toto33 takes the privacy of every Bangladesh player seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is stored and protected, who may access it, and what rights you hold over your own information.
The six cards below summarise the most important points of the toto33 Privacy Policy. They do not replace the full document — please read all sections in full.
toto33 collects registration data (name, date of birth, email, mobile number), payment information (bKash/Nagad wallet references), identity verification documents for KYC, device and browser data, and in-platform activity logs including bets placed, games played, and deposit history.
Your data is used to operate your toto33 account, process BDT deposits and withdrawals, verify your identity, deliver bonuses and promotional offers, detect fraud, comply with legal obligations, and improve the platform based on aggregate usage patterns.
toto33 uses 256-bit SSL encryption for all data in transit. Account passwords are stored using bcrypt hashing with individual salts. Access to personal data within toto33 is restricted to authorised personnel on a need-to-know basis, with all access activity logged and audited.
toto33 does not sell personal data to third parties. Data is shared only with essential service providers — including payment processors (bKash, Nagad, Rocket), game content providers (Evolution Gaming, Pragmatic Play, Spribe), and fraud prevention services — solely for the purpose of delivering the toto33 service.
As a toto33 player you have the right to access a copy of your personal data, request corrections to inaccurate data, request deletion of your data subject to legal retention obligations, and object to certain processing activities. Submit requests via live chat or email to [email protected].
toto33 retains account and transaction records for a minimum of 5 years after account closure to comply with financial record-keeping obligations. Identity verification documents are retained for the same period. Marketing preference data is deleted within 30 days of an opt-out request.
This Privacy Policy ("Policy") describes how toto33 ("toto33", "we", "us", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who access or use the toto33 website at toto33.today, including all services, features, games, and payment facilities made available through the Platform .
toto33 is directed at players located in Bangladesh and all services are provided in Bangladeshi Taka (BDT). This Policy applies to all personal data we process in connection with the toto33 platform, regardless of the device or channel through which you access our services.
This Policy should be read alongside the toto33 Terms & Conditions, which govern your use of the Platform. Where this Policy uses terms defined in the Terms & Conditions, those definitions apply here as well.
toto33 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, toto33 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection principles.
All data protection enquiries, subject access requests, and complaints should be directed to the toto33 Data Protection contact as set out in Section 15 of this Policy. toto33 will respond to all formal data protection requests within 30 calendar days of receipt.
When you create a toto33 account, we collect the following information:
To comply with our Know Your Customer (KYC) obligations and to protect our players from identity fraud, toto33 may request the following documents before processing withdrawals or as part of an ongoing compliance review:
toto33 records all financial transactions conducted through your account, including deposit amounts and timestamps, withdrawal requests and processing status, payment method references (wallet numbers, partial bank account identifiers), bonus credits and wagering progress, and game stakes and winnings. Full payment card numbers are never stored on toto33 servers — card transactions are tokenised and processed by PCI-DSS compliant payment partners.
When you access toto33, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), session timestamps, pages visited and duration, and referring URLs. This data is used for security monitoring, fraud detection, and service optimisation.
toto33 logs all in-platform activity, including games played, bet amounts, game outcomes, sports markets accessed, live casino session data, Keno number selections and results, and support chat transcripts. This data is used to administer your account, resolve disputes, and detect patterns indicative of problem gambling or fraud.
When you contact toto33 via live chat or email, we retain records of all communications, including the content of messages, timestamps, and the identity of the support agent who handled your enquiry. These records are used to ensure service quality and to resolve any subsequent disputes relating to the interaction.
toto33 uses personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Processing deposits and withdrawals in BDT | Financial data, KYC data, registration data |
| Identity verification and age confirmation (18+) | KYC data, registration data |
| Delivering casino games, sports betting, slots, and Keno | Gameplay data, financial data |
| Bonus and promotion administration | Financial data, gameplay data, registration data |
| Fraud prevention and security monitoring | Device data, financial data, gameplay data |
| Responsible gaming monitoring and interventions | Gameplay data, financial data, communications data |
| Customer support | Communications data, account data |
| Legal and regulatory compliance | All categories as required |
| Service improvement and analytics (aggregated, anonymised) | Device data, gameplay data |
| Marketing communications (where consent given) | Registration data, gameplay data |
toto33 processes your personal data on the following legal bases:
Cookies are small text files placed on your device when you visit toto33. They allow the Platform to recognise your device, remember your preferences, maintain your login session, and collect anonymous usage statistics. toto33 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use core toto33 features including login and payment. For instructions on managing cookies in your specific browser, consult the help documentation provided by your browser vendor.
toto33 shares personal data with carefully selected third-party service providers who process data on our behalf and under our instructions. These include:
All service providers are contractually required to process personal data only in accordance with toto33's instructions and to maintain appropriate security standards. toto33 does not authorise any service provider to use your data for their own independent purposes.
toto33 may disclose personal data to law enforcement authorities, regulatory bodies, or other third parties where required by applicable law, court order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of toto33, our players, or the public.
toto33 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is used solely to provide and improve the toto33 service and to comply with applicable legal obligations.
toto33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While toto33 takes all reasonable precautions to secure your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, toto33 will notify affected players without undue delay in accordance with applicable notification obligations.
You play an important role in keeping your account secure. Never share your toto33 password or one-time passcodes with anyone, including toto33 support staff. toto33 will never ask for your password by any means.
toto33 retains personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC / identity verification documents | Duration of account plus 5 years after closure |
| Transaction and financial records (BDT deposits, withdrawals, bets) | Minimum 5 years from transaction date |
| Customer support communications | 3 years from the date of the interaction |
| Device and technical data (IP logs, session logs) | 12 months from collection date |
| Marketing preference records | Deleted within 30 days of opt-out request |
| Responsible gaming interaction records | Duration of account plus 5 years after closure |
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely as part of aggregate statistical records, as it can no longer be linked to an identifiable individual.
As a toto33 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact toto33 via live chat or email at [email protected]. toto33 will respond to all valid requests within 30 calendar days.
The toto33 platform is strictly restricted to individuals who are 18 years of age or older. toto33 does not knowingly collect personal data from anyone under the age of 18. If toto33 becomes aware that personal data has been collected from a person under 18, that account will be closed immediately, all associated data will be deleted, and any deposited funds will be returned to the verified payment method on file.
If you are a parent or guardian and believe that your child has created a toto33 account, please contact us immediately via live chat or email so that we can take the appropriate action without delay. toto33 takes the protection of minors extremely seriously and is committed to enforcing its 18+ requirement rigorously. 18+ only. Play responsibly.
With your consent, toto33 may send you promotional communications by email or SMS, including information about new games, deposit bonuses, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season offers), and platform updates. You can opt in to marketing communications during registration or at any time through your account notification settings.
You may opt out of marketing communications at any time by:
Opting out of marketing communications will not affect the delivery of transactional messages related to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These service communications are necessary for account operation and will continue regardless of your marketing preference.
The toto33 platform may contain references to or integrations with third-party services, including game providers such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi. When you interact with third-party game content, that provider's own privacy terms may apply to data processed within their game environment. toto33 is not responsible for the privacy practices of third-party content providers and encourages players to review the privacy documentation of any third-party service they interact with.
toto33 does not include external hyperlinks to third-party websites outside of the toto33 service. Any links visible within the Platform connect to internal toto33 pages only.
toto33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services offered on the Platform. When material changes are made, toto33 will notify registered players via the email address on file and/or via an in-account notification at least 7 days before the changes take effect.
The updated Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the toto33 Platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.
We encourage you to review this Policy periodically to stay informed about how toto33 protects your personal data.
For all privacy-related enquiries, subject access requests, or complaints, please contact toto33 using the following channels:
When submitting a data rights request by email, please include your registered toto33 username and a brief description of your request to help us process it efficiently. You may be asked to provide identity verification before your request is actioned.
toto33 will acknowledge all formal privacy complaints within 5 business days and will endeavour to resolve them within 30 calendar days. If you are not satisfied with toto33's response to your complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.
Check our FAQ for quick answers, review the Terms & Conditions for platform rules, or log in to manage your toto33 account privacy settings directly.