LEGAL REFERENCE

Your Privacy Matters to Us

We've built bdtoto around your trust. This privacy policy explains how we collect, use and protect your personal information when you open an account, deposit via DANA, OVO...

Data ProtectionTransparent PracticesYour ControlSecure PaymentsIndonesia-Compliant
bdtoto Your Privacy Matters to Us

How We Handle Your Information

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Privacy Questions? We're Here

Email Support Send privacy concerns to our data protection team...
Live Chat Chat with our support agents during business hours...
Account Settings Manage your privacy preferences directly in your bdtoto...
TRUST MARKERS

Why Your Privacy Is Secure With Us

Encryption Standard

All data transmitted between your device and our servers uses SSL/TLS encryption. Your account credentials, payment details and personal information are protected by military-grade security protocols.

Regular Audits

We conduct quarterly security audits and penetration testing to identify vulnerabilities. Third-party security firms verify our systems meet international data protection benchmarks.

Limited Access

Only authorised bdtoto staff can access your personal data, and only when necessary for account support or fraud prevention. All access is logged and monitored for compliance.

Payment Compliance

We partner with certified payment processors for DANA, OVO, GoPay and QRIS transactions. Your financial data never touches our servers directly; it's handled by PCI-DSS compliant partners.

Data Retention

We keep your information only as long as needed to provide our service and meet legal obligations. After account closure, we securely delete personal data within 90 days unless law requires retention.

Transparency Reports

We publish annual transparency reports showing government data requests we receive and how we respond. You can review our commitment to protecting your privacy against external pressure.

Our Privacy Approach Across bdtoto

Account Registration
We collect only essential information: name, email, phone and date of birth. No unnecessary data gathering; every field serves account security or regulatory compliance.
Live Casino Tables
Your gameplay data is anonymised in our analytics. We track session duration and game preferences to improve your experience, but never link this to your identity in reports.
Slot Lobbies
Slot activity is logged for responsible account management and fraud detection. We don't sell your gaming history to third parties or use it for external marketing.
Sportsbook Markets
Your betting history stays private. We use it internally to detect suspicious patterns and prevent account abuse, but never share it with sports leagues or external analysts.
Payment Processing
DANA, OVO, GoPay and QRIS transactions are processed through encrypted channels. We store only transaction IDs and amounts; your wallet credentials are never stored on our servers.
Email Communications
We send account updates, promotion alerts and security notices. You can unsubscribe from marketing emails anytime in your settings; transactional emails cannot be disabled.
Third-Party Sharing
We share data only with payment processors, fraud-detection services and legal authorities when required by law. We never sell your information to advertisers or data brokers.
PLATFORM SNAPSHOT

What This Privacy Policy Covers

Account Security We explain how we protect your login credentials, verify your...
Payment Data Details on how DANA, OVO, GoPay and QRIS transactions are...
Cookies & Tracking We use cookies to remember your preferences, keep you logged...
Your Rights You have the right to access your data, correct inaccuracies...
Policy Updates We update this policy when our practices change. We'll notify...
Dispute Resolution If you believe we've mishandled your data, contact us first...

Privacy Policy Questions Answered

We retain your data while your account is active and for 90 days after closure, unless law requires longer retention. Payment records are kept for seven years to comply with Indonesian financial regulations. You can request early deletion anytime.

Yes. Contact our support team to request account deletion. We'll remove your personal information within 30 days, except transaction records required by law. Your request is processed securely and confirmed via email.

Absolutely. Your payment credentials are never stored on our servers. Transactions are processed through encrypted channels by certified payment partners. We use tokenisation so we never see your full wallet details.

No. We never sell your personal information to advertisers, data brokers or marketing firms. We share data only with payment processors, fraud-detection services and legal authorities when required by law.

Log into your account and visit Communication Preferences. You can unsubscribe from promotions, newsletters and marketing emails instantly. Account security alerts and transaction confirmations cannot be disabled for your protection.

We monitor our systems 24/7 for security threats. If a breach occurs, we notify affected users within 72 hours with details of what happened and steps to protect your account. We also report to Indonesian authorities as required.

Yes. Submit a data access request to our support team. We'll compile your personal information, account history and transaction records into a portable format and send it within 14 days at no cost.