toto21 Privacy Policy

Effective Date: June 2026  |  Applies To: toto21.biz and all related services operated by toto21

1. Introduction

toto21 ("toto21," "we," "us," "our") is committed to protecting the personal data of all individuals who use or interact with the toto21 online gaming platform, including the website at toto21.biz and all associated services. This Privacy Policy describes how toto21 collects, processes, uses, stores, and protects personal data in connection with your use of the platform.

This Privacy Policy is governed by the Republic Act No. 10173, also known as the Philippine Data Privacy Act of 2012 ("DPA"), its implementing rules and regulations, and all applicable regulations issued by the National Privacy Commission of the Philippines. toto21 also processes data in compliance with PAGCOR regulatory requirements as they apply to online gaming operators serving Filipino players.

By registering an account with toto21 or using the toto21 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms set out herein, you should not use the toto21 platform.

2. Personal Data We Collect

toto21 collects personal data from you directly when you interact with the platform, and in certain cases automatically through your use of the website. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (required to verify the 21+ age requirement)
• Philippine mobile number and/or email address
• Residential address in the Philippines
• Government-issued identification document details (e.g., national ID, passport, driver's licence, PhilSys card)

2.2 Financial and Transaction Data

• GCash account number or mobile number linked to your GCash wallet
• PayMaya, BPI, BDO, or Metrobank account details where applicable
• Deposit and withdrawal transaction records
• Gaming transaction history including wager amounts and outcomes
• Account balance and bonus credit information

2.3 Technical and Usage Data

• IP address and device identifiers
• Browser type, operating system, and device type
• Session duration and navigation behaviour on the toto21 platform
• Login timestamps and geographic location data at account access
• Cookies and similar tracking technology data (see Section 6)

2.4 Communications Data

• Records of your communications with toto21 customer support, including live chat transcripts
• Responses to surveys, feedback forms, and promotional opt-in records

3. How toto21 Uses Your Personal Data

toto21 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your toto21 account, including verifying your identity and eligibility to use the platform.
• Age and identity verification: To comply with the minimum age requirement of 21 years old under PAGCOR guidelines and Philippine law, and to conduct KYC (Know Your Customer) checks required for real-money gaming.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers in Philippine Peso, and to maintain accurate financial records.
• Platform security: To detect and prevent fraud, money laundering, unauthorised account access, and other prohibited activities on the toto21 platform.
• Regulatory compliance: To comply with our obligations under PAGCOR regulatory guidelines, the Philippine Data Privacy Act, and applicable anti-money laundering legislation.
• Customer support: To respond to your enquiries, resolve account issues, and deliver the 24/7 support service provided by toto21.
• Marketing communications: To send you promotional offers, bonus notifications, and game updates where you have consented to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse usage patterns and improve the toto21 platform experience for all Filipino players.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to facilitate the application of responsible gaming tools including deposit limits and self-exclusion.

4. Legal Basis for Processing

toto21 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to fulfil toto21's obligations to you under the account agreement, including account registration, payment processing, and game access.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements, including PAGCOR guidelines and anti-money laundering legislation.
• Legitimate interests: Processing is necessary for toto21's legitimate interests, including fraud prevention, platform security, and responsible gaming compliance.
• Consent: Where required, toto21 will seek your explicit consent before processing your data for purposes such as direct marketing communications.

5. Data Sharing and Disclosure

5.1 toto21 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes.

5.2 toto21 may share your personal data with the following categories of recipients where necessary and lawful:

• Payment processors: GCash (GXI/Mynt), PayMaya (Voyager Innovations), and Philippine banking institutions (BPI, BDO, Metrobank) for the purpose of processing your deposits and withdrawals.
• Game providers: Licensed game software providers whose titles are available on the toto21 platform, strictly for the purposes of operating those games.
• Identity verification services: Third-party KYC and identity verification providers engaged by toto21 to fulfil regulatory verification requirements.
• Regulatory authorities: PAGCOR, the National Privacy Commission of the Philippines, the Anti-Money Laundering Council (AMLC), and any other applicable regulatory or law enforcement bodies where required by law or valid legal process.
• IT and security service providers: Cloud hosting and cybersecurity service providers engaged by toto21 under contractual data processing agreements that require them to protect your data.

5.3 All third parties with whom toto21 shares personal data are contractually required to implement appropriate technical and organisational measures to protect that data.

6. Cookies and Tracking Technologies

6.1 The toto21 website uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files placed on your device when you visit the toto21 website.

6.2 toto21 uses the following categories of cookies:

• Strictly necessary cookies: Required for the toto21 platform to function. These cannot be disabled.
• Performance cookies: Collect anonymised data about how visitors use the toto21 platform, used to identify and fix technical issues.
• Functional cookies: Remember your preferences and settings on the toto21 platform, such as language and display preferences.
• Analytics cookies: Used to understand aggregate usage patterns and improve toto21's platform features.

6.3 You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect your ability to use some features of the toto21 platform.

7. Data Retention

7.1 toto21 retains personal data for as long as your account remains active and for such additional periods as are required by applicable law or regulation.

7.2 In particular, toto21 is required to retain certain transaction and identity records for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering regulations and PAGCOR requirements.

7.3 Where personal data is no longer required for any purpose for which it was originally collected, and where no legal retention obligation applies, toto21 will securely delete or anonymise that data.

8. Security of Your Personal Data

8.1 toto21 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls and authentication protocols for all personnel accessing personal data, and regular security assessments of toto21's systems and infrastructure.

8.2 Despite these measures, no data transmission over the internet or electronic storage system is completely secure. toto21 cannot guarantee absolute security but will act promptly to investigate and address any data security incident.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, toto21 will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Philippine Data Privacy Act.

9. Your Data Rights

9.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by toto21:

• Right to be informed: The right to be informed of the manner in which your personal data is being processed.
• Right of access: The right to request a copy of the personal data toto21 holds about you.
• Right to rectification: The right to correct inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to toto21's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, please contact toto21 customer support. toto21 will respond to all data rights requests within thirty (30) days.

10. Children and Minors

10.1 The toto21 platform is strictly not intended for use by individuals under the age of 21. toto21 does not knowingly collect personal data from persons under the age of 21.

10.2 If toto21 becomes aware that it has inadvertently collected personal data from a person under the minimum age, it will immediately close the associated account, delete the data, and reverse any associated transactions.

10.3 Age verification is conducted as part of the toto21 KYC process prior to the activation of real-money gaming functionality on any account.

11. Changes to This Privacy Policy

11.1 toto21 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. When we make material changes, we will notify you via the toto21 platform or by email to your registered address.

11.2 The effective date at the top of this document indicates when the current version of the Privacy Policy was last revised. Your continued use of the toto21 platform following notification of changes constitutes acceptance of the revised Privacy Policy.

12. Contact Us

12.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by toto21, please contact our customer support team through the live chat function available on the toto21 platform, or by writing to the email address displayed in the footer of this website.

12.2 toto21 is committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.