Privacy Policy
Toto33 Online Casino

01 Introduction

Toto33 ("toto33," "we," "us," or "our") is committed to protecting the privacy and personal data of all registered players and visitors to the toto33 Platform. This Privacy Policy ("Policy") describes how toto33 collects, uses, stores, discloses, and protects personal information in connection with the operation of the toto33 online casino platform, which is designed and operated specifically for the Philippine market.

This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. It also reflects applicable requirements under PAGCOR regulations governing online gaming operators serving Filipino players.

This Privacy Policy should be read alongside the toto33 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and toto33.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, toto33 acts as the personal information controller in respect of all personal data collected through the toto33 Platform. This means that toto33 determines the purposes and means by which your personal data is processed.

Where toto33 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or cloud hosting services — those parties act as personal information processors and are contractually bound to process your data only in accordance with toto33's instructions and this Policy.

If you have any questions or concerns about how toto33 handles your personal data, you may contact our designated Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

03 Data We Collect

Toto33 collects the following categories of personal data from players and Platform visitors:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued ID number (e.g., Philippine passport, SSS, UMID, or driver's license)
• Username and encrypted password

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (including barangay, city, province, and ZIP code)

3.3 Financial Data

• GCash or PayMaya account details (mobile number linked to the e-wallet)
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number)
• Transaction history, including deposits, withdrawals, and wager records
• Account balance information

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the toto33 Platform
• Login timestamps and access logs

3.5 Communications Data

• Records of correspondence with toto33 customer support
• Feedback, complaints, and dispute records
• Marketing preferences and communication opt-in/opt-out status

04 How We Collect Data

Toto33 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions on the toto33 Platform.
• Automated collection: Technical and usage data collected automatically when you access or interact with the toto33 website or mobile application, including through cookies, web beacons, and server logs.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (such as GCash and PayMaya), and fraud prevention services, where permitted by applicable Philippine law.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

05 Purposes of Processing

Toto33 processes your personal data for the following purposes:

• Account registration and management: To create and maintain your toto33 player account, verify your identity, and manage your account settings.
• Age verification: To confirm that you meet the minimum age requirement of 21 years as required under Philippine law and PAGCOR regulations.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso (₱).
• Regulatory compliance: To comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and PAGCOR licensing requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the toto33 Platform.
• Customer support: To respond to your inquiries, complaints, and support requests in a timely and effective manner.
• Responsible gaming: To monitor gameplay patterns and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion, in accordance with our Responsible Gaming Policy.
• Platform improvement: To analyze usage data and improve the features, performance, and user experience of the toto33 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications.

06 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, toto33 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and toto33, including account management, payment processing, and gameplay facilitation.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC, anti-money laundering, and PAGCOR compliance obligations.
• Legitimate interests: Processing necessary for toto33's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to marketing communications and optional data collection. You may withdraw your consent at any time by contacting toto33 support.

07 Data Sharing & Disclosure

Toto33 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR and anti-money laundering requirements.
• Fraud prevention and security services: Providers that assist toto33 in detecting and preventing fraudulent activity on the Platform.
• Cloud hosting and IT infrastructure providers: Service providers that host and maintain the toto33 Platform and its underlying systems.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory obligation.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by toto33, subject to confidentiality obligations.

08 Data Retention

Toto33 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

• Active account data: Retained for the duration of your toto33 account and for a period of at least five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under RA 9160.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC documents: Retained for the period required by PAGCOR and AMLC regulations, typically five (5) years from the end of the business relationship.
• Support and communications records: Retained for up to three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing data: Retained until you withdraw your consent or opt out of marketing communications, whichever is earlier.

Upon expiry of the applicable retention period, toto33 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

09 Data Security

Toto33 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the toto33 Platform
• Encryption of sensitive data at rest, including financial information and government ID details
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing of the toto33 Platform
• Multi-factor authentication options for player accounts
• Secure, access-controlled data centers for hosting toto33 Platform infrastructure
• Staff training on data protection obligations and information security best practices

While toto33 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, toto33 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

10 Cookies & Tracking Technologies

The toto33 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and collect analytical data about Platform usage. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the operation of the toto33 Platform, including session management, login authentication, and security functions. These cannot be disabled.
• Functional cookies: Used to remember your preferences and settings on the toto33 Platform, such as language preferences and display options.
• Analytical cookies: Used to collect anonymized data about how players use the toto33 Platform, helping us identify areas for improvement. This data does not identify you personally.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of toto33 marketing campaigns, where you have provided consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the toto33 Platform. For strictly necessary cookies, no consent is required as they are essential to Platform operation.

11 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by toto33:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed by toto33, as set out in this Policy.
• Right of access: The right to request a copy of the personal data that toto33 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data that toto33 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to toto33's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on toto33's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that toto33 has processed your personal data in violation of the Data Privacy Act of 2012.

12 Minors

The toto33 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing casino-style gambling. Toto33 does not knowingly collect personal data from individuals under the age of 21.

If toto33 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with applicable PAGCOR regulations.

If you are a parent or guardian and believe that your child has registered on the toto33 Platform, please contact us immediately using the details in Section 15 so that we can take appropriate action.

13 International Data Transfers

Toto33 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services.

Where such transfers occur, toto33 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under the Philippine Data Privacy Act of 2012. Toto33 will not transfer your personal data to countries or organizations that do not provide adequate data protection standards.

14 Changes to This Policy

Toto33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision will always be indicated at the top of this document.

When material changes are made to this Policy, toto33 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the toto33 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how toto33 is protecting your personal data.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way toto33 handles your personal data, please contact our Data Protection Officer:

Data Protection Officer — toto33
Email: [email protected]

For general support inquiries, you may also reach our customer support team at: [email protected]

Toto33 aims to respond to all privacy-related inquiries within fifteen (15) business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.