Your privacy matters. Learn how 2toto collects, uses, protects, and manages your personal information in accordance with international data protection standards.
Last Updated: January 15, 2026At 2toto, we are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our platform. By creating an account or using our services, you consent to the data practices described in this policy. We comply with international data protection standards and employ bank-grade security measures to protect your information.
This Privacy Policy applies to all users of the 2toto platform, accessible at https://2toto.cam and through any associated mobile applications or services. This policy describes our practices concerning the collection, use, disclosure, and protection of personal information provided by users during account registration, gameplay, financial transactions, and general platform usage.
2toto operates as an international online gaming platform serving Indonesian players and users from other jurisdictions where online gaming is legally permitted. We recognize the sensitivity of personal information and are committed to handling it responsibly in accordance with applicable data protection laws and international best practices. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement between you and 2toto.
As the data controller, 2toto determines the purposes and means of processing your personal data. We have implemented comprehensive technical and organizational measures to ensure the security of your information and to comply with our legal obligations regarding data protection. If you have any questions or concerns about how we handle your data, please contact our Data Protection Officer using the contact information provided at the end of this policy.
2toto collects various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver personalized gaming experiences. The information we collect falls into the following categories:
When you register an account with 2toto, you voluntarily provide the following personal information:
When you access and use the 2toto platform, we automatically collect certain technical and usage information:
In certain circumstances, we may receive information about you from third-party sources:
2toto uses the collected information for the following legitimate purposes:
Note: You can opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in emails. Transactional communications (account notifications, withdrawal confirmations, security alerts) cannot be opted out of as they are essential to account operation.
Under international data protection laws, we process your personal information based on the following legal grounds: (1) Contractual Necessity — processing is necessary to fulfill our contract with you (Terms & Conditions), including account management and service provision; (2) Legal Obligation — processing is required to comply with KYC, AML, age verification, and other regulatory requirements; (3) Legitimate Interests — processing is necessary for our legitimate business interests such as fraud prevention, platform security, and service improvement, balanced against your privacy rights; (4) Consent — for marketing communications and certain optional features, we obtain your explicit consent, which you can withdraw at any time.
2toto does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for the purposes described in this policy:
All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.
We may disclose your information to government authorities, law enforcement agencies, regulators, or courts when required by law or when we believe disclosure is necessary to:
If 2toto is involved in a merger, acquisition, asset sale, bankruptcy, or other corporate transaction, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.
We may share information with affiliated companies within our corporate group for administrative purposes, fraud prevention, and consolidated reporting. All affiliate companies are bound by the same privacy and security standards described in this policy.
We may share your information with other third parties when you provide explicit consent for specific purposes not covered above. You have the right to withdraw such consent at any time.
2toto implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:
While we implement robust security measures, you also play a crucial role in protecting your account:
Important: Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information using industry-standard methods, we cannot guarantee absolute security. You acknowledge that you provide information at your own risk.
2toto uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Understanding how we use these technologies helps you make informed choices about your privacy.
Cookies are small text files stored on your device by your web browser when you visit websites. They contain information that can be read by the website on subsequent visits. Cookies enable websites to remember your preferences, login status, and browsing history.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for platform functionality, account login, secure transactions, and session management. Without these cookies, you cannot use core services. | Session or up to 30 days |
| Performance Cookies | Collect anonymous information about how you use the platform, which pages are visited most, and any error messages. Help us improve platform performance. | Up to 2 years |
| Functionality Cookies | Remember your preferences such as language settings, preferred currency display, favorite games, and other customization choices. | Up to 1 year |
| Advertising Cookies | Track your browsing across websites to deliver relevant advertisements and measure campaign effectiveness. Used with your consent. | Up to 1 year |
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies will impair platform functionality and may prevent you from accessing certain features. To manage cookies:
Some cookies on the 2toto platform are set by third-party service providers (game providers, analytics tools, advertising networks). We do not control these third-party cookies. Review the privacy policies of these providers to understand their data practices.
As a 2toto user, you have the following rights regarding your personal information. We respect these rights and provide mechanisms to exercise them:
You have the right to request a copy of the personal information we hold about you. This includes account details, transaction history, gaming records, communication logs, and verification documents. To request access, contact our Data Protection Officer at the email address provided in Section 11. We will provide the information in a commonly used electronic format within 30 days of your request.
If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings (email, phone number, address). For changes requiring verification (name, date of birth), contact customer support with supporting documentation.
You may request deletion of your personal information under certain circumstances, including when the information is no longer necessary for the purposes it was collected, you withdraw consent on which processing is based, or you object to processing without overriding legitimate grounds. However, we may retain certain information when required by law (financial records for tax purposes, KYC documents for regulatory compliance) or to establish, exercise, or defend legal claims. Account closure does not automatically delete all data.
You can request that we limit how we use your personal information in certain situations, such as while we verify data accuracy following your rectification request or when you contest the lawfulness of processing. During restriction, we will store the data but not actively process it except with your consent or for legal purposes.
You have the right to receive your personal information in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. This right applies to information you provided to us with consent or for contract performance that is processed by automated means.
You can object to processing of your personal information based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will cease such processing immediately. For other objections, we will assess whether we have compelling legitimate grounds that override your interests, rights, and freedoms.
Where we process your information based on consent (such as marketing communications or certain optional features), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. To withdraw consent, adjust settings in your account preferences or contact customer support.
If you believe we have not adequately addressed your privacy concerns or handled your data in accordance with applicable laws, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction. For Indonesian residents, this may include the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika). We encourage you to contact us first so we can address your concerns directly.
To exercise any of the rights described above, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." Include your full name, registered email address, and a description of the right you wish to exercise. We may request additional information to verify your identity before processing requests involving access to or deletion of personal data. We will respond to all legitimate requests within 30 days. There is no fee for exercising your rights, but we may charge a reasonable administrative fee for excessive, repetitive, or manifestly unfounded requests.
2toto retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is used:
While your account remains active, we retain all personal information necessary to provide services, including identity documents, contact details, financial information, transaction history, and gaming records. This data is essential for account operation, compliance, and customer support.
When you close your account, we retain certain information for specific periods based on legal and regulatory requirements:
If your account or transactions are subject to legal proceedings, regulatory investigation, or suspected fraud, we may retain relevant data for longer periods until the matter is resolved, even if this exceeds standard retention periods.
After retention periods expire, we may anonymize personal data by removing all identifiers. Anonymized data cannot be traced back to you and is not subject to data protection laws. We may retain anonymized data indefinitely for statistical analysis, research, and business intelligence purposes.
2toto services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. Our age verification processes include:
If we discover that an individual under 21 has provided personal information or created an account, we will immediately close the account, void all bets, confiscate any winnings, and delete all associated personal data from our systems. Parents and guardians are encouraged to monitor their children's internet usage and use device-level parental controls to prevent access to gambling websites.
If you believe a minor has accessed 2toto services or provided personal information to us, please contact us immediately at [email protected] with the subject line "Underage Account Report." We will investigate promptly and take appropriate action.
2toto may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of significant changes through one or more of the following methods:
The "Last Updated" date at the top of this policy indicates when it was most recently revised. Material changes that significantly affect your rights will require your consent before taking effect. Your continued use of the platform after non-material changes are posted constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:
For general customer support inquiries not related to privacy or data protection, please use our 24/7 live chat service on the platform or contact [email protected] with a relevant subject line.
By using the 2toto platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. We are committed to protecting your privacy and handling your data with the highest standards of security and confidentiality.
Last Updated: January 15, 2026
Identity info (name, date of birth, KTP), contact details, financial info, gaming activity, device data, and verification documents for KYC compliance.
Account management, payment processing, fraud prevention, regulatory compliance, customer support, responsible gaming monitoring, and platform improvement.
256-bit SSL encryption, secure servers, access controls, regular security audits, PCI-DSS compliant payment processing, and employee training on data protection.
Payment processors (BCA, BRI, BNI, OVO, DANA), game providers, KYC services, legal authorities when required. We never sell your data to third parties.
Access your data, correct inaccuracies, request deletion, restrict processing, data portability, object to processing, withdraw consent, and lodge complaints.
Active account data retained while account is open. After closure: KYC docs 7 years, transactions 7 years, gaming records 5 years per regulatory requirements.
Our Data Protection Officer and customer support team are available to address any privacy concerns, data access requests, or questions about how we handle your personal information.
View FAQ Read Terms