hdtoto Platform Privacy Notice

This page describes what we collect when you use hdtoto and how we keep that data protected. We at hdtoto process personal information including your name, email address, payment details, and betting history only to deliver our service where local law permits. We do not sell your data to third parties. We store some information on servers located outside Indonesia, subject to standard data-protection practices.

Our privacy commitments apply to all users of hdtoto across football betting, live-dealer games, slot entertainment, and esports markets. Whether you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer through mobile banking, local payment, online payment, and e-wallet, your payment information is encrypted and processed through secure payment gateways we have vetted.

If you have questions about how we handle your data or wish to exercise your privacy rights, contact our support team. This notice may be updated periodically; we recommend reviewing it before each use of hdtoto.

What data we collect on hdtoto

We collect information in several categories. During account registration, we request your email address, username, full name, date of birth, and contact number. We require a government-issued ID (national ID card, passport, or driving licence) for Know Your Customer (KYC) verification before your first deposit.

When you place bets on Liga 1, Piala Indonesia, Piala AFF, or other football tournaments, we record your betting history, stakes, market selections, and outcomes. When you join live-dealer tables or play slots, we log session activity, game duration, and payouts. This betting data helps us prevent fraud, resolve disputes, and comply with local gaming regulations.

Payment information collected during deposit includes the payment method you select, transaction amount, timestamp, and confirmation status. We do not store full credit card numbers or bank account details; our payment partners retain this information on encrypted, PCI-compliant servers. We retain transaction records for accounting and regulatory purposes.

We also collect technical data: your IP address, device type, browser information, and cookie identifiers. This helps us diagnose technical issues, prevent unauthorized access, and track your session activity on hdtoto. During holidays such as Idul Fitri and Idul Adha, when fixture schedules shift and traffic increases, our servers log aggregated usage patterns to manage performance.

How we use your data on hdtoto

We use your information for the following purposes:

Data location: Our servers are located outside Indonesia. Your data may be processed, stored, and accessed from multiple jurisdictions. By using hdtoto, you consent to this international data transfer.

Third parties and data sharing on hdtoto

We share your information only with service providers who assist us in operating hdtoto. These include payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and our banking partners mobile banking, local payment, online payment, e-wallet), data-hosting providers, and customer-support platforms. All third parties sign data-protection agreements and are prohibited from using your information for purposes other than the service they provide to us.

We do not sell, rent, or trade your personal data to advertising networks, data brokers, or unaffiliated third parties. We may disclose information if required by law, court order, or government request. If a legal request is made, we will attempt to notify you unless prohibited by law.

If hdtoto is acquired, merged with another entity, or undergoes restructuring, your data may be transferred as part of that transaction. We will notify you of any such change and your options regarding your data.

Your rights and choices on hdtoto

You have the right to access, correct, and delete your personal information subject to our operational and legal obligations. You may request a copy of the data we hold about you by contacting our support team. You may request that we correct inaccurate information or delete your account and associated data, though some information may be retained for legal or fraud-prevention purposes.

You have the right to object to our processing of your data for marketing purposes. You may unsubscribe from promotional emails and SMS by clicking the unsubscribe link in any message or updating your preferences in your hdtoto account settings.

If you believe we have processed your data in violation of privacy law, you may lodge a complaint with your local data-protection authority. We encourage you to contact us first so we may attempt to resolve your concern directly.

Cookies and tracking on hdtoto

We use cookies to remember your login status, track your session activity, and analyze how you use hdtoto. Cookies are small text files stored on your device. Essential cookies are necessary for hdtoto to function; without them, you cannot log in or place bets. Analytics cookies help us understand user behaviour and optimize performance.

You may disable non-essential cookies through your browser settings, but this may impair your experience on hdtoto. Third-party services (such as cloud-hosting providers) may also place cookies; review their privacy policies for details.

Data retention and security on hdtoto

We retain your account information while your account is active. After account closure, we retain certain data (transaction history, identity documents) for seven years to comply with gaming regulations and fraud-prevention requirements. Betting history is retained for your reference and for dispute resolution.

We encrypt all data in transit using industry-standard TLS protocols. Password hashes are salted and encrypted. We undertake reasonable security measures including firewalls, access controls, and regular security audits. However, no system is completely secure; we cannot guarantee absolute security against all threats. If we detect a data breach, we will notify affected users and relevant authorities as required by law.

KYC
Know Your Customer — identity verification required before first deposit on hdtoto.
TLS
Transport Layer Security — encryption protocol protecting data in transit between your device and our servers.
Cookie
Small file stored on your device to remember login status and track session activity on hdtoto.
Data retention
How long we keep your information; typically seven years for betting history and identity records.

Jurisdiction and changes to this policy

This privacy notice applies to all users of hdtoto. Our services are available only where local law permits; you are responsible for ensuring your access complies with your jurisdiction's laws. We do not operate in regions where online gaming is prohibited.

We may update this privacy notice periodically to reflect changes in our practices, technology, or law. Material changes will be posted on this page. Your continued use of hdtoto following any update constitutes your acceptance of the revised notice. If you disagree with changes, you may close your account.

For privacy inquiries, data-access requests, or complaints, contact our support team via email or the contact form on hdtoto. We will respond to your request within a reasonable timeframe according to applicable law. Support is available in English and Bahasa Indonesia.