tbtoto Platform Privacy Notice

This page describes what we collect when you use tbtoto and how we keep that data protected. We process personal information — your email, identity documents, payment details, gameplay history — to operate our platform, comply with legal requirements, and support your account. Our privacy practices apply to all users in jurisdictions where tbtoto services are available.

We treat your data as confidential. We do not sell it to third parties, share it for marketing, or use it beyond the scope needed to run our service. This notice explains our data collection, use, storage, and your rights regarding information you provide to us on tbtoto.

What We Collect on tbtoto

We collect different categories of information depending on your interaction with tbtoto. When you register, we ask for your email address and password. When you complete identity verification (KYC), we collect your government-issued ID, proof of address, and full name. We store this information to confirm your identity and comply with financial regulations.

When you deposit or withdraw funds, we collect payment details — your chosen method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet account information). We also collect your bank or e-wallet identifier so we can process transfers and reconcile transactions.

During gameplay, we record your wager history, account balance changes, and game outcomes. This data helps us manage your account, detect fraud, and resolve disputes. We log your login times and IP addresses to monitor account security and prevent unauthorized access.

Registration data

Email, password hash, account creation date, initial verification status.

Identity data

Government ID number, legal name, date of birth, address, proof documents.

Payment data

Payment method details, transaction IDs, deposit and withdrawal amounts and dates.

Gameplay data

Wagers placed, game outcomes, account balance history, time stamps of activity.

Technical data

IP address, device type, browser information, login times, session duration.

How We Use Your Data on tbtoto

We use your information primarily to operate the tbtoto platform. We authenticate your account using your email and password. We verify your identity through KYC to prevent fraud and meet regulatory requirements. We process your deposits and withdrawals using your payment details. We settle game outcomes and manage your account balance based on gameplay records.

We also use your data for security and compliance. We monitor login patterns and activity timelines to detect unauthorized access. We review transaction history to identify suspicious behavior — for example, rapid-fire large deposits followed by immediate withdrawals, which may indicate money laundering. If we detect anomalies, we may freeze your account pending investigation.

We do not use your data for marketing emails, third-party advertising, or profiling beyond what is necessary to run tbtoto. We do not sell your information to data brokers, analytics companies, or other businesses.

On tbtoto, we keep your personal data confined to account management, security, and legal compliance. We do not monetize your information.

Third-Party Processors and tbtoto Data

We engage third parties to process payments on tbtoto. When you deposit via mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment, those e-wallet providers receive your payment instruction and process the transfer. When you deposit via online payment, e-wallet, mobile banking, or local payment virtual accounts, those banks receive and process your transfer. We do not control how these payment processors handle your data — they operate under their own privacy policies.

We may also work with compliance and fraud-detection partners who help us identify suspicious account behavior. These partners have access to limited account data — transaction patterns, login histories, and basic profile information — only to the extent needed to perform their services. They are contractually bound to keep your data confidential.

We do not engage marketing companies, data analytics firms, or advertising networks with your personal information. Our servers may sit outside your jurisdiction (we use cloud infrastructure that spans multiple regions), but we ensure encryption in transit and at rest regardless of server location.

Data Storage and Security on tbtoto

We store your data on secure servers with encryption. Your password is hashed — we never store it in plain text. Your identity documents are encrypted at rest. Your payment information is handled according to industry-standard security protocols.

We maintain access controls so only authorized tbtoto staff can view personal data. We log all data access attempts. If someone attempts unauthorized access to your account or data, we monitor and can detect the attempt. We do not guarantee absolute security (no system is impenetrable), but we implement standard safeguards to protect your information.

We retain your data as long as your account is active plus a retention period afterward to comply with financial regulations (typically several years). Once this period expires, we securely delete your data unless legal obligations require us to keep it longer. If you request account closure, we begin the data deletion process after your account balance reaches zero.

Your Rights Regarding tbtoto Data

You have the right to request a copy of the personal data we hold about you on tbtoto. Submit a data access request via our support portal and we will provide your information in a portable format within a standard timeframe.

You can request that we correct inaccurate or outdated information in your account. If your address has changed, your name has been legally updated, or payment details are wrong, contact our support team and we will verify and update your record.

You can request data deletion, subject to legal and financial obligations. If you close your account and your retention period expires, we delete your personal data. However, we may need to retain some information (transaction records, identity verification) to comply with anti-money-laundering regulations or resolve disputes.

Cookies and Tracking on tbtoto

We use cookies to manage your session on tbtoto. A session cookie stores your login status so you do not have to re-enter credentials on every page. This cookie expires when you close your browser or log out.

We may use persistent cookies to remember your preferences (e.g., language setting, time zone). These cookies remain on your device until they expire or you delete them. We do not use cookies for tracking your behavior outside tbtoto or for advertising targeting.

You can disable cookies in your browser settings. However, disabling them may prevent tbtoto from functioning correctly — you may be logged out unexpectedly or unable to place wagers. We recommend keeping cookies enabled while using tbtoto.

International Data Transfer on tbtoto

Your data on tbtoto may be stored on servers located in countries outside your jurisdiction. Indonesia-based users' data may be processed in other territories where our infrastructure partners operate. When data crosses borders, we ensure it remains encrypted and protected under contractual safeguards equivalent to local data-protection standards.

We do not sell or transfer your data to countries with weaker privacy protections. We comply with applicable data-transfer regulations (e.g., GDPR Standard Contractual Clauses if relevant) to ensure your information stays secure.

1. Request data access

   Submit a request via the tbtoto support portal and receive your personal data in a portable format.

2. Update your information

   Contact support to correct inaccurate or outdated personal details in your account.

3. Request deletion

   Ask us to delete your data once your account is closed and retention periods expire, subject to legal holds.

Jurisdiction and Data on tbtoto

We operate tbtoto in jurisdictions where applicable law permits. Users in Jakarta, Surabaya, Bandung, Medan, and other supported regions can access our platform. If you access tbtoto from a restricted jurisdiction, we may suspend your account and restrict your data access.

This privacy notice applies to tbtoto services available in your jurisdiction. If local law imposes stricter data-protection requirements than described here, those local requirements take precedence.

Contact Us About Privacy on tbtoto

If you have questions about how we handle your data on tbtoto, or if you want to exercise your rights (access, correction, deletion), contact our privacy team through the tbtoto support portal. We respond in English and address privacy inquiries within a standard business timeframe.

We review and update this privacy notice periodically. We will notify you of material changes via email or through a banner on tbtoto. Your continued use of our platform after such notification indicates you accept the updated terms.