toto15 Privacy Policy —
How We Protect Your Data

toto15 (referred to in this document as "toto15", "we", "our", or "us") is committed to safeguarding the privacy and personal data of all individuals who access or use the toto15 website located at https://toto15.vu and all related products and Services (collectively, the "Platform"). This Privacy Policy applies to all players, prospective users, and visitors who interact with the toto15 Platform, including those accessing it from Bangladesh.

This Privacy Policy is intended to be read alongside the toto15 Terms & Conditions, which govern your overall relationship with the Platform. By registering a toto15 account, accessing the Platform, or providing personal information in any context, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

toto15 operates as an offshore online gambling platform. While we do not operate from within Bangladesh, we actively serve Bangladeshi players and take our data protection obligations seriously. We apply data handling standards that reflect internationally recognised privacy best practices.

toto15 collects personal data through several channels: directly from you during registration and account use, automatically via technical systems when you access the Platform, and from third-party verification and payment partners. The categories of personal data we collect are set out below.

toto15 does not intentionally collect sensitive special categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or medical information, unless you voluntarily disclose such information in a responsible gaming or self-exclusion context (for example, if you inform us that you have a gambling-related health condition). Any such sensitive data disclosed voluntarily will be handled with the highest level of confidentiality.

toto15 uses the personal data we collect for the following specific purposes. Each purpose is tied to a legitimate operational need or a legal obligation, and we do not use your data for any purpose other than those stated below:

• Account creation and administration: To register your toto15 account, verify your identity, maintain your account profile, and manage your account settings and preferences.
• Service delivery: To enable you to access casino games, place sports bets, participate in live dealer games, and use all features of the toto15 Platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods. Financial data is passed to payment processors solely for the purpose of completing transactions.
• Identity verification and fraud prevention: To conduct KYC checks, verify the authenticity of documents submitted, detect and prevent fraudulent activity, money laundering, and account misuse.
• Responsible gaming compliance: To monitor gameplay patterns for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and fulfil our responsible gaming obligations.
• Customer support: To respond to account queries, resolve disputes, process responsible gaming requests, and maintain records of support interactions for quality assurance.
• Legal and regulatory compliance: To fulfil any legal obligations arising under applicable offshore regulations, respond to lawful requests from law enforcement or regulatory authorities, and maintain records required by anti-money laundering frameworks.
• Platform security and integrity: To detect and investigate suspicious login activity, prevent unauthorised access, and monitor for technical security threats.
• Analytics and platform improvement: To analyse aggregated, anonymised usage data to improve the toto15 Platform, optimise game offerings, and enhance user experience for players in Bangladesh and other served markets.
• Marketing communications: To send promotional emails, bonus notifications, and event announcements to players who have opted in to receive such communications. You may withdraw this consent at any time.

toto15 processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to fulfil our obligations under the Terms & Conditions that govern your toto15 account — including account administration, payment processing, and service delivery.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering regulations, KYC requirements, and lawful requests from competent authorities.
• Legitimate interests: Processing is carried out in the legitimate interests of toto15, including fraud prevention, platform security, responsible gaming monitoring, and improving our Services — provided that such interests are not overridden by your rights and interests.
• Consent: For marketing communications and certain non-essential cookies, we process your data on the basis of your consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

Where processing is based on consent, toto15 will always seek that consent clearly and separately from any other terms. You will never be required to consent to marketing communications as a condition of registering a toto15 account or accessing the Platform.

toto15 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other integrated payment service providers receive the financial and identity data necessary to process your transactions. Each payment partner operates under its own privacy policy and data protection framework.
• KYC and identity verification providers: Third-party identity verification services may receive copies of your identification documents and personal details to conduct verification checks on behalf of toto15. These providers are bound by strict data processing agreements.
• Game studios and software providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymous session identifiers and gameplay data as a technical requirement of delivering their games via the toto15 Platform. These providers do not receive your name, contact details, or financial information.
• Legal and regulatory authorities: toto15 may be required by law to disclose personal data to law enforcement agencies, tax authorities, regulatory bodies, or courts of competent jurisdiction. We will notify you of any such disclosure where we are legally permitted to do so.
• Service providers and IT partners: Hosting providers, platform maintenance contractors, and analytics tool providers may process technical and usage data on toto15's behalf under data processing agreements that prohibit any secondary use of that data.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of toto15's business assets, personal data held by toto15 may be transferred to the acquiring entity. We will notify registered account holders of any such transfer in advance.

toto15 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations, whichever is longer. The following general retention periods apply:

• Active account data: Retained for the lifetime of your toto15 account, plus a post-closure retention period as described below.
• Post-closure retention: Following account closure, toto15 retains core identity, financial transaction, and KYC records for a minimum of five (5) years to comply with anti-money laundering obligations and to resolve any potential disputes arising after closure.
• Customer support records: Retained for three (3) years from the date of the relevant interaction, or for the duration of any active dispute, whichever is longer.
• Marketing data: Retained until you withdraw consent for marketing communications, at which point your data will be removed from active marketing lists within 14 days. Historical consent records will be retained as required for compliance purposes.
• Technical and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Individual session logs are retained for up to 12 months.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where full deletion is not technically feasible — for example, where data is stored in encrypted backup archives — data is isolated from active processing until the backup is due for destruction.

toto15 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform effectively. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These cookies maintain your login session, retain your account preferences, and enable secure access. They cannot be disabled without breaking Platform functionality.
• Functional cookies: Used to remember your preferences such as preferred language, display settings, and responsible gaming tool configurations. These enhance your experience but are not required for core functionality.
• Analytics cookies: Used to collect anonymised data about how users navigate the toto15 Platform. This data helps us identify technical issues and improve the user experience. Analytics data is aggregated and cannot be used to identify individual users.
• Security cookies: Used to detect and prevent fraudulent access attempts, identify suspicious login patterns, and protect the integrity of your toto15 account.

toto15 does not use advertising cookies or third-party tracking pixels that share your browsing behaviour with external advertising networks. You will not see toto15-related advertisements on other websites as a result of cookies set by the toto15 Platform.

toto15 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your device and the toto15 Platform is encrypted using TLS 1.2 or higher. Look for the padlock symbol and "https://" prefix in your browser address bar when accessing toto15.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and KYC materials — is encrypted in storage using strong encryption standards.
• Access controls: Access to personal data within toto15's internal systems is restricted to authorised personnel on a strict need-to-know basis. All access is logged and subject to regular audit review.
• Two-factor authentication (2FA): toto15 strongly recommends that all account holders enable 2FA on their toto15 account. Internal systems handling player data also require 2FA for staff access.
• Regular security assessments: toto15 conducts periodic reviews of its data security practices and technical infrastructure to identify and remediate vulnerabilities.
• Data breach procedures: In the event of a personal data breach that poses a risk to your rights and interests, toto15 will notify affected account holders without undue delay, and will take immediate steps to contain the breach and assess its impact.

While toto15 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are also responsible for protecting your own account credentials. Do not share your toto15 password with any third party, and contact toto15 support immediately at [email protected] if you suspect your account has been compromised.

toto15 respects your rights over your own personal data. Depending on the circumstances, you may hold the following rights in relation to the personal data toto15 holds about you:

• Right of access: You may request a copy of all personal data that toto15 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: If any personal data toto15 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: In certain circumstances, you may request that toto15 delete your personal data. Please note that deletion requests cannot be fulfilled where toto15 is required by law to retain data (for example, AML-related transaction records). In such cases, we will explain what data must be retained and for how long.
• Right to restriction: You may request that toto15 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being investigated.
• Right to portability: Where toto15 processes your personal data on the basis of your consent or a contractual obligation, you may request a copy of your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to withdraw consent: Where toto15 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to toto15's processing of your personal data where that processing is based on legitimate interests. toto15 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.

To exercise any of the above rights, please contact the toto15 data team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The toto15 Platform is strictly intended for adults aged 18 years and above. toto15 does not knowingly collect, process, or retain personal data from any person under the age of 18. Registration by persons under 18 is prohibited, and any account found to be held by a minor will be immediately closed.

If toto15 becomes aware that personal data has been collected from a person under the age of 18 — whether through account registration, a support interaction, or any other channel — that data will be deleted immediately and the relevant account closed. Any deposits associated with such an account will be returned in full to the originating payment method. Any winnings will be voided.

If you are a parent or guardian and believe that your child has registered a toto15 account or otherwise provided personal information to toto15, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, to delete all associated data.

The toto15 Platform does not contain links to external third-party websites unrelated to the toto15 Services. However, game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) operates within the toto15 Platform environment under technical integration agreements. toto15 does not control the data practices of these game studios in their own separate business operations.

Payment method providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — each operate their own platforms and privacy policies that govern how they handle your financial data. When you use a payment method to deposit or withdraw on toto15, the transaction data passed to that provider is governed by the provider's own privacy policy in addition to this one. toto15 recommends reviewing the privacy policies of any payment provider you use.

toto15 is not responsible for the content, privacy practices, or data handling of any third-party provider, and this Privacy Policy applies solely to data collected and processed by toto15 itself through the https://toto15.vu Platform.

toto15 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and Services offered on the Platform. All updates will be published on this page at https://toto15.vu/privacy-policy with an updated "last updated" date.

For material changes — meaning changes that substantially alter how we collect or use your personal data, or that affect your rights — toto15 will provide advance notice via email to your registered account address or via a notification displayed upon your next login. Minor corrections, formatting updates, and clarifications that do not substantively affect your rights will not be individually notified.

Your continued use of the toto15 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change to this Privacy Policy, you may request closure of your toto15 account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way toto15 handles your personal data, please contact us using the details below:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for privacy-related matters. This address is displayed as plain text only and is not a clickable link.
• Live Chat: Available 24 hours a day, 7 days a week via the toto15 Platform. Live chat is the fastest channel for urgent privacy concerns including suspected data breaches affecting your account.
• Response time: Data rights requests and privacy enquiries are acknowledged within 5 business days and resolved within 30 calendar days wherever possible.