toto399 Privacy Policy

1. About This Privacy Policy

This Privacy Policy describes how toto399 collects, uses, stores, shares, and protects the personal information of individuals who access or use the toto399 online casino platform, including registered account holders, visitors to the toto399 website, and any person who interacts with toto399 through any channel.

By registering a toto399 account, accessing the toto399 platform, or otherwise providing your personal information to toto399, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the toto399 platform.

This Privacy Policy should be read together with the toto399 Terms & Conditions, which govern your use of the toto399 platform and are incorporated herein by reference.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, toto399 is the personal information controller responsible for the personal data collected through the toto399 platform. toto399 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection laws.

If you have any questions about how toto399 handles your personal data, or if you wish to exercise any of your data subject rights described in Section 11 of this Privacy Policy, please contact the toto399 Data Privacy Officer using the contact details provided in Section 15.

3. Personal Data We Collect

toto399 collects the following categories of personal data from players and platform users:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — toto399 is strictly 21+ only);
• Philippine mobile number;
• Email address;
• Residential address (province, city, barangay);
• Government-issued ID number (e.g., Philippine passport, driver's licence, national ID).

3.2 Financial Data

• GCash mobile number or Maya account details (for deposit and withdrawal processing);
• Philippine bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or other Philippine banks) where bank transfer is selected;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
• Debit card details where applicable (card number is not stored in full — only the last four digits and card type are retained).

3.3 Gaming & Account Data

• toto399 username and account ID;
• Game history, including games played, wager amounts, outcomes, and session duration;
• Bonus and promotion usage history;
• Responsible gaming settings and self-exclusion status;
• Customer support interaction records, including live chat transcripts and email correspondence.

3.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited on the toto399 platform, time spent, and navigation patterns;
• Login timestamps and session duration;
• Cookies and similar tracking technology data (see Section 8).

4. How We Collect Your Data

toto399 collects personal data through the following means:

• Direct collection: Information you provide when registering a toto399 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the toto399 platform, through cookies, log files, and similar technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud detection data from security partners; payment confirmation data from GCash, Maya, and Philippine banking partners.

5. How toto399 Uses Your Personal Data

toto399 uses your personal data for the following purposes:

toto399 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

6. Legal Basis for Processing

toto399 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and toto399 (i.e., operating your toto399 account, processing payments, and providing gaming services);
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and AML obligations;
• Legitimate interests: Processing necessary for toto399's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications. You may withdraw your consent at any time by contacting toto399 customer support.

7. Data Sharing & Disclosure

toto399 does not sell your personal data to third parties. toto399 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and Philippine banking partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and security partners: Services used to detect and prevent fraudulent activity on the toto399 platform;
• Regulatory authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law;
• IT and cloud service providers: Third-party providers of hosting, data storage, and platform infrastructure services, subject to contractual data protection obligations;
• Professional advisers: Legal, accounting, and compliance advisers, subject to professional confidentiality obligations.

8. Cookies & Tracking Technologies

The toto399 platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyse platform usage. The following types of cookies are used by toto399:

• Strictly necessary cookies: Essential for the toto399 platform to function correctly, including session management and security. These cannot be disabled;
• Functional cookies: Remember your preferences, such as language settings and responsible gaming limits, to personalise your toto399 experience;
• Analytics cookies: Collect anonymised data about how players use the toto399 platform, helping us identify areas for improvement;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats on the toto399 platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the toto399 platform. toto399 does not use cookies to track your activity on third-party websites.

9. Data Retention

toto399 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your toto399 account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML obligations;
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine AML and tax regulations;
• Gaming history: Retained for a minimum of three (3) years from the date of the gaming session;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Technical and usage data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, toto399 will securely delete or anonymise your personal data in accordance with industry-standard data destruction procedures.

10. Data Security

toto399 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the toto399 platform;
• Encryption of sensitive personal data at rest, including financial data and government ID information;
• Role-based access controls ensuring that toto399 staff can only access personal data necessary for their specific job function;
• Regular security audits, penetration testing, and vulnerability assessments of the toto399 platform;
• Multi-factor authentication requirements for toto399 administrative systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with the requirements of the Philippine Data Privacy Act of 2012.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by toto399:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data toto399 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to toto399's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe toto399 has violated your data privacy rights.

To exercise any of these rights, please contact the toto399 Data Privacy Officer using the details in Section 15. toto399 will respond to all data subject requests within thirty (30) calendar days of receipt, as required by the Philippine Data Privacy Act of 2012.

12. Children & Minors

If you are a parent or guardian and believe that a minor has registered a toto399 account or provided personal data to toto399, please contact our customer support team immediately via live chat or at the email address provided in Section 15. toto399 takes underage gambling extremely seriously and will act promptly on all such reports.

13. International Data Transfers

toto399 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services — toto399 ensures that such transfers are subject to appropriate safeguards in accordance with the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.

Such safeguards may include contractual data protection clauses, adequacy assessments of the recipient country's data protection framework, and binding corporate rules where applicable. toto399 will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate protective measures.

14. Updates to This Privacy Policy

toto399 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the current version of the Privacy Policy took effect.

Where changes to this Privacy Policy are material, toto399 will notify registered players via the email address associated with their toto399 account or through a prominent notice on the toto399 platform. Your continued use of the toto399 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

toto399 encourages you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or toto399's handling of your personal data, please contact the toto399 Data Privacy Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the toto399 platform;
• Email: [email protected]

toto399 will acknowledge all privacy-related enquiries within two (2) business days and will endeavour to resolve complaints within thirty (30) calendar days, as required by the Philippine Data Privacy Act of 2012.

If you are not satisfied with toto399's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.