Your privacy matters to toto20. This policy explains exactly what personal data we collect, how we use it, who we share it with, and how we keep it safe — in plain, formal English.
A plain-English summary of the six principles that guide how toto20 handles your personal data. Full legal detail is provided in the numbered sections below.
toto20 collects only the personal data that is strictly necessary for account registration, payment processing, identity verification, and the provision of our gaming and betting services to players in Bangladesh.
toto20 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is used solely to operate and improve the toto20 platform for your benefit.
All data stored by toto20 is protected using SSL encryption in transit and robust security measures at rest. Player payment details, identity documents, and account credentials are handled with the highest level of care.
toto20 players have the right to access, correct, or request deletion of their personal data at any time. Submit a data request to [email protected] and our team will respond within a reasonable timeframe.
toto20 does not store complete payment credentials. bKash, Nagad, and Rocket transaction data is processed through the respective payment provider's secure infrastructure and is not retained on toto20 servers beyond what is required for transaction records.
toto20 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Inactive account data is reviewed and managed on a regular schedule.
toto20 is an online entertainment platform operating at toto20.cam, providing sports betting, live casino, slot games, and related services to players in Bangladesh. In the course of operating these services, toto20 collects and processes certain personal data relating to its players and website visitors. This Privacy Policy sets out, in formal and transparent terms, exactly how that data is handled.
This Privacy Policy should be read alongside the toto20 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. Capitalised terms used in this Privacy Policy and not otherwise defined herein carry the meanings ascribed to them in the Terms & Conditions.
toto20 is committed to handling all personal data with integrity, transparency, and appropriate security safeguards. We do not engage in the sale, rental, or unauthorised disclosure of player data to third parties for commercial gain.
For the purposes of this Privacy Policy, toto20 acts as the data controller in respect of all personal data collected from players and website visitors through the toto20 platform. The data controller is responsible for determining the purposes and means by which personal data is processed.
All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the toto20 data protection contact at: [email protected]. toto20 will acknowledge all formal data requests within five (5) business days and endeavour to resolve them within thirty (30) calendar days.
toto20 collects personal data in the following categories, depending on your interactions with the platform:
| Category | Data Types Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID details | Registration form; KYC verification submission |
| Contact Data | Mobile phone number, email address, city/district of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form; account update submissions |
| Financial Data | Payment method type (bKash, Nagad, Rocket), transaction reference numbers, deposit and withdrawal amounts in BDT (৳) | Payment processing; transaction records |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automated collection via server logs and cookies |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Automated collection via platform analytics |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Direct communication with toto20 support |
toto20 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments and only with the Player's explicit consent.
toto20 uses the personal data collected for the following purposes:
toto20 processes personal data on one or more of the following legal bases:
toto20 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. toto20 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:
All third parties with whom toto20 shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only for the purposes for which it was shared.
The toto20 platform uses cookies and similar tracking technologies to enhance user experience, maintain session state, and collect analytics data. The following categories of cookies may be placed on your device when you visit toto20.cam:
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the toto20 platform, including your ability to maintain a logged-in session. toto20 does not use cookies to serve third-party advertising to players.
toto20 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention guidelines apply:
When personal data is no longer required and no legal retention obligation applies, toto20 will securely delete or anonymise that data so that it can no longer be attributed to an identifiable individual.
toto20 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While toto20 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their toto20 account and to avoid sharing login credentials with any third party. If you suspect your account has been compromised, contact [email protected] immediately.
As a toto20 player, you have the following rights with respect to your personal data:
To exercise any of the above rights, please submit your request in writing to [email protected]. toto20 will respond within five (5) business days of receipt and resolve the request within thirty (30) calendar days, subject to the complexity of the request and any applicable legal exceptions.
The toto20 platform is strictly intended for individuals aged 18 and above. toto20 does not knowingly collect, store, or process personal data relating to individuals under the age of 18. If toto20 becomes aware that personal data has been submitted by or on behalf of a person under 18, that data will be deleted promptly and the associated account will be closed.
If you are a parent or guardian and believe that a minor has registered on the toto20 platform or submitted personal data without your consent, please contact [email protected] immediately. toto20 recommends the use of parental control software on shared household devices to prevent minors from accessing age-restricted platforms.
The toto20 platform may contain references to or integrations with third-party services, including payment providers (bKash, Nagad, Rocket) and game content providers. While toto20 takes reasonable care in selecting these partners, toto20 is not responsible for the privacy practices or the content of any third-party service. Players who interact with third-party services are encouraged to review the relevant third party's own privacy policy before providing personal data to that service.
This Privacy Policy applies exclusively to the toto20 platform at toto20.cam and does not govern the data practices of any third-party service, even where that service is accessible through the toto20 platform.
toto20 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or improvements to the toto20 platform. Where amendments are material, toto20 will endeavour to notify registered players via the email address associated with their account, or by publishing a prominent notice on the toto20 platform, prior to the changes taking effect.
The revised Privacy Policy will be published on this page with an updated effective date. Your continued use of the toto20 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the amended Privacy Policy, you must cease using the platform and may request account closure by contacting [email protected].
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way toto20 handles your personal data, please contact the toto20 data protection team using the details below. Our support agents are available around the clock, including weekends, BPL match days, and Eid holidays, and are able to assist in both English and Bengali.
For formal data subject access requests, please include your registered toto20 username, the email address associated with your account, and a clear description of the data request or concern. Providing this information upfront will help toto20 process your request as efficiently as possible.
Our support team is available 24/7 to handle data requests, account queries, and anything else you need. You can also explore our Terms & Conditions, visit our FAQ, or head to the toto20 platform.