Privacy Policy and Data Protection

Identification and contact details

When you register with ToTo Casino, we collect data such as your full name, date of birth, address details, and email address. The date of birth is a legal requirement to verify that you meet the minimum age of 18. This data is essential for creating your account and maintaining a communication channel for support and updates.

Usage and device data

We automatically record technical information about your interaction with our platform. This includes your IP address, browser type, operating system, unique device identifiers, and navigation patterns. This data helps us ensure the technical integrity of our systems, detect fraud, and optimize the user interface of ToTo Casino for various devices.

Transaction data

As part of our services, we record data about your transactions on the platform. Although we do not directly store full financial details such as credit card numbers on our servers, we do record the status of payments and payouts to comply with our administrative obligations and to resolve any technical disputes.

ToTo Casino processes your data based on the following legal grounds:

• Performance of a contract: To provide you with the requested services.
• Legal obligation: To comply with regulations regarding age verification and fraud prevention.
• Legitimate interest: For the security of our systems and the improvement of our website performance.
• Consent: When you explicitly give consent for optional activities, such as marketing communication.

Your information is used by ToTo Casino for the following purposes:

• Facilitating account management and identity verification.
• Providing customer service and technical support.
• Analyzing aggregated data to improve our services in the Netherlands.
• Enforcing our Terms and Conditions and preventing abuse.
• Sending important administrative notifications regarding your account.

We do not retain your personal data longer than is strictly necessary for the purposes for which it was collected, unless a longer retention period is legally required by the Dutch government. When data is no longer needed for our operational processes, it is securely deleted or irreversibly anonymized.

ToTo Casino does not sell or rent your personal data to third parties for commercial purposes. However, we may share your data with trusted service providers who perform technical services on our behalf, such as hosting, data analysis, and fraud prevention. These parties are contractually obligated to protect your data and may only process it according to our strict instructions. Additionally, data may be provided to competent authorities if we are legally obliged to do so.

Although ToTo Casino focuses on the Dutch market, some of our technical partners may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards, such as the European Commission's standard contractual clauses, to guarantee a level of protection equivalent to GDPR standards.

We have implemented extensive physical, organizational, and electronic security measures to protect your data. This includes the use of SSL encryption for data transfer, firewalls, and strict access controls for our employees. While we make reasonable efforts, we cannot guarantee the absolute security of data transfer over the internet; we encourage users to also be vigilant with their login credentials.

Under the GDPR, you have various rights regarding your personal data at ToTo Casino:

• Right of access: You can request a copy of the data we hold about you.
• Right to rectification: You can have inaccurate or incomplete data updated.
• Right to erasure: Under certain conditions, you can request the deletion of your data.
• Right to object: You can object to certain forms of processing based on legitimate interest.
• Right to data portability: You can request to receive your data in a structured format.

To exercise your rights or for questions about this Privacy Policy, please contact our data protection officer via: [email protected]. We aim to respond to your request within the legal timeframes.

This Privacy Policy may be changed from time to time to comply with new regulations or technological developments. Any changes will be published on this page. We recommend that you consult this policy regularly to stay informed about our privacy practices.