At 67toto, your privacy is not an afterthought. This Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have over it.
Last Updated: 1 January 2026The following terms have the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can identify a natural person — directly or indirectly — including name, email address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, 67toto and its operating company. |
| "Data Processor" | A third party that processes personal data on behalf of 67toto under a written data processing agreement. |
| "Platform" | The 67toto online betting and casino platform accessible at 67toto.onl and all associated sub-domains and interfaces. |
| "You" / "Player" | Any individual who registers for, accesses, or uses the 67toto platform. |
| "KYC" | Know Your Customer — the identity and document verification process required by our compliance obligations. |
| "Cookies" | Small text files placed on your device by the 67toto platform or authorised third-party services to store session and preference information. |
67toto acts as the Data Controller for all personal data collected through the platform. As Data Controller, we determine why and how your personal data is processed, and we are responsible for ensuring that such processing complies with applicable data protection laws and principles.
For all privacy-related inquiries, requests, or complaints, please contact our designated privacy team at support@67toto.onl. We aim to acknowledge all privacy requests within 48 hours and to respond substantively within 30 calendar days.
67toto collects the following categories of personal data depending on how you interact with the platform:
67toto collects personal data through the following channels:
We process your personal data only where we have a clear lawful basis for doing so. The table below maps each processing purpose to its legal basis:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of a contract (your Account Agreement with 67toto) |
| Identity verification (KYC) and age verification | Legal obligation and legitimate interest (responsible gaming compliance) |
| Processing deposits and withdrawals | Performance of a contract |
| Fraud detection and anti-money laundering checks | Legal obligation and legitimate interest |
| Responsible gaming monitoring and intervention | Legal obligation and legitimate interest (player protection) |
| Customer support communication | Performance of a contract and legitimate interest |
| Sending transactional notifications (deposit confirmations, security alerts) | Performance of a contract and legitimate interest |
| Sending promotional emails and SMS (bonuses, offers) | Consent (you may withdraw consent at any time) |
| Platform analytics and performance optimisation | Legitimate interest (improving the platform experience for all players) |
| Legal dispute resolution and regulatory reporting | Legal obligation and legitimate interest |
67toto does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following controlled circumstances:
We engage carefully selected third-party service providers who process data on our behalf under written data processing agreements that bind them to confidentiality and security obligations consistent with this Policy. These include:
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the rights, property, or safety of 67toto, its players, or the public.
In the event of a merger, acquisition, or sale of all or part of 67toto's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy in advance.
As a globally operated platform, some of 67toto's service providers — including cloud hosting infrastructure and game studios — are located outside Indonesia. When we transfer your personal data to recipients in other countries, we ensure that appropriate safeguards are in place, including:
If you would like further information about the international transfer safeguards in place for a specific category of your data, please contact us at support@67toto.onl.
67toto retains personal data only for as long as necessary for the purposes for which it was collected, and for as long as required to comply with applicable legal, regulatory, and operational obligations. The retention periods below apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account + 5 years after account closure |
| KYC documents (KTP copies, facial verification) | Duration of account + 5 years after account closure |
| Financial transaction records | Duration of account + 5 years after account closure (regulatory minimum) |
| Customer support transcripts | 5 years from the date of the conversation |
| Betting and gameplay history | Duration of account + 5 years after account closure |
| Marketing preference records | Until consent is withdrawn, then 1 year to evidence withdrawal |
| Session logs and IP records | 12 months from the date of the session |
| Responsible gaming records (limits, exclusions) | Duration of account + 5 years after account closure |
After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.
The 67toto platform uses cookies and similar tracking technologies including web beacons and local storage objects. These technologies serve the following purposes:
You can control non-essential cookies through the cookie preference settings available within the platform. Most modern browsers also allow you to block or delete cookies at the browser level; however, doing so may affect the functionality of the 67toto platform. For detailed instructions on managing cookies in your browser, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, or the default browser on your Android device).
67toto recognises and respects Do Not Track (DNT) browser signals. When a DNT signal is detected, we disable all non-essential tracking technologies for that session. Essential security and session cookies continue to operate regardless of DNT status as they are required for the platform to function.
67toto implements a layered approach to data security. The following technical and organisational measures are in place to protect your personal data:
Subject to applicable law and any overriding regulatory obligations, you have the following rights with respect to your personal data held by 67toto:
Request a copy of all personal data we hold about you, along with information on how it is processed.
Request correction of inaccurate or incomplete personal data. Minor details can be updated directly in your account settings.
Request deletion of your personal data where retention is no longer necessary — subject to regulatory minimum retention obligations.
Request that we restrict the processing of your data in specific circumstances, e.g., while a disputed accuracy issue is resolved.
Receive a copy of your data in a structured, machine-readable format where technically feasible, and transfer it to another provider.
Object to processing based on legitimate interest, including profiling for marketing purposes. You can opt out of marketing communications at any time.
To exercise any of these rights, submit your request to support@67toto.onl with the subject line "Privacy Rights Request" and include your registered email address for identity verification. We will respond within 30 calendar days. Complex requests may require up to a further 60 days, in which case we will notify you of the extension.
The 67toto platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in our KYC process, and any account found to belong to an individual under 21 is closed immediately with all associated data flagged for review per our responsible gaming obligations.
If you believe that a person under 21 has registered an account on the 67toto platform, please notify us immediately at support@67toto.onl. We will investigate and take appropriate action without delay.
The 67toto platform may reference third-party services — such as payment providers like BCA Mobile or OVO — in informational content. This Privacy Policy applies solely to personal data processed by 67toto. Any third-party service you access — including your bank's mobile banking application, e-wallet app, or game studio website — is governed by that party's own privacy policy. 67toto is not responsible for the privacy practices of third parties.
67toto may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. Material changes — defined as changes that significantly affect your rights or how your data is used — will be communicated to registered players by email to the address on file no less than 7 days before the updated Policy takes effect.
Non-material updates (e.g., clarifying language, correcting typographical errors) may be published without advance notice. The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the platform following the effective date of any update constitutes acceptance of the revised Policy.
For any question, concern, or formal request relating to this Privacy Policy or to your personal data, please reach out to the 67toto privacy team through the following channels:
If you are not satisfied with our response to a privacy complaint, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.
Six core pillars that define our approach to handling your personal data responsibly.
Every connection between your device and 67toto is protected by TLS 1.2+ encryption. Your login credentials, KYC documents, and payment details travel over an encrypted channel that is practically impossible to intercept.
Identity verification is not just a formality at 67toto — it is a genuine safeguard for every player. KYC ensures that your account, your funds, and your identity are protected against unauthorised use and fraudulent activity by third parties.
67toto's business model is built on providing a great betting and casino experience — not on monetising player data. Your personal information is never sold, rented, or traded to advertising networks, data brokers, or any third party for their own commercial use.
Access, correct, download, or request deletion of your personal data at any time by contacting our privacy team. Marketing preferences can be updated directly within your account settings with immediate effect — no waiting period, no friction.
We do not hold your data indefinitely. Each category of personal data is subject to a defined retention schedule. Once the retention period expires, data is securely deleted or irreversibly anonymised — you can find the full schedule in Section 8 of this Policy.
Privacy questions and data access requests can be submitted via live chat at any hour. Our support team includes native Indonesian-speaking agents available around the clock — so whether you are in Jakarta, Surabaya, Bali, or Medan, help is always within reach.
Your data is protected. Your identity is verified. Your transactions are secured. Now it's time to enjoy everything 67toto has to offer — from live sportsbook action on BRI Liga1 and the EPL, to hundreds of slots and live dealer tables. Register today and make your first deposit via BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay. Adults only — 21+ strictly enforced.