Privacy Policy

1. Introduction

too288 ("we", "us", "our") operates the online betting platform accessible at https://too288.cam, providing sports betting, live casino games, togel (lottery), slot gacor (slot games), and other gaming services to users in Indonesia. We recognize that privacy is a fundamental right, and we are committed to protecting the personal information you provide to us.

This Privacy Policy applies to all personal data we collect through our website, mobile applications, customer support channels, and any other digital touchpoints. By creating an account with too288 or using our services, you consent to the collection and use of your personal information as described in this policy. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of our services immediately.

This policy should be read in conjunction with our Terms & Conditions, which govern your overall use of too288 services. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Information We Collect

too288 collects various types of personal information necessary to provide our services, comply with legal obligations, and improve your user experience. The categories of information we collect include:

2.1 Personal Identification Information

When you register an account with too288, we collect the following personal details:

• Full legal name as it appears on your government-issued identification documents
• Date of birth to verify you meet the minimum age requirement of 21 years
• Residential address including city, postal code, and region within Indonesia
• Email address for account communications and service notifications
• Mobile phone number for account verification and two-factor authentication
• Government-issued ID such as Indonesian KTP (Kartu Tanda Penduduk) or passport for KYC (Know Your Customer) verification
• Photograph of yourself holding your ID document for enhanced identity verification when required

2.2 Financial Information

To process deposits and withdrawals, we collect:

• Bank account details including bank name (BCA, BRI, BNI, Mandiri, etc.), account number, and account holder name
• E-wallet information for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts
• Transaction history including deposit amounts, withdrawal requests, and timestamps
• Payment method verification documents such as bank statements or e-wallet screenshots to confirm account ownership

2.3 Betting and Gaming Activity

We automatically record data related to your use of too288 services:

• Betting history including sports bets placed, togel numbers selected, slot spins, live casino sessions, and sabung ayam wagers
• Game preferences such as favorite sports, teams, casino games, and betting patterns
• Win/loss records and account balance changes over time
• Bonus claims and wagering including promotional code usage and wagering requirement progress
• Session duration and frequency of platform visits

2.4 Technical and Device Information

When you access too288, we automatically collect technical data:

• IP address and geolocation data to verify you are accessing our services from within Indonesia
• Device information including device type (smartphone, tablet, computer), operating system (Android, iOS, Windows), browser type, and screen resolution
• Connection data such as internet service provider and connection speed
• Log files recording your interactions with our website, including pages visited, features used, errors encountered, and timestamps

2.5 Communications

We retain records of all communications between you and too288:

• Customer support interactions via live chat, email, or any other support channels
• Marketing preferences and consent records for promotional communications
• Feedback and survey responses when you participate in user research or satisfaction surveys

3. How We Use Your Personal Data

too288 processes your personal information for the following legitimate purposes:

3.1 Service Provision

• To create and manage your player account
• To process deposits, withdrawals, and financial transactions
• To enable you to place bets on sports, play casino games, participate in togel draws, and access all too288 gaming products
• To calculate and credit winnings to your account
• To administer bonuses, promotions, and loyalty rewards

3.2 Legal and Regulatory Compliance

• To verify your identity and age (21+ requirement) through KYC procedures
• To comply with anti-money laundering (AML) regulations and prevent financial crime
• To detect and prevent fraud, bonus abuse, and account manipulation
• To maintain records as required by Indonesian law and international gaming standards
• To respond to legal requests from law enforcement or regulatory authorities

3.3 Security and Platform Integrity

• To protect your account from unauthorized access through security measures like two-factor authentication
• To detect suspicious activity, collusion, or cheating
• To prevent underage gambling and self-excluded individuals from accessing our services
• To maintain fair gaming environments and enforce our Terms & Conditions

3.4 Communication and Customer Support

• To send you account-related notifications such as deposit confirmations, withdrawal approvals, and security alerts
• To provide customer support and resolve inquiries or disputes
• To send marketing communications about promotions, new games, and special offers (only with your consent, and you may opt out at any time)
• To notify you of important policy changes or service updates

3.5 Platform Improvement and Personalization

• To analyze user behavior and preferences to improve our website, mobile apps, and game offerings
• To personalize your experience by recommending games, odds, or features based on your interests
• To conduct market research and gather feedback to enhance our services
• To develop new features and gaming products tailored to Indonesian players

4. Data Sharing and Disclosure

too288 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist in delivering our services. These include:

• Payment processors (Indonesian banks, e-wallet providers) to facilitate deposits and withdrawals
• Identity verification services to conduct KYC checks and age verification
• Game providers who supply casino games, slots, and live dealer platforms
• Cloud hosting providers for secure data storage and platform infrastructure
• Customer support platforms to manage live chat and email communications
• Analytics services to understand user behavior and improve platform performance

All third-party service providers are contractually obligated to process your data only for specified purposes, maintain confidentiality, and implement appropriate security measures. They are prohibited from using your data for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Respond to lawful requests from law enforcement agencies investigating criminal activity
• Cooperate with regulatory authorities overseeing online gaming operations
• Protect the rights, property, or safety of too288, our users, or the public
• Enforce our Terms & Conditions and investigate violations

4.3 Business Transfers

In the event that too288 undergoes a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

In situations not covered above, we will seek your explicit consent before sharing your personal information with any third party.

5. Data Security Measures

too288 employs industry-leading security technologies and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption, the same standard used by banks and financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in protected data centers with restricted physical access, 24/7 monitoring, and redundant backups.
• Access Controls: Only authorized too288 personnel with legitimate business needs can access personal data, and all access is logged and audited regularly.
• Two-Factor Authentication (2FA): We offer optional 2FA for user accounts, adding an extra layer of security beyond passwords.
• Regular Security Audits: We conduct periodic internal audits and engage third-party security experts to test our systems for vulnerabilities.
• Employee Training: All too288 staff members receive regular training on data protection principles and are bound by confidentiality agreements.
• Incident Response: We maintain a data breach response plan to quickly identify, contain, and mitigate any security incidents. In the event of a breach affecting your data, we will notify you promptly as required by law.

While we implement robust security measures, no system is completely impenetrable. You also play a critical role in protecting your account by choosing a strong password, enabling 2FA, and never sharing your login credentials with anyone. If you suspect unauthorized access to your account, contact our support team immediately.

6. Cookies and Tracking Technologies

too288 uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content. A cookie is a small text file stored on your device that allows our website to recognize you on subsequent visits.

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for basic website functionality such as login sessions, account management, and secure transactions. These cannot be disabled without affecting core services.
• Performance Cookies: Collect anonymous data about how users interact with our website, including pages visited, time spent, and errors encountered. This helps us improve platform performance.
• Functional Cookies: Remember your preferences such as language selection, display settings, and favorite games to provide a more personalized experience.
• Advertising Cookies: Track your browsing activity to deliver targeted promotions and measure the effectiveness of marketing campaigns. These are only used with your consent.

6.2 Managing Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, although this may affect website functionality. Disabling essential cookies may prevent you from logging in or placing bets. To manage cookies, access your browser's settings menu (available in Chrome, Firefox, Safari, and other major browsers).

We also use third-party analytics services such as Google Analytics to understand user behavior. These services may set their own cookies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

7. Your Privacy Rights

As a too288 user, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of all personal information we hold about you. We will provide this in a commonly used electronic format.
• Right to Rectification: If any of your personal details are inaccurate or incomplete, you can update them through your account settings or contact customer support to make corrections.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements. Note that closing your account will result in the deletion of most personal data after mandatory retention periods expire.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances, such as if you dispute the accuracy of the information.
• Right to Data Portability: You can request that we transfer your personal data to another service provider in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing of your data for marketing purposes or based on legitimate interests. You can opt out of marketing emails by clicking the unsubscribe link in any promotional message.
• Right to Withdraw Consent: Where we process your data based on consent (such as for marketing), you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to your request within 30 days. Verification of your identity will be required before we can process certain requests to protect against unauthorized data disclosure.

8. Data Retention

too288 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. Specific retention periods include:

• Active Accounts: Data is retained for the duration of your account activity and for a reasonable period afterward to handle any disputes or inquiries.
• Closed Accounts: Following voluntary account closure, most personal data is deleted within 90 days, except for information we are legally required to retain.
• Transaction Records: Financial transaction data, betting history, and KYC documents are retained for a minimum of 5 years from the date of the last transaction to comply with anti-money laundering regulations and tax laws.
• Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference to ensure we do not contact you again.

After retention periods expire, we securely delete or anonymize your personal data so that it can no longer be associated with you.

9. Children's Privacy

too288 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. Our registration process includes age verification checks, and we require government-issued ID to confirm age before approving accounts.

If we become aware that a user is under 21, we will immediately suspend the account, void any bets or winnings, and delete all associated personal data. If you believe a minor has created an account on too288, please contact us immediately at [email protected] so we can take appropriate action.

10. Changes to This Privacy Policy

too288 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on our website homepage
• Sending an email to your registered email address
• Displaying a notification when you log in to your account

The "Effective Date" at the top of this document indicates when the policy was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of too288 services after changes become effective constitutes acceptance of the revised policy.

11. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or how too288 handles your personal data, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: Privacy Inquiry or Data Protection Request
• Live Chat: Available 24/7 via the website for immediate assistance

We take all privacy inquiries seriously and will investigate your concerns promptly. You can expect a response within 5 business days for general inquiries and within 30 days for formal data subject rights requests.