toto15 is committed to protecting the personal information of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
All personal data collected by toto15 is stored on encrypted servers. We implement industry-standard security controls to prevent unauthorized access, disclosure, or misuse.
toto15 collects only the personal data necessary to operate your account, process payments, comply with regulatory requirements, and deliver a safe gaming experience.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and port your personal data. toto15 honours all data subject rights requests promptly.
toto15 does not sell your personal data to third parties. Limited sharing occurs only with verified processors (payment providers, game providers) under binding data processing agreements.
toto15 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and PAGCOR regulatory obligations.
In the event of a personal data breach that poses a risk to your rights, toto15 will notify you and the National Privacy Commission within the timeframes prescribed by RA 10173.
This Privacy Policy ("Policy") is issued by toto15 ("toto15," "we," "us," "our") and applies to all personal information collected from individuals ("you," "Data Subject") who access or use the toto15 online gaming platform at toto15.co, including all associated gaming products, sports betting services, bingo rooms, payment interfaces, customer support channels, and any other features offered by toto15.
This Policy is intended to comply with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). By creating an account or otherwise using the toto15 Platform, you acknowledge that you have read, understood, and agree to the collection and processing of your personal information as described in this Policy.
This Policy should be read in conjunction with toto15's Terms and Conditions and Responsible Gaming policies, which together form the complete framework governing your relationship with toto15.
toto15 acts as the Personal Information Controller (PIC) in respect of all personal data collected from users of the Platform, as defined under Section 3(h) of the Data Privacy Act of 2012. As PIC, toto15 determines the purposes and means of processing personal information collected through the Platform.
toto15 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with RA 10173 and this Policy. All data privacy inquiries, subject access requests, and complaints may be directed to the toto15 DPO through the contact details set out in Section 15 of this Policy.
toto15 collects the following categories of personal data, depending on your level of interaction with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Account registration & KYC |
| Contact Data | Philippine mobile number, email address | Account registration |
| KYC Documents | Government-issued ID (e.g., PhilSys, passport, driver's licence), selfie verification | Identity verification prior to first withdrawal |
| Financial Data | GCash number, Maya account reference, bank account name and number, transaction history | Deposit & withdrawal processing |
| Gaming Activity Data | Game history, bet amounts, win/loss records, session durations, product preferences | During active use of the Platform |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automatically upon Platform access |
| Communications Data | Live chat transcripts, email correspondence, support ticket contents | Customer support interactions |
| Marketing Preferences | Communication opt-in/opt-out status, preferred contact method | Registration and account settings |
toto15 does not intentionally collect sensitive personal information as defined under Section 3(l) of RA 10173 (such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation) unless required by a specific regulatory obligation, in which case explicit consent will be obtained.
toto15 collects personal data through the following methods:
toto15 processes your personal data on the following legal grounds under RA 10173 and its Implementing Rules:
toto15 uses the personal data it collects for the following specific purposes:
The toto15 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain login sessions, remember your preferences, and analyse aggregate usage patterns. Below is a summary of the cookie categories used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential | Login session tokens, CSRF protection, load balancing. Cannot be disabled without breaking core Platform functions. | No — necessary for operation |
| Functional | Remembering language preferences, game display settings, responsible gaming notification thresholds. | No — non-intrusive functionality |
| Analytics | Aggregated usage statistics — page views, session durations, feature interaction rates — used to improve the Platform. Data is anonymised before analysis. | Yes — opt-in |
| Marketing | Tracking promotional campaign effectiveness and personalising bonus offers. Only activated where you have consented to marketing communications. | Yes — opt-in |
You may manage your cookie preferences through your browser settings. Disabling essential cookies will impair or prevent access to the toto15 Platform. Disabling functional, analytics, or marketing cookies will not prevent Platform access but may reduce the personalisation of your experience.
toto15 does not sell, rent, or trade your personal data to third parties. toto15 shares personal data only in the following limited circumstances, and only to the minimum extent necessary:
toto15 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your account, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:
Upon expiry of the applicable retention period, toto15 will securely delete or permanently anonymise the relevant personal data. Anonymised or aggregated data that can no longer identify you may be retained indefinitely for statistical and product improvement purposes.
toto15 implements technical and organisational security measures appropriate to the risk associated with the personal data we process. These measures are designed to protect your data against accidental loss, unauthorised access, disclosure, alteration, or destruction.
Key security measures employed by toto15 include:
Under the Data Privacy Act of 2012 and its Implementing Rules, you are entitled to exercise the following rights in respect of your personal data held by toto15. Requests to exercise any of these rights should be submitted in writing to toto15's Data Protection Officer using the contact details in Section 15.
You have the right to be informed of how toto15 collects, uses, and processes your personal data. This Policy fulfils that obligation.
You may request a copy of the personal data toto15 holds about you, together with information about how it is being processed.
You may request correction of inaccurate, incomplete, or outdated personal data held about you by toto15.
You may request deletion of your personal data where there is no longer a lawful basis for its processing, subject to toto15's legal retention obligations.
You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
You may request a copy of the personal data you provided to toto15 in a structured, machine-readable format for transfer to another service.
You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, in accordance with RA 10173.
If you believe toto15 has violated your data privacy rights, you may file a complaint with the National Privacy Commission at privacy.gov.ph.
toto15 will respond to data subject rights requests within thirty (30) calendar days of receipt, or within the timeframes prescribed by RA 10173 and NPC issuances. In complex cases, this period may be extended by a further thirty (30) days with prior notice to you.
toto15 reserves the right to decline requests that are manifestly unfounded, excessive, or that conflict with toto15's legal obligations — including AML record-keeping requirements that mandate retention of certain data regardless of erasure requests.
The toto15 Platform is strictly intended for use by persons who are 21 years of age or older. toto15 does not knowingly collect personal data from persons below the age of 21.
If toto15 discovers or has reason to believe that personal data has been collected from a person below 21 years of age, toto15 will take immediate steps to suspend the relevant account, delete the associated personal data, and — where required — report the matter to applicable regulatory authorities.
toto15 primarily processes and stores personal data within the Philippines. In limited circumstances — including the use of third-party game providers and certain technology infrastructure providers — personal data may be transferred to or processed in jurisdictions outside the Philippines.
Where such cross-border transfers occur, toto15 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that impose data protection obligations equivalent to those required under RA 10173, or reliance on the NPC's guidelines for cross-border data transfers. toto15 will not transfer personal data to a jurisdiction that does not provide an adequate level of protection without implementing appropriate safeguards.
toto15 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. Material changes will be communicated to registered Players via Platform notification or registered mobile number, with a minimum of fourteen (14) days' notice prior to the changes taking effect, except where immediate changes are required by law or a regulatory authority.
The current effective version of this Privacy Policy will always be accessible on the Platform at toto15.co/privacy-policy. The "Last Reviewed" date at the top of this Policy indicates when the most recent review was conducted. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the updated terms.
For any questions, concerns, or requests relating to this Privacy Policy or toto15's processing of your personal data — including data subject rights requests — please contact toto15's Data Protection Officer:
toto15 will acknowledge receipt of all data privacy requests within seventy-two (72) hours and will provide a substantive response within the timeframes set out in Section 11 of this Policy.
If you are not satisfied with toto15's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012.
🎰 Your Data Is Safe With Us
toto15 is built for Filipino players who deserve a safe, fair, and transparent gaming platform. Your data is protected. Your funds are secure. And your privacy comes first.
21+ only · PAGCOR Regulated · RA 10173 Compliant · Philippines Only