Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by tol777 ("we", "us", "our", "the Platform") and applies to all personal data processed in connection with the tol777 website accessible at https://tol777.cam, including all sub-domains, mobile interfaces, and related services (collectively, "the Platform").

This Policy governs how tol777 handles the personal data of all registered Members, prospective registrants, and visitors to the Platform. It should be read in conjunction with our Terms & Conditions, which are incorporated by reference.

By accessing the Platform, creating an account, or making a deposit, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform immediately.

tol777 primarily serves players located in Indonesia. All references to regulatory obligations and player protections in this Policy are framed with Indonesian players in mind, while acknowledging that tol777 operates as an internationally licensed offshore gaming platform.

2. Data Controller

tol777 acts as the data controller for all personal information collected through this Platform. As data controller, tol777 determines the purposes for which your personal data is processed and the means by which it is processed.

Our designated Data Protection contact is reachable via the email address listed in Section 16 (Contact & Complaints) of this Policy. You may direct any data-related inquiry, access request, or complaint to that contact point.

3. Data We Collect

tol777 collects the minimum personal data necessary to deliver a safe, legally compliant, and high-quality gaming experience. The categories of personal data we may collect include:

3.1 Identity Data

Full legal name, date of birth, Indonesian National Identity Card (KTP Nasional) number, and a photograph of your identity document as required for KYC verification.

3.2 Contact Data

Email address, mobile phone number, and residential address. These are used for account communication, withdrawal processing, and identity verification.

3.3 Financial Data

Bank account details (account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Danamon, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, deposit and withdrawal history, and bonus credit records.

3.4 Technical Data

IP address, device identifiers, browser type and version, operating system, screen resolution, session timestamps, referring URLs, and pages visited within the Platform.

3.5 Gaming Activity Data

Bet history, game preferences, wager amounts, win/loss records, bonus usage patterns, and session duration logs across all product verticals including sports betting, live casino, and togel (Indonesia's traditional numbers lottery) markets.

3.6 Communications Data

Records of your interactions with our customer support team via live chat, email, or any other channel — including support tickets, complaint records, and chat transcripts.

3.7 Verification Media

Photographs, selfie verification images, or video recordings submitted as part of the KYC process or in response to a specific security review request.

4. How We Collect Data

tol777 collects personal data through the following channels and mechanisms:

• Direct submission: Information you voluntarily provide during account registration, KYC submission, deposit/withdrawal requests, support interactions, and promotional opt-ins.
• Automated collection: Technical data gathered automatically when you access the Platform — including IP logging, session tracking, and browser fingerprinting — via our server infrastructure and analytics tools.
• Cookies and similar technologies: First-party cookies and tracking pixels placed on your device when you browse the Platform. See Section 11 (Cookies & Tracking) for full details.
• Third-party payment processors: Transaction confirmation data and limited identity signals returned by your bank or e-wallet provider whe n processing deposits or withdrawals.
• Game providers: Aggregated session and outcome data returned by third-party game studios to facilitate bet settlement and dispute resolution.
• Fraud and security services: Risk signals and device reputation data from integrated fraud-prevention partners used to protect the integrity of the Platform.

5. Purposes of Processing

tol777 processes your personal data for the following specific purposes:

5.1 Account Management

To create, maintain, and operate your tol777 Member Account, including authenticating your identity at login, managing your balance, and recording your gaming history.

5.2 Payment Processing

To process deposits from and withdrawals to your designated bank account or e-wallet, verify that payment methods are registered in your name, and maintain accurate transaction records across all supported channels including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.

5.3 Identity Verification (KYC)

To verify your identity, age (minimum 21 years), and residential status in compliance with our anti-money laundering (AML) and know-your-customer (KYC) obligations prior to processing withdrawals and for ongoing account monitoring.

5.4 Legal and Regulatory Compliance

To comply with applicable anti-money laundering legislation, fraud prevention requirements, and any lawful request from a competent authority or court order. tol777 may be legally required to retain certain transaction and identity records for specified minimum periods.

5.5 Platform Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, money laundering, and other activities that violate our Terms & Conditions or applicable law. This includes automated risk-scoring and real-time monitoring of account activity.

5.6 Customer Support

To respond to your inquiries, resolve complaints, and provide 24/7 Indonesian-speaking support via live chat and email. Support interactions are recorded and retained for quality assurance and dispute resolution purposes.

5.7 Responsible Gaming

To monitor gaming patterns and enforce self-exclusion requests, deposit limits, time-out periods, and other responsible gaming measures you have activated. Behavioral data may also be used to proactively identify signs of problem gambling in line with our duty of care obligations.

5.8 Service Improvement

To analyze aggregated, de-identified usage data for the purpose of improving Platform performance, user experience, product offerings, and technical infrastructure. Individual player data is not used for this purpose without de-identification.

5.9 Marketing Communications

Where you have explicitly opted in, to send you promotional offers, bonus notifications, and relevant gaming updates by email or SMS. You may withdraw marketing consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing message.

6. Legal Basis for Processing

tol777 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Member Account agreement — including account operation, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with AML, fraud prevention, and record-keeping obligations imposed by applicable law or regulatory authority.
• Legitimate interests: Processing necessary for our legitimate business interests, including Platform security, fraud prevention, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing

tol777 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent strictly necessary:

7.1 Payment Service Providers

Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial and identity data required to process your transactions securely.

7.2 Game Content Providers

Third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session identifiers and wager data necessary to deliver their games and settle outcomes. These providers are contractually prohibited from using your data for any purpose other than game delivery.

7.3 Technology and Infrastructure Providers

Cloud hosting, content delivery network (CDN), and cybersecurity providers who process data on tol777's behalf under strict data processing agreements and are not permitted to use your data independently.

7.4 Fraud Prevention and AML Partners

Specialized risk management and identity verification services engaged to assist with KYC checks, fraud screening, and AML monitoring. These partners act as data processors under tol777's instruction.

7.5 Legal and Regulatory Authorities

Where required by a valid court order, subpoena, or lawful request from a competent governmental or regulatory authority, tol777 may disclose personal data to the extent legally mandated. We will, where legally permissible, notify affected Members of such disclosure.

8. International Transfers

As an internationally operated offshore gaming platform, tol777 may transfer your personal data to servers and service providers located outside Indonesia. Where such transfers occur, we implement appropriate safeguards to ensure your data receives a level of protection equivalent to that afforded within Indonesia, including:

• Contractual clauses with recipient entities requiring data protection standards consistent with international best practices
• Transfers only to jurisdictions or organizations that have been assessed as providing adequate data protection
• Technical security measures (encryption, access controls) applied regardless of where data is stored or processed

By registering a tol777 Account, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

9. Data Retention

tol777 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

10. Security Measures

tol777 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your device and tol777's servers
• Encryption at rest for all sensitive personal and financial data stored in our databases
• Two-factor authentication (2FA) available on all Member Accounts to protect against unauthorized login
• Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis
• 24/7 security monitoring including intrusion detection systems and automated anomaly alerting
• Regular penetration testing and third-party security audits of our platform infrastructure
• Secure data disposal procedures for physical media and digital records at end of retention period

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tol777 will notify affected Members without undue delay via their registered email address, and will take all reasonable steps to contain and remediate the breach.

11. Cookies & Tracking Technologies

tol777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The categories of cookies we deploy are:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. No personal data is shared with third parties via these cookies.

11.2 Functional Cookies

These cookies remember your preferences — such as your preferred language settings and display options — to provide a more personalized experience during your session.

11.3 Analytics Cookies

We use first-party analytics tools to understand how Members navigate the Platform, which pages are most visited, and where technical issues may arise. This data is aggregated and does not identify individual users.

11.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account. Instructions for managing cookies are available in your browser's help documentation.

12. Your Rights

tol777 respects your rights with regard to your personal data. Subject to applicable law and certain limitations, you may exercise the following rights at any time by contacting our support team:

13. Minors

The tol777 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a minor, that Account will be immediately closed, all data will be deleted, and any associated funds will be handled in accordance with our Terms & Conditions.

If you believe that a minor has registered an Account or provided personal data to tol777, please notify us immediately at [email protected] so we can take prompt action.

14. Third-Party Services

The tol777 Platform integrates third-party game content, payment infrastructure, and technology services. These third-party providers operate their own independent privacy policies and tol777 is not responsible for their data practices beyond the contractual obligations we impose upon them as described in Section 7. We encourage you to review the privacy policies of any third-party provider whose services you access through the tol777 Platform.

The tol777 Platform does not contain links to external websites. No outbound links to unaffiliated third-party sites are present on this Platform, so the risk of inadvertent data disclosure via external link-following is minimized.

15. Policy Amendments

tol777 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated "Last Updated" date at the top. Where changes materially affect your rights or our data practices, we will endeavor to notify you via your registered email address in advance of the change taking effect.

Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed of how tol777 protects your personal data.

16. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or tol777's data practices, please contact our Data Protection contact through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Policy Inquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the Platform homepage, with Indonesian-speaking agents on hand
• Response time: Initial response within 24 hours; full resolution of data rights requests within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to a relevant data protection supervisory authority or to pursue resolution through arbitration as described in our Terms & Conditions.