wwwtotoPrivacy Policy

This page describes what we collect when you use wwwtoto and how we keep that data protected. We take your privacy seriously. When you create an account, deposit funds, place bets on Liga 1 or Piala AFF football, play live-dealer blackjack or roulette, spin slots like Aviator or Sweet Bonanza, or access our esports markets (Mobile Legends, Free Fire, PUBG Mobile), we collect certain information. We use that information only to operate our platform, process your payments through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, and comply with applicable law.

We do not sell your data to third parties. We do not share your account details with advertisers or data brokers. We encrypt your payment information and store it securely. Our servers may sit outside your jurisdiction, but we apply the same security standards regardless of location. This policy explains our practices in plain language — no legal jargon, no hidden clauses.

If you have questions about how we handle your data, contact our support team. We respond to data requests within 30 days.

What Data We Collect on wwwtoto

When you open an account on wwwtoto, we collect your email address, phone number, full name, date of birth, and residential address. We use this information to verify your identity, prevent fraud, and comply with anti-money-laundering regulations. We do not collect this data for marketing purposes — we collect it because law requires us to know who our users are.

When you deposit funds through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer (mobile banking, local payment, online payment, e-wallet), we collect transaction records: the amount, date, time, and payment method. We do not store your full bank account number or card details — our payment processors handle that encryption. We store only a reference token that lets us match deposits to your account.

When you use wwwtoto, we collect:

  • Betting activity: Every bet you place on Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton, Mobile Legends, Free Fire, PUBG Mobile, or any other market. We record the bet amount, odds, outcome, and settlement time.
  • Game play: When you play live-dealer blackjack, roulette, baccarat, Dragon Tiger, or slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), we record your session duration, bets placed, and results.
  • Device and network data: Your device type (Android phone, iPhone, desktop), operating system version, browser type, IP address, and approximate location (city level, not street address). We use this to detect fraud and optimise our platform for your device.
  • Login history: When you log in, from which device, and from which approximate location. We use this to alert you to suspicious access attempts.
  • Support interactions: If you contact our support team via email or live chat, we keep records of your questions and our responses.

We do not collect location data continuously

We infer your approximate location from your IP address only. We do not request permission to access your phone's GPS or location services. Your precise location remains private.

Cookies and tracking: when you visit wwwtoto, we use cookies to remember your login session, language preference, and account settings. These are functional cookies — they make the platform work. We do not use tracking cookies to follow you across other websites. We do not use cookies to build a profile of your browsing habits outside wwwtoto.

Push notifications: if you enable push notifications on your Android or iOS device, we send alerts about match results, bet settlements, and account activity. You can disable notifications at any time in your account settings or your device settings. Disabling notifications does not affect your account or betting activity.

How We Use and Protect Your Data on wwwtoto

We use your data for these purposes only:

  • Account management: Creating and maintaining your account, processing deposits and withdrawals, and settling bets.
  • Fraud prevention: Detecting suspicious activity, preventing account takeovers, and blocking duplicate accounts.
  • Legal compliance: Verifying your identity, reporting to financial authorities where required by law, and maintaining records for audit purposes.
  • Platform improvement: Analysing how users interact with wwwtoto to fix bugs, improve performance, and optimise the mobile experience.
  • Customer support: Responding to your questions and resolving account issues.

We do not use your data for marketing emails, targeted advertising, or selling to third parties. We do not share your betting history with other companies. We do not profile you based on your game preferences or betting patterns for purposes outside wwwtoto.

Third-party processors: We use payment processors (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers), email providers, and cloud hosting services. These processors see only the data necessary to perform their function — for example, your payment processor sees your transaction amount but not your betting history.

Data Security on wwwtoto

We encrypt all data in transit using TLS (Transport Layer Security). Your login credentials are hashed — we never store your password in plain text. Your payment information is encrypted and stored separately from your account profile. We use firewalls, intrusion detection, and regular security audits to protect our servers.

Our servers may be located outside your jurisdiction (for example, in Singapore or the Philippines). Regardless of server location, we apply the same encryption and security standards. Your data is protected by the same technical measures whether it sits in Jakarta, Surabaya, Bandung, Medan, or overseas.

If we detect a data breach, we notify affected users within 72 hours. We do not attempt to hide breaches or delay notification. We work with cybersecurity experts to investigate, contain, and remediate any incident.

Your Rights on wwwtoto

You have the right to:

  • Access your data: Request a copy of all data we hold about you. We provide this in a readable format (CSV or PDF) within 30 days.
  • Correct your data: If your name, address, or other details are wrong, contact us and we update them immediately.
  • Delete your data: Request deletion of your account and associated data. We retain transaction records for seven years to comply with financial regulations, but we delete your personal profile, betting history, and device information.
  • Opt out of cookies: Disable non-essential cookies in your browser settings. Functional cookies (login, language) cannot be disabled without breaking the platform.
  • Disable notifications: Turn off push notifications in your account settings or device settings at any time.

To exercise any of these rights, email our support team or use the "Data Request" form in your account settings. We respond within 30 days. We do not charge a fee for data requests unless your request is excessive or repetitive.

Jurisdiction and Changes to This Policy

Our services on wwwtoto are available only where local law permits. We do not operate in jurisdictions where online gaming is prohibited. You are responsible for verifying that your access and use comply with your own jurisdiction's law.

We may update this privacy policy from time to time. When we make material changes, we notify you via email or a prominent notice on wwwtoto. Your continued use of the platform after notification means you accept the updated policy. If you disagree with changes, you can close your account and request deletion of your data.

If you have questions about this policy or how we handle your data, contact our support team. We are committed to transparency and will answer your questions clearly and promptly.