toto155 Privacy Policy

1 Introduction

toto155 operates as an online casino and sports betting platform serving players in Bangladesh. We understand that your personal data is valuable and that you have a legitimate expectation of privacy whenever you interact with our platform. This Privacy Policy has been drafted to give you a clear, honest, and comprehensive account of how toto155 handles your personal information.

This policy applies to all personal data collected and processed in connection with your use of the toto155 website at toto155.lat, including all games, betting markets, payment functions, promotional activities, and customer support interactions. It applies equally whether you access toto155 from a desktop browser or a mobile device.

Throughout this document, references to "toto155", "we", "us", or "our" refer to the toto155 platform and its operating entity. References to "you", "your", or "Player" refer to any individual who accesses or uses the toto155 platform, whether as a registered account holder or as an unregistered visitor.

2 Data We Collect

toto155 collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we may collect include the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — toto155 is strictly an 18+ platform).
• Residential address, including division, district, city or town, and postcode.
• Email address and mobile phone number used to create your account.
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or official correspondence issued within three months).
• Proof of payment method ownership (screenshots or statements from bKash, Nagad, Rocket, or bank accounts used to deposit).
• Any additional documents reasonably requested by our compliance team to fulfil verification obligations.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in BDT (৳), timestamps, and payment method references.
• Transaction reference numbers from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank.
• Account balance history, bonus allocations, and wagering activity records.
• Chargeback and dispute records, where applicable.

2.4 Usage and Behavioural Data

• Games played, bets placed, bet amounts, and outcomes — recorded for account management and responsible gaming monitoring purposes.
• Session duration, login timestamps, and platform navigation patterns.
• Device identifiers, IP address, browser type and version, operating system, and screen resolution.
• Referral source (how you arrived at the toto155 website) where technically determinable.

2.5 Communications Data

• Content of messages exchanged with the toto155 customer support team via live chat or email.
• Records of any complaint submissions or dispute correspondence.
• Responses to promotional communications, surveys, or feedback requests where you choose to participate.

3 How We Collect Data

toto155 collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically during platform use — through server logs, cookies, and session tracking technologies that record technical data about your device and interaction with the platform.
• From payment service providers — bKash, Nagad, Rocket, and our banking partners may share transaction confirmation data with toto155 for the purpose of reconciling deposits and withdrawals against your account.
• From identity verification services — where toto155 uses third-party document verification tools to validate the authenticity of KYC documents you submit, those services may return verification results to us.
• From fraud prevention services — toto155 may receive risk signals from fraud detection providers that help identify unusual account activity or potential misuse of the platform.

4 Purposes of Processing

The personal data collected by toto155 is processed for the following specific and legitimate purposes:

toto155 does not process your personal data for purposes beyond those listed above without first obtaining your explicit consent or establishing a separate legal basis for doing so.

5 Legal Basis for Processing

toto155 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to deliver the services you have requested by registering a toto155 account, including account management, payment processing, and customer support.
• Legitimate interests: Processing conducted to further toto155's legitimate operational interests — such as fraud detection, platform security, and improving user experience — where those interests are not overridden by your privacy rights.
• Legal obligation: Processing necessary for toto155 to comply with applicable legal requirements, including age verification obligations and financial record-keeping requirements.
• Consent: Processing for optional activities such as sending promotional emails, push notifications, or SMS marketing — conducted only where you have provided explicit, freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

Your personal data may be shared with the following categories of third parties under the conditions described:

6.1 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely for the purpose of processing deposits and withdrawals initiated by you. These providers are subject to their own privacy and security standards, and toto155 does not control their internal data handling practices beyond the scope of our contractual relationships with them.

6.2 Identity Verification Providers

Where toto155 engages third-party KYC verification services, your identity documents and personal details necessary for verification are shared with those providers under confidentiality agreements. These providers are engaged solely to validate the authenticity of documents and confirm your eligibility to use the platform.

6.3 Fraud Prevention and Security Services

Certain technical data — including device identifiers, IP addresses, and transaction patterns — may be processed by fraud prevention service providers to help toto155 identify and respond to suspicious activity. This sharing is conducted on a pseudonymised basis wherever technically feasible.

6.4 Legal and Regulatory Authorities

toto155 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by applicable law, court order, or regulatory direction. In such cases, disclosure is limited strictly to what is required by the relevant legal instrument.

6.5 Business Succession

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of toto155, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms in advance where practicable.

7 Data Retention

toto155 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Account registration data: Retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, to satisfy record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Customer support communications: Retained for three (3) years from the date of the last communication in a given case, or longer if the communication relates to an unresolved dispute or legal matter.
• Usage and behavioural data: Retained in identifiable form for up to two (2) years, after which it may be anonymised and retained in aggregate form for analytical purposes indefinitely.
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year following withdrawal of consent, as evidence of the consent having been given and subsequently revoked.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with toto155's internal data disposal procedures.

8 Cookies and Tracking Technologies

toto155 uses cookies and similar web technologies to deliver a functional, personalised, and secure platform experience. The following types of cookies are used on the toto155 website:

toto155 does not use third-party advertising cookies that track your browsing behaviour across websites unrelated to toto155. You may configure your browser to refuse or delete cookies, though doing so may impair the functionality of certain toto155 features, including session persistence and personalised settings.

9 Security Measures

toto155 applies industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and toto155 servers, ensuring that data in transit cannot be intercepted.
• Password hashing — user passwords are stored in a salted, hashed format using a modern cryptographic algorithm. toto155 does not store passwords in plain text and cannot retrieve your password if it is forgotten.
• Role-based access control — access to Player personal data within toto155's internal systems is restricted to staff members with a verified operational need. Access logs are maintained and reviewed regularly.
• Regular security assessments — toto155 conducts periodic reviews of platform infrastructure and data handling processes to identify and address potential vulnerabilities.
• Incident response procedures — in the event of a suspected data breach, toto155 has documented procedures for containing the incident, assessing its impact, and notifying affected Players without undue delay where the breach is likely to result in a significant risk to their rights or interests.

10 Your Privacy Rights

As a toto155 Player, you hold the following rights in relation to your personal data. These rights may be exercised by submitting a written request to [email protected]:

• Right of Access: You may request a copy of the personal data that toto155 holds about you, along with information about how it is being used. toto155 will provide this information within a reasonable timeframe following receipt of a valid request.
• Right of Rectification: If you believe that any personal data toto155 holds about you is inaccurate, incomplete, or out of date, you may request that it be corrected. You may also update certain account details directly through your toto155 account settings.
• Right to Erasure: You may request the deletion of personal data that toto155 holds about you, subject to toto155's obligations to retain certain records under applicable law. Where erasure is not possible in full, toto155 will inform you of the specific data that must be retained and the reason for its retention.
• Right to Restrict Processing: You may request that toto155 limit the processing of your personal data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of its use.
• Right to Data Portability: You may request that personal data you have provided to toto155 be returned to you in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where toto155 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Object: You may object to the processing of your personal data where toto155 relies on legitimate interests as the legal basis for processing. toto155 will assess whether its interests override your rights in the specific circumstances and will respond accordingly.

toto155 will acknowledge all privacy rights requests within five (5) business days and will endeavour to fulfil them within thirty (30) calendar days from the date of acknowledgement. In cases of complexity or high volume, an extension of up to an additional thirty (30) days may apply, and you will be notified if this is the case.

11 Children's Privacy

Age verification is a mandatory step in the toto155 account registration and KYC process. Any account found to belong to an individual under the age of 18 will be immediately suspended and permanently closed. All funds associated with such an account will be returned to the payment source used for deposits, less any bonuses or winnings generated, which are forfeited in full.

If you are a parent or guardian and you believe that a minor under your care has accessed the toto155 platform or created an account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay. We encourage parents to make use of internet filtering and parental control tools to restrict minors' access to online gambling platforms.

12 Updates to This Privacy Policy

toto155 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the scope of services offered on the platform. The effective date at the top of this document will be updated each time the policy is revised.

Where changes are material — for example, where we introduce a new category of data collection, engage a new category of data processor, or change the basis on which we rely to process your data — we will provide advance notice to registered Players by email or by a prominent notice displayed within the toto155 platform prior to the changes taking effect.

For minor or non-material changes (such as typographical corrections, clarifications of existing practices, or administrative updates), the revised policy will be published on this page without separate individual notification. It is your responsibility to review this Privacy Policy periodically to remain informed of the current version. Continued use of the toto155 platform following publication of a revised policy constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way toto155 handles your personal data, please do not hesitate to contact our support team. We are committed to resolving all privacy-related enquiries promptly, professionally, and in strict confidence.

When contacting toto155 with a privacy-related request, please include your registered account username, the specific nature of your request or concern, and any relevant transaction reference numbers or dates to allow us to locate your records efficiently. All privacy correspondence is treated as strictly confidential and is handled only by authorised personnel.