Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "toyo4d," "we," "us," or "our" refers to the toyo4d online gaming platform and its operator entities.
• "Player," "you," or "your" refers to any individual who visits, registers on, or uses toyo4d's website and services.
• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly, including name, identification number, location data, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" refers to toyo4d as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on behalf of toyo4d.
• "Consent" means freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data.
• "Services" refers to all products and services offered through toyo4d, including casino games, sports betting, togel (Indonesia's traditional lottery), and associated customer support.

2. Scope and Application

This Privacy Policy applies to all Personal Data collected and processed by toyo4d in connection with your use of our website at https://toyo4d.cam, our mobile applications, and all associated services. It applies to all players regardless of their method of access or the device used.

This Policy is intended to inform players based primarily in Indonesia about how toyo4d handles their Personal Data in accordance with applicable data protection principles. Indonesian players have specific rights and protections under applicable laws governing electronic systems and personal data, and toyo4d is committed to respecting these rights.

By accessing our website, creating an account, or using any toyo4d service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your Personal Data as described herein. If you do not agree with this Policy, please do not use our services.

3. Information We Collect

toyo4d collects Personal Data from and about you through several channels. We collect only the data necessary to provide and improve our services, verify your identity, and comply with our legal obligations.

3.1 Information You Provide Directly

When you register an account, complete the KYC (Know Your Customer) verification process, or contact our support team, you provide us with:

• Identity information: full legal name, date of birth, gender, and nationality
• Contact information: email address, phone number (including Indonesian mobile numbers), and residential address
• Identification documents: copies of your Indonesian KTP (National Identity Card), passport, or driver's license; selfie photographs taken for liveness verification
• Financial information: bank account details for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, or BSI; e-wallet account details for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Support communications: records of live chat conversations, email correspondence, and any other communications you initiate with our team

3.2 Information Collected Automatically

When you access toyo4d through any device, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser type and version
• Session duration, pages visited, features used, and navigation patterns
• Betting history, game selections, wager amounts, and account activity logs
• Login times, timestamps of transactions, and platform interaction data

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions, to verify transactions and account ownership
• Identity verification and KYC service providers, to confirm the authenticity of documents
• Fraud prevention and anti-money-laundering databases, to detect and prevent illegal activity
• Responsible gaming organisations, if you have registered a self-exclusion with an external body

3.4 Summary of Data Categories

4. How We Use Your Information

toyo4d uses your Personal Data only for legitimate purposes directly related to the provision and improvement of our services. The following describes the specific purposes for which we process your data:

4.1 Account Management and Service Delivery

We use your identity and contact data to create and manage your toyo4d account, process login requests, and ensure secure access. Financial data is used to process your deposits and withdrawals through Indonesian banking channels and e-wallets, and to maintain accurate account balance records.

4.2 Identity Verification and Compliance

We are obligated to verify the identity of all players through our KYC process. Your identification documents and supporting materials are used to confirm that you meet our eligibility criteria, including the requirement that you are at least 21 years of age and a legitimate account holder. This is a legal and regulatory requirement that we cannot waive.

4.3 Fraud Prevention and Security

toyo4d uses technical data, financial data, and gaming data to detect and prevent fraud, money laundering, account takeover, and other prohibited activities. Our systems continuously analyse account behaviour for unusual patterns that may indicate suspicious activity.

4.4 Customer Support

Communication data and account information are used by our customer support team to assist you when you contact us. Our Indonesian-speaking agents use your account history to resolve issues efficiently without requiring you to repeat information already on record.

4.5 Marketing and Promotions

With your consent, we may use your contact information to send promotional communications about bonuses, new games, seasonal offers (such as promotions around Idul Fitri, Indonesian Independence Day on 17 August, or Imlek), and platform updates. You may withdraw marketing consent at any time by contacting our support team.

4.6 Responsible Gaming

Your gaming data — including betting patterns, session frequency, and deposit amounts — is monitored as part of our responsible gaming obligations. This data helps our systems identify potential problem gambling behaviour and triggers appropriate interventions, including cooling-off prompts and self-exclusion tools.

4.7 Platform Improvement and Analytics

Aggregated and anonymised technical and gaming data is used to analyse platform performance, identify areas for improvement, and develop new features. This analysis does not identify individual players and is used solely for internal business purposes.

5. Legal Basis for Processing

toyo4d processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to fulfill our contractual obligations to you as a registered player, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, anti-money-laundering checks, and age verification requirements.
• Legitimate interests: Processing conducted to pursue our legitimate business interests, including fraud prevention, security monitoring, and platform improvement, provided these interests do not override your rights.
• Consent: Processing for purposes such as marketing commun ications, where you have provided explicit and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Disclosure and Third-Party Sharing

toyo4d does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We disclose your data only in the following limited circumstances:

6.1 Service Providers and Data Processors

We engage trusted third-party service providers who process Personal Data on our behalf under strict contractual obligations. These include:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to execute your financial transactions.
• KYC and identity verification providers: Third-party verification services receive copies of your identification documents to authenticate your identity on our behalf.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level technical data necessary to deliver their games on our platform. These providers do not receive your identity or financial data.
• Fraud prevention and AML service providers: Specialist data providers receive relevant account data to assist in detecting and preventing financial crime.
• Customer support platforms: Our live-chat and helpdesk systems process communication data to deliver support services.

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of toyo4d, our players, or the public. We will notify you of any such disclosure where permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of toyo4d assets, your Personal Data may be transferred to the acquiring entity. We will ensure that any successor entity is bound by privacy obligations at least as protective as those set out in this Policy, and we will notify you before your data is transferred and becomes subject to a different privacy policy.

7. Cookies and Tracking Technologies

toyo4d uses cookies and similar tracking technologies to ensure our platform functions correctly, to remember your preferences, and to improve your overall experience. A cookie is a small text file stored on your device when you visit a website.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will impair your ability to use toyo4d services, as these cookies are essential for login sessions and account security. Disabling functional cookies may result in a reduced or less personalised experience.

8. Data Retention

toyo4d retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements. The following retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with toyo4d, plus a minimum of 5 years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial compliance and audit requirements.
• KYC documentation: Retained for a minimum of 5 years after your account is closed or your last transaction, whichever is later.
• Customer support communications: Retained for up to 3 years after the resolution of each support case, unless the communication is relevant to an ongoing dispute or legal matter.
• Gaming and betting history: Retained for the life of your account and 5 years thereafter for compliance and dispute-resolution purposes.
• Technical and analytics data: Retained in anonymised or aggregated form indefinitely; identifiable technical logs are deleted after 12 months.
• Marketing consent records: Retained for the duration of our marketing relationship with you, plus 2 years after consent is withdrawn.

When your data is no longer required, we securely delete or anonymise it so that it can no longer be associated with your identity.

9. Data Security Measures

toyo4d takes the security of your Personal Data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

9.1 Technical Safeguards

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security, the same technology used by major financial institutions.
• Data encryption at rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Secure payment infrastructure: Payment data processed through Indonesian bank channels and e-wallets is handled within PCI-DSS compliant environments where applicable.
• Intrusion detection and prevention systems: Our infrastructure is monitored continuously for signs of unauthorised access or unusual activity.
• Two-factor authentication (2FA): We offer and strongly recommend 2FA for all player accounts to add an additional layer of login security.

9.2 Organisational Safeguards

• Access to Personal Data is restricted to toyo4d staff and processors who have a legitimate need to access it in order to perform their duties.
• All staff with access to Personal Data are trained in data protection and confidentiality obligations.
• We conduct regular security audits, penetration testing, and vulnerability assessments to identify and address potential weaknesses.
• Data breach response procedures are in place. In the event of a breach affecting your Personal Data, we will notify you promptly in accordance with applicable laws.

10. Your Data Rights

As a player on toyo4d, you have a number of rights concerning your Personal Data. We are committed to facilitating the exercise of these rights promptly and without undue restriction.

• Right of access: You may request a copy of the Personal Data we hold about you at any time. We will provide this information within 30 days of a valid request.
• Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request that we correct it. For minor updates (such as email address or phone number), you may update your account details directly through your account dashboard.
• Right to erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and we have no overriding legitimate grounds. Note that we may be unable to erase data that we are required to retain by law (such as KYC and financial records).
• Right to restrict processing: You may request that we limit processing of your Personal Data in certain circumstances, such as while we investigate a rectification request or an objection to processing.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests or for direct marketing purposes. We will cease marketing communications promptly upon your objection.
• Right to withdraw consent: Where we rely on your consent to process Personal Data (for example, for marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 5 business days and respond fully within 30 days. We may need to verify your identity before processing your request.

11. Protection of Minors

toyo4d's services are strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires all players to declare that they are at least 21 years of age, and this declaration is verified during the KYC process through government-issued identification.

If we become aware that we have inadvertently collected Personal Data from a person under 21, we will immediately close the relevant account, forfeit any balance in accordance with our Terms & Conditions, and securely delete the associated Personal Data as promptly as permitted by our legal obligations.

If you are aware of a minor who has registered on toyo4d, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.

12. International Data Transfers

toyo4d operates as an internationally oriented platform, and some of the third-party service providers we engage — including game software studios such as Pragmatic Play, Evolution Gaming, and Microgaming, as well as certain technical infrastructure providers — may be located outside Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia.

Whenever we transfer Personal Data internationally, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy and applicable data protection principles. These safeguards may include contractual clauses requiring the recipient to maintain equivalent data protection standards, and where possible, we prefer processors whose infrastructure is located in the Asia-Pacific region to minimise data transfer distances and risks.

By using toyo4d services, you acknowledge that your Personal Data may be transferred internationally as described in this section. If you have concerns about international transfers of your data, please contact us at [email protected].

13. Changes to This Policy

toyo4d reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, new data processing activities, changes to our service offerings, or improvements to our privacy practices.

When we make material changes to this Policy, we will notify you by email to the address registered on your account and by posting a prominent notice on the toyo4d website. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. For minor changes that do not materially affect your rights, we will update the Policy without separate notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data. Your continued use of toyo4d services after any changes to this Policy have been published constitutes your acceptance of the updated terms.

14. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please reach out to our dedicated data team. We are committed to addressing your enquiries promptly and transparently.

Our Indonesian-speaking customer support and data team members are fully trained in privacy matters and can assist you in Bahasa Indonesia should you prefer to communicate in your native language, even though this website is presented in English.

We take every privacy enquiry seriously. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice.