Gaming and other studios) may collect session data—table you joined, game played, result—but they do not access your personal information or payment details. Live-dealer settlement occurs on xx1toto's backend; table providers see only gameplay outcomes, not your account balance or identity.

We do not allow third-party processors to use your data for their own marketing. Their access is restricted to delivering the specific service contracted. All processors sign data-processing agreements requiring them to keep your information confidential and delete it when no longer needed for their service.

Cookies and Tracking on xx1toto

Our xx1toto app and website use session cookies to keep you logged in and remember your preferences (language, default payment method). These cookies are deleted when you close your browser or log out. We do not use persistent cookies for tracking or profiling.

We do not embed third-party tracking pixels, analytics scripts, or advertising networks on xx1toto. We do not track your activity across other websites. Our analytics are internal only—we measure how many users visit pages, which games are popular, and whether our app performs smoothly. This data is aggregate and does not identify you personally.

Your IP address is logged for fraud prevention and security purposes. We use it to detect if someone in Jakarta, Surabaya, Bandung, Medan, or Semarang is accessing your account from an unusual location. If we detect suspicious activity, we may flag your account or ask you to reverify.

Your Rights Regarding Data on xx1toto

You have the right to request what personal data we hold about you. Submit a request via our customer support team, and we will provide a downloadable file of your account details within ten business days. You can also download your transaction history and gameplay logs directly from your account settings anytime.

You have the right to correct inaccurate data. If your name, address, or phone number is wrong on xx1toto, update it in account settings immediately. We may ask for updated verification documents if your address changes before processing a withdrawal.

You have the right to request deletion of your account and associated data. We will delete your personal information within 30 days of your request, except data we are required to retain for legal or financial compliance (typically three to seven years depending on jurisdiction). Gameplay records are kept for dispute resolution; your payment history is kept for banking audit purposes.

How Long We Keep Your Data on xx1toto

We at xx1toto retain your personal information (name, email, phone, address) for as long as your account is active plus seven years after closure, to comply with financial reporting laws. Your gameplay and transaction history is kept for at least three years for dispute resolution and audit purposes. If you request account deletion, we remove personal data within 30 days, but we retain transaction summaries (amounts, dates, game types) for a minimum of three years if required by gaming regulations.

Session cookies are deleted when you log out. Login tokens are invalidated after 30 days of inactivity. Fraud-detection logs (IP addresses, device fingerprints) are deleted after 90 days if no security concern is identified. If we detect fraud, we may retain logs longer for investigation purposes.

We delete marketing lists or inactive-user campaigns automatically. We do not retain your email for spam—we only use it for account recovery and critical support. If you update your email address on xx1toto, your old email is deleted unless we need it for legal or dispute purposes.

How We Secure Your Data on xx1toto

Our xx1toto servers use TLS 1.2 encryption for all data in transit. Your password is never stored in plain text; we use salted hashing to store password hashes only. Payment details are encrypted at rest and in transit; we do not retain full credit card or bank account numbers on our servers.

We perform regular security audits and penetration testing to identify vulnerabilities. Our staff access user data only when necessary (e.g., support team responding to your request, fraud investigators). Access logs are maintained for all staff actions. We have an incident response plan: if we detect a data breach, we notify affected users and relevant authorities within 48 hours.

We do not guarantee standard security practices; no online system is completely immune to attack. However, we invest continuously in security updates, firewall maintenance, and staff training to minimize risk. If you use a public Wi-Fi network to access xx1toto, your data is encrypted on our end, but your local connection may be at risk—we recommend using a VPN for public networks.

Contacting Us About Privacy on xx1toto

If you have questions about how we handle your data on xx1toto, or if you want to exercise your data rights (access, correction, deletion), contact our support team. You can reach us via in-app chat (available during business hours), email, or phone. We aim to respond to data requests within five business days and resolve privacy concerns within ten business days.

Our customer support team can direct your inquiry to our data-protection officer if needed. If you believe we have mishandled your data, you have the right to file a complaint with your local data-protection authority. We also welcome feedback on our privacy practices; send suggestions to our support channels anytime.

This privacy policy is effective as of its publication date and may be updated periodically to reflect changes in our practices or applicable law. We will notify you of material changes via in-app message or email. Your continued use of xx1toto after a policy update constitutes acceptance of the new terms. For the most current version, visit this page anytime.