Privacy Policy

1. Introduction

At to3030, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use our gaming platform at https://to3030.cam (the "Platform").

This Privacy Policy applies to all users who register an account, visit our website, or use our services. By accessing or using to3030, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

We recognize that privacy is a fundamental right, and we have designed our data processing practices to comply with international data protection standards, including principles outlined in the General Data Protection Regulation (GDPR) and other applicable privacy laws, adapted to our operational context as an international gaming platform serving Indonesian players.

2. Data Controller

For the purposes of data protection laws, to3030 operates as the data controller for all personal information collected through the Platform. This means we determine the purposes and means of processing your personal data.

Contact Information:

• Platform Name: to3030
• Website: https://to3030.cam
• Privacy Inquiries: [email protected]
• Data Protection Officer: [email protected]
• General Support: [email protected]

3. What Data We Collect

We collect various types of personal information to provide, improve, and secure our gaming services. The data we collect falls into the following categories:

3.1 Account Registration Data

When you create an account on to3030, we collect:

• Personal Identifiers: Full legal name, date of birth, gender (optional)
• Contact Information: Email address, mobile phone number, residential address (city, province, postal code)
• Account Credentials: Username, encrypted password, security questions and answers
• Preferences: Preferred currency (IDR), language preference, communication preferences

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) regulations and verify your identity before processing withdrawals, we collect:

• Government-Issued ID: Scanned copy of Indonesian National Identity Card (KTP), passport, or other valid identification
• Proof of Address: Utility bill, bank statement, or government correspondence dated within the last 3 months
• Proof of Payment Method: Bank statement or screenshot showing account holder name matching your registered name
• Selfie Verification: Photo of you holding your identification document (required in cases of suspected fraud or identity verification challenges)

3.3 Financial Transaction Data

When you deposit funds or request withdrawals, we collect:

• Payment Method Details: Bank account number, bank name (BCA, BRI, BNI, Mandiri, etc.), e-wallet account identifier (OVO, DANA, GoPay phone number)
• Transaction History: Deposit amounts, deposit timestamps, withdrawal requests, withdrawal processing times, transaction IDs
• Bonus and Promotional Activity: Bonuses claimed, wagering progress, promotional codes used

Note: We do not store your complete bank account credentials or payment card CVV numbers. Payment processing is handled through secure third-party payment gateways that comply with PCI-DSS standards.

3.4 Gaming Activity Data

To provide gaming services and detect fraudulent activity, we collect:

• Gameplay Data: Games played, bets placed, bet amounts, winnings, losses, game session duration
• Sports Betting Data: Sports events bet on, bet types (single, parlay, live betting), odds selected, bet outcomes
• Responsible Gaming Data: Deposit limits set, self-exclusion requests, timeout periods, reality check acknowledgments

3.5 Technical and Device Data

When you access the Platform, we automatically collect:

• Device Information: Device type (mobile, tablet, desktop), operating system (Windows, macOS, Android, iOS), browser type and version
• Network Data: IP address, ISP (Internet Service Provider), geographic location (country, city - derived from IP address)
• Usage Data: Pages visited, clickstream data, time spent on pages, referring URL, exit pages
• Cookies and Tracking Data: Cookie identifiers, session IDs, local storage data (see Section 10 for details)

3.6 Communications Data

When you contact customer support or communicate with us, we collect:

• Support Interactions: Live chat transcripts, email correspondence, phone call recordings (with your consent), support ticket content
• Feedback and Surveys: Responses to customer satisfaction surveys, product feedback, testimonials
• Marketing Communications: Email open rates, link clicks, subscription preferences

4. How We Use Your Data

We process your personal data for the following purposes:

4.1 Service Provision

• Create and manage your gaming account
• Process deposits and withdrawals to and from your account
• Enable gameplay across our sports betting, casino, slots, and lottery products
• Track your gaming activity for account statement and transaction history purposes
• Calculate and credit bonuses, promotions, cashback, and VIP rewards
• Provide customer support via live chat, email, and phone

4.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement) before allowing account registration and withdrawals
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraud, money laundering, collusion, and other illegal activities
• Respond to law enforcement requests, court orders, and legal processes when legally obligated
• Maintain records for audit and compliance purposes as required by our gaming license

4.3 Security and Fraud Prevention

• Monitor for suspicious account activity, including abnormal betting patterns, multiple account creation, and bonus abuse
• Implement security measures such as IP address tracking, device fingerprinting, and login anomaly detection
• Protect against unauthorized access, cyberattacks, and data breaches
• Investigate and resolve disputes, chargebacks, and payment discrepancies

4.4 Platform Improvement and Personalization

• Analyze usage patterns to improve website navigation, game loading speeds, and mobile optimization
• Personalize your gaming experience by recommending games based on your play history
• Conduct A/B testing to optimize user interface design and functionality
• Gather feedback to enhance customer service quality and response times

4.5 Marketing and Communications

• Send promotional emails about new games, bonuses, and special offers (with your consent)
• Deliver personalized marketing messages based on your gaming preferences and activity
• Notify you of important account updates, policy changes, and security alerts
• Invite you to participate in tournaments, VIP events, and loyalty program promotions

Opt-Out Right: You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by contacting [email protected]. Note that you will still receive transactional emails (deposit confirmations, withdrawal notifications, security alerts) even after opting out of marketing.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

5.1 Contractual Necessity

Processing is necessary to fulfill our contractual obligations to provide gaming services under our Terms and Conditions. This includes account creation, payment processing, game provision, and customer support.

5.2 Legal Obligation

Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, age verification mandates, licensing conditions, and cooperation with law enforcement and regulatory authorities.

5.3 Legitimate Interests

Processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. Legitimate interests include fraud prevention, security monitoring, platform improvement, and business analytics.

5.4 Consent

For marketing communications, cookies, and certain optional data processing activities, we rely on your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Disclosure

to3030 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients:

6.1 Service Providers

We share data with trusted third-party service providers who assist in operating our platform:

• Payment Processors: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Game Providers: To deliver casino games, slots, and live dealer services from licensed game studios
• Identity Verification Services: To verify your identity documents during KYC processes
• Cloud Hosting Providers: To host our website and store data securely on servers
• Customer Support Platforms: To manage live chat, email support, and ticketing systems
• Analytics Providers: To analyze website traffic, user behavior, and platform performance

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with data protection standards equivalent to those in this Privacy Policy.

6.2 Legal Authorities

We may disclose your personal information to law enforcement agencies, regulators, courts, or government authorities when:

• Required by law, court order, subpoena, or legal process
• Necessary to comply with gaming license requirements and regulatory audits
• Responding to requests for assistance in fraud investigations or criminal proceedings
• Protecting our legal rights, property, or safety, or those of other users

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy proceeding involving to3030, your personal data may be transferred to the acquiring entity. We will notify you via email and prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your data with other third parties when you provide explicit consent for specific purposes, such as participating in promotional partnerships or third-party loyalty programs.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods by Data Type:

Data Type	Retention Period	Reason
Account Registration Data	Duration of account + 7 years	Legal and regulatory requirements
Identity Verification (KYC) Documents	7 years after account closure	AML/KYC compliance obligations
Financial Transaction Records	7 years after transaction	Tax and audit requirements
Gaming Activity Data	Duration of account + 5 years	Dispute resolution and game integrity
Customer Support Communications	3 years after interaction	Quality assurance and legal defense
Marketing Data (if consent withdrawn)	Deleted within 30 days	Respect for user preferences

After the applicable retention period expires, we securely delete or anonymize your personal data in accordance with data protection best practices. Anonymized data (data that cannot be linked back to you) may be retained indefinitely for statistical and analytical purposes.

8. Data Security

to3030 implements robust technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction.

8.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (stored on servers) is encrypted using AES-256 encryption
• Secure Authentication: Passwords are hashed using bcrypt with salt, making them unreadable even to our own staff. Two-factor authentication (2FA) is available and recommended for all accounts
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity 24/7
• Access Controls: Personal data is accessible only to authorized employees and service providers on a need-to-know basis, using role-based access controls and audit logging
• Regular Security Audits: We conduct quarterly security assessments and penetration testing by independent cybersecurity firms to identify and remediate vulnerabilities

8.2 Organizational Safeguards

• All employees with access to personal data undergo background checks and sign confidentiality agreements
• Staff receive regular training on data protection principles and security best practices
• We maintain a formal incident response plan to quickly detect, contain, and remediate data breaches
• Third-party service providers are carefully vetted and contractually required to maintain equivalent security standards

8.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected users via email within 72 hours of becoming aware of the breach. The notification will include:

• Description of the nature of the breach and data affected
• Likely consequences of the breach
• Measures taken to mitigate harm
• Recommended actions you should take to protect yourself

9. Your Privacy Rights

You have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request a copy of all personal data we hold about you. To exercise this right, contact [email protected] with your account details. We will provide the data in a structured, commonly used, and machine-readable format (e.g., PDF or CSV) within 30 days.

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact [email protected] for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Note that we may be required to retain certain data for legal and regulatory compliance (e.g., 7 years for financial records under AML laws).

9.4 Right to Restrict Processing

You can request that we limit how we use your data in specific situations, such as while we verify data accuracy after you dispute it, or while we assess whether our legitimate interests override your rights.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible. This applies to data you provided to us with consent or under a contract.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. Upon receiving your objection, we will cease processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails, cookies), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: [email protected]
• Subject Line: "Privacy Rights Request - [Your Account Username]"
• Include: Your full name, account username, email address, and specific request details

We will respond to your request within 30 days. If we need additional time (up to 60 days for complex requests), we will inform you and explain the reason for the delay. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive.

10. Cookies and Tracking Technologies

to3030 uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and improve functionality.

10.2 Types of Cookies We Use

• Essential Cookies: Necessary for basic website functionality, such as maintaining your login session and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the site (e.g., pages visited, load times) to help us improve performance.
• Functional Cookies: Remember your preferences (e.g., language, currency) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. Used only with your consent.

10.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect website functionality. To opt out of third-party advertising cookies, visit the Digital Advertising Alliance or Network Advertising Initiative opt-out pages.

10.4 Other Tracking Technologies

We also use:

• Web Beacons (Pixels): Invisible images embedded in emails and web pages to track email opens and page views
• Local Storage: HTML5 local storage for faster loading and offline functionality
• Device Fingerprinting: Collecting device characteristics (screen resolution, installed fonts, browser plugins) to detect fraud and multiple accounts

11. Children's Privacy

to3030 does not knowingly collect personal data from individuals under the age of 21 (or the legal gambling age in your jurisdiction, whichever is higher). Our services are intended exclusively for adults.

If we discover that we have inadvertently collected information from a minor, we will immediately delete that data and close the associated account. If you believe a minor has registered on our platform, please report it immediately to [email protected].

Parents and guardians are encouraged to monitor their children's internet usage and utilize parental control software to prevent access to gambling websites.

12. Policy Updates

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send email notification to registered users (for significant changes)
• Display a prominent notice on the Platform homepage

Your continued use of to3030 after the effective date of the updated Privacy Policy constitutes acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on all pages of the Platform

We will respond to all privacy inquiries within 30 days. For urgent matters (e.g., suspected unauthorized account access), contact us immediately via live chat for faster assistance.