Privacy Policy — 7toto

1.1 About This Policy. This Privacy Policy is published by 7toto (referred to as "7toto", "we", "our", or "us") and applies to all personal data collected from individuals ("you", "your", or "User") who access or use the 7toto platform at https://7toto.cam, including all associated mobile applications, customer support channels, and promotional communications.

1.2 Scope. This policy covers personal data collected from Users located in Indonesia as well as from any individual accessing the 7toto platform regardless of geographic location. It applies to all categories of data processing activities carried out by 7toto in connection with the delivery, improvement, and protection of our services.

1.3 Agreement. By registering an account with 7toto, placing a wager, or otherwise using the platform, you acknowledge that you have read this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any provision of this policy, you must cease using the platform immediately.

1.4 Relationship to Other Policies. This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy. Together, these documents constitute the full framework governing your relationship with 7toto.

2.1 Categories of Personal Data. 7toto collects the following categories of personal data from Users:

2.2 Special Category Data. 7toto does not intentionally collect or process special category data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, or health information) except where it is voluntarily provided by a User in the course of a support communication or responsible gaming self-assessment, in which case it is processed solely for the purpose for which it was provided.

3.1 Directly From You. The majority of personal data 7toto holds about you is provided directly by you at the time of:

• Creating a 7toto account (registration form);
• Completing identity verification (KYC submission);
• Making a deposit or requesting a withdrawal;
• Contacting customer support via live chat or email;
• Opting in to receive promotional communications;
• Submitting a responsible gaming self-assessment or exclusion request.

3.2 Automatically. When you access the 7toto platform, certain technical and behavioral data is collected automatically through cookies, web beacons, pixel tags, and server log files. This data is collected whether or not you are logged into an account. See Section 7 for full details of our cookie practices.

3.3 From Third Parties. 7toto may receive personal data about you from the following third-party sources:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, CIMB Niaga, BSI) — transaction confirmation and fraud signals;
• Identity verification providers — document authentication results and fraud database checks;
• Analytics providers — aggregated behavioral data to support platform improvement;
• Anti-fraud and AML screening services — watchlist and sanctions screening results.

4.1 Primary Uses. 7toto uses your personal data for the following primary purposes:

• Account creation and management — to register and maintain your 7toto account, verify your identity, and provide access to platform features;
• Payment processing — to facilitate deposits via local Indonesian banks and e-wallets and to process withdrawal requests accurately and securely;
• Regulatory compliance — to fulfill our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and age verification requirements;
• Platform security and fraud prevention — to detect, investigate, and prevent unauthorized account access, bonus abuse, match-fixing, and financial crime;
• Customer support — to respond to your queries, resolve disputes, and provide assistance with technical or account issues;
• Responsible gaming — to monitor betting patterns that may indicate problem gambling and to enforce deposit limits, cooling-off periods, or self-exclusion requests as appropriate;
• Legal and regulatory reporting — to respond to lawful requests from competent authorities where required.

4.2 Secondary Uses (with your consent). Where you have opted in, 7toto may use your contact data and behavioral data to:

• Send promotional communications about relevant offers, seasonal bonuses (e.g., Idul Fitri promotions, Ramadhan specials, BRI Liga 1 event offers), and platform updates;
• Personalize your platform experience by surfacing games, markets, and promotions re levant to your betting history and preferences;
• Conduct satisfaction surveys and user research to improve 7toto products and services.

You may withdraw consent for secondary use communications at any time by contacting support or using the unsubscribe link included in every marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5.1 Basis Summary. 7toto processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions you agreed to on registration (e.g., account management, payment processing, wager settlement);
• Legal obligation — processing required to comply with applicable AML, KYC, and fraud prevention obligations imposed on internationally licensed gaming operators;
• Legitimate interests — processing carried out to protect the security and integrity of the platform, prevent fraud, improve our services, and enforce our terms, where such interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications and optional personalization features, where you have given explicit consent that can be withdrawn at any time.

5.2 Withdrawal of Consent. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal requests should be submitted to [email protected].

6.1 No Sale of Personal Data. 7toto does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Any sharing of data described in this section is strictly limited to what is necessary to operate the platform and protect our Users.

6.2 Service Providers. 7toto shares personal data with carefully selected third-party service providers who process data on our behalf under data processing agreements that impose obligations equivalent to those in this policy. These providers include:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency network operators — solely for the purpose of processing financial transactions;
• Identity verification providers: for document authentication and KYC screening;
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — session metadata may be shared to support fair-game auditing and dispute resolution;
• Cloud infrastructure and hosting providers: for secure data storage and platform delivery;
• Analytics providers: for aggregated, pseudonymized platform performance analysis;
• Anti-fraud and AML screening vendors: for watchlist, sanctions, and politically exposed person (PEP) checks.

6.3 Legal Disclosure. 7toto may disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory demand. In such cases, 7toto will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected User where permitted by law.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of 7toto's business, personal data held about Users may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections. 7toto will notify affected Users of any such transfer and any material changes to data handling practices.

7.1 What Are Cookies. Cookies are small text files placed on your device by the 7toto platform when you visit the site. They allow us to recognize your device, remember your preferences, and gather analytical data about how the platform is used. Similar technologies, including web beacons, pixel tags, and local storage objects, serve comparable purposes.

7.2 Types of Cookies We Use.

7.3 Managing Cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core platform features, including logging in and placing wagers. Disabling analytics or targeting cookies will not affect your access to core platform functionality.

8.1 Retention Principles. 7toto retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or regulatory reporting obligations.

8.2 Standard Retention Periods.

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure to comply with AML and KYC record-keeping obligations;
• Transaction and wager records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread;
• KYC documentation: Retained for five (5) years from the date of verification or account closure, whichever is later;
• Marketing preferences and consent records: Retained for three (3) years from the date of last marketing interaction or until consent is withdrawn;
• Technical and log data: Retained for up to ninety (90) days for security and fraud investigation purposes, after which it is anonymized or deleted.

8.3 Extended Retention. Where personal data is required in connection with an ongoing legal dispute, regulatory investigation, or active responsible gaming restriction, 7toto will retain the relevant data for the duration of that matter and for a reasonable period thereafter.

8.4 Deletion. Upon expiry of applicable retention periods, personal data is securely deleted or anonymized such that it can no longer be associated with any identifiable individual. Anonymized data may be retained indefinitely for statistical and platform improvement purposes.

9.1 Technical Measures. 7toto employs a comprehensive set of technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption across all platform connections, ensuring that data transmitted between your device and 7toto's servers is fully encrypted at all times;
• At-rest encryption for all sensitive personal data and financial records stored in 7toto's database infrastructure;
• Multi-factor authentication (MFA) available for User accounts and enforced for all administrative access to production systems;
• Intrusion detection and prevention systems (IDPS) monitoring platform traffic for anomalous patterns in real time;
• Regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited;
• Web application firewall (WAF) protecting against common attack vectors including SQL injection, cross-site scripting (XSS), and DDoS attacks.

9.2 Organizational Measures. Access to personal data within 7toto's organization is strictly controlled on a need-to-know basis. All staff with access to User data are bound by confidentiality obligations and receive regular training on data protection practices. Access logs are maintained and reviewed regularly.

9.3 Breach Notification. In the event of a personal data breach that poses a material risk to your rights and interests, 7toto will notify affected Users as promptly as practicable via the registered email address on your account. The notification will describe the nature of the breach, the categories of data affected, and the steps 7toto has taken or is taking in response.

9.4 User Responsibility. While 7toto takes extensive measures to protect your data, account security also depends on your own actions. You are responsible for maintaining the confidentiality of your account credentials, using a strong and unique password, and logging out of your account on shared devices. If you suspect unauthorized access to your account, contact support immediately at [email protected].

10.1 Rights You Hold. As a User of the 7toto platform, you hold the following rights in respect of the personal data we process about you:

• Right of Access: You may request a copy of all personal data 7toto holds about you, together with information about how it is being processed;
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and KYC regulations;
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved;
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for personalization purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 Exercising Your Rights. To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". 7toto will respond within thirty (30) days of receiving a valid request. We may require identity verification before processing your request to protect against unauthorized disclosure.

10.3 Limitations. Please note that certain rights are subject to legal limitations. In particular, the right of erasure cannot override our legal obligation to retain KYC, AML, and transaction records for the minimum periods required by applicable regulations. Where we are unable to fulfill a request in full, we will explain the specific legal reason for the limitation.

11.1 Age Restriction. The 7toto platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, deposit funds, or place any wager on the 7toto platform.

11.2 Underage Account Detection. If 7toto discovers or has reasonable grounds to believe that a registered User is under 21 years of age, we will immediately suspend the account, initiate a full KYC review, and — where underage use is confirmed — close the account and return any unplayed funds to the payment source. All wager activity placed during the period of underage use will be voided.

11.3 Parental Controls. 7toto encourages all adults with children living in the same household to use appropriate parental control software to prevent minors from accessing gambling websites. We recommend exploring dedicated tools that allow parents and guardians to block gambling-related content at the network or device level.

11.4 Reporting Underage Use. If you have reason to believe that a minor is using the 7toto platform, please contact us immediately at [email protected] with the subject line "Underage Use Report". 7toto treats all such reports as high-priority and will investigate within 24 hours.

12.1 Right to Update. 7toto reserves the right to update, amend, or replace this Privacy Policy at any time. All updates will be published on this page with a revised "Last Updated" date at the top of the document. Where an update materially affects your rights or the way we process your data, we will notify you via your registered email address and/or via a prominent notice on the platform no less than fourteen (14) days before the change takes effect.

12.2 Continued Use. Your continued use of the 7toto platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

12.3 Version Archive. Previous versions of this Privacy Policy are archived and available upon written request to [email protected]. Please include "Privacy Policy Archive Request" in your subject line.

13.1 Privacy Inquiries. For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 7toto, please contact our support team through the following channels:

• Email: [email protected] — subject line: "Privacy Inquiry — [Your Account Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the in-platform chat widget
• Response Time: Email inquiries are typically answered within 24 hours; data rights requests within 30 calendar days

13.2 Language of Communication. 7toto's primary support language is English. However, native Indonesian-speaking agents are available around the clock to assist Users in Bahasa Indonesia for account and support queries. All formal privacy correspondence and legal notices must be submitted in English for the avoidance of ambiguity; the English text shall prevail in any dispute.