This Privacy Policy explains what personal information toto15 collects from players and visitors, how that information is used, how it is protected, and what rights you have under Philippine data privacy law. toto15 takes your privacy seriously as a core obligation — not an afterthought.
Six core commitments toto15 makes to every Filipino player regarding their personal data.
toto15 processes all player personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. We are committed to the principles of transparency, legitimate purpose, and proportionality in all data processing activities.
Every data transmission between your device and toto15 is protected by industry-standard SSL/TLS encryption. Account data, payment details, and personal information are stored with encryption at rest. toto15 employs technical and organizational security measures to prevent unauthorized access, loss, or disclosure of your data.
toto15 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is used exclusively to provide toto15 platform services, comply with PAGCOR and legal obligations, and improve the player experience — nothing else.
As a data subject under Philippine law, you have the right to access, correct, delete, and port your personal data held by toto15. You may object to certain processing activities. toto15 responds to all valid data subject requests within 15 business days and maintains a Data Protection Officer for oversight.
toto15 retains personal data only for as long as necessary for the purpose it was collected, or as required by Philippine law and PAGCOR licensing obligations. Financial transaction records are retained for a minimum of five years in compliance with anti-money laundering requirements. Account data is deleted or anonymized following confirmed account closure.
In the event of a personal data breach that poses a real risk to your rights and freedoms, toto15 will notify affected players and the National Privacy Commission (NPC) within the timeframes required under the Data Privacy Act of 2012 and NPC Circular No. 16-03. We maintain an incident response plan for this purpose.
toto15 ("we," "us," "our") operates the online gaming platform accessible at toto15.bio, serving Filipino players across the Philippines. This Privacy Policy describes how toto15 collects, uses, stores, protects, and shares personal information in connection with the operation of the toto15 Platform.
This Privacy Policy applies to all players, registered account holders, website visitors, and any other natural persons whose personal data is processed by toto15 in connection with the Platform. It applies regardless of how you access the toto15 Platform — whether through a desktop browser, mobile browser, or any other interface.
By registering a toto15 account or using the Platform in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the toto15 Platform.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, toto15 is the personal information controller in respect of the personal data it collects from players and visitors. This means toto15 determines the purposes and means of processing your personal data.
toto15 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA, handling data subject requests, and managing the toto15 privacy program. The DPO may be contacted via the details provided in Section 16 of this Policy.
Certain third-party service providers engaged by toto15 — including game content providers and payment processors — may act as personal information processors in relation to specific categories of data. These relationships are governed by data processing agreements that obligate processors to handle data in accordance with toto15's instructions and applicable law.
toto15 collects the following categories of personal data in connection with Platform operations:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Account registration, KYC/AML compliance, age verification (21+ requirement) |
| Contact Data | Email address, Philippine mobile number, residential address | Account communications, OTP delivery, support correspondence |
| Financial Data | GCash account reference, bank account details (BPI, BDO, Metrobank), transaction history in PHP | Payment processing, withdrawal verification, AML monitoring |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Fraud prevention, security monitoring, platform optimization |
| Usage Data | Game history, session duration, betting patterns, navigation behaviour on Platform | Responsible gaming monitoring, platform improvement, bonus eligibility |
| Communications Data | Live chat transcripts, email exchanges with support team | Quality assurance, dispute resolution, compliance record-keeping |
| Verification Documents | Copies of government-issued Philippine ID, proof of address documents | KYC identity verification as required by PAGCOR licensing |
toto15 does not collect or process sensitive personal information — such as health data, political opinions, or biometric data — except where expressly required by applicable law or with your explicit consent.
toto15 collects personal data directly from you when you: register a toto15 account; complete KYC identity verification; make a deposit or request a withdrawal; contact toto15 customer support; respond to surveys or promotional offers; or activate responsible gaming tools such as self-exclusion or deposit limits.
When you visit or use the toto15 Platform, technical data including IP addresses, device identifiers, browser type, and session information is collected automatically through standard server logs, cookies, and similar tracking technologies. This data is used for security monitoring, fraud prevention, and platform performance analysis. See Section 8 for cookie-specific details.
toto15 may receive personal data from third-party sources in limited circumstances, including: identity verification service providers engaged for KYC compliance; payment processors confirming transaction authentication; and fraud prevention databases used to protect the integrity of the Platform. All such third-party data processing is governed by appropriate data sharing agreements.
Under the Data Privacy Act of 2012, toto15 relies on the following legal bases for processing your personal data:
toto15 uses the personal data it collects for the following purposes:
No profiling for unsolicited marketing: toto15 does not use automated profiling to target players with unsolicited commercial offers from third parties. Any marketing communications you receive from toto15 relate directly to toto15 Platform promotions and are sent on the basis of your registration or explicit consent.
toto15 does not sell, rent, or trade your personal data to third parties. Disclosure of your personal data is limited to the following categories of recipients and circumstances:
toto15 is required under PAGCOR licensing conditions and Philippine law to disclose certain player data to PAGCOR and other government authorities upon request. This includes the Anti-Money Laundering Council (AMLC) in relation to suspicious transaction reporting obligations under the AMLA.
toto15 engages third-party service providers who process personal data on our behalf as personal information processors. These include: payment processing partners (GCash, PayMaya, and banking partners); KYC identity verification service providers; game content platform providers; IT infrastructure and hosting providers; and customer support tool providers. All processors are bound by contractual data processing agreements and may not use your data for any purpose beyond the specific service they provide to toto15.
toto15 may disclose personal data to law enforcement authorities, courts, or other government bodies where required by a valid legal order, warrant, or court direction issued under Philippine law.
In the event of a merger, acquisition, or transfer of all or part of toto15's business, player personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and your rights under the DPA will be preserved.
toto15 uses cookies and similar tracking technologies on the Platform for the following purposes:
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in to and use the toto15 Platform. toto15 does not use third-party advertising cookies or cross-site tracking technologies.
toto15 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:
While toto15 employs robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your toto15 account credentials. Never share your toto15 password with anyone — including persons claiming to be toto15 staff.
toto15 retains personal data for the minimum period necessary to fulfill the purposes described in this Privacy Policy, subject to the following retention principles:
Upon expiry of applicable retention periods, personal data is securely deleted or anonymized so that it can no longer be attributed to a specific individual.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by toto15:
The toto15 Platform is strictly intended for individuals who are 21 years of age or older in accordance with Philippine gaming law and PAGCOR licensing conditions. toto15 does not knowingly collect personal data from persons under 21 years of age.
toto15 employs age verification procedures during registration and KYC processes to enforce the 21+ requirement. If toto15 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed in accordance with our Terms & Conditions.
If you are a parent or guardian and believe a minor has registered on toto15, contact us immediately via live chat. toto15 takes underage access extremely seriously and will act promptly to address any such report.
The toto15 Platform integrates with third-party service providers to deliver certain features, including payment processing (GCash, PayMaya, BPI, BDO, Metrobank), live dealer game streaming, RNG slot content, and identity verification. These integrations may involve the transfer of limited personal data to those providers solely for the purpose of delivering the relevant service.
Third-party providers integrated with toto15 are contractually bound to process personal data only in accordance with toto15's instructions, applicable law, and their own published privacy policies. toto15 does not embed third-party advertising, social media tracking pixels, or third-party analytics tools on the Platform that would share your personal data with external parties for commercial purposes without your consent.
toto15 is not responsible for the privacy practices of third-party websites that are not part of the toto15 Platform. This Privacy Policy applies exclusively to toto15.bio and the toto15 Platform.
Where personal data processed by toto15 is transferred to, or accessed by, service providers located outside the Philippines — for example, game content platform providers or cloud infrastructure providers — toto15 ensures that appropriate safeguards are in place to protect that data in accordance with the requirements of the Data Privacy Act of 2012.
Safeguards for international transfers may include: contractual clauses requiring recipient processors to apply data protection standards equivalent to those required under Philippine law; data processing agreements consistent with NPC guidelines on cross-border data flows; or transfers to jurisdictions with adequate data protection laws as recognized under applicable NPC guidance.
toto15 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The effective date of the current version is displayed at the top of this page.
Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is processed — toto15 will notify registered players by email or platform notification at least 7 days before the changes take effect. Continued use of the toto15 Platform after the updated Privacy Policy takes effect constitutes your acceptance of the revised policy.
You are encouraged to review this Privacy Policy periodically. The most current version is always accessible at toto15.bio/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or toto15's data processing practices, you may contact toto15 and our Data Protection Officer through the following channels:
If you are dissatisfied with toto15's handling of your personal data or a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012.
Play on a PAGCOR-regulated platform that treats your data with the same care it gives your gaming experience. Questions about your data? Our support team is available 24/7 on Philippine Standard Time.