idtoto Casino & Sportsbook Data Care
This page describes what we collect when you use idtoto and how we keep that data protected. We collect personal information to verify your identity, process your deposits and withdrawals through QRIS, e-wallet, mobile banking, local payment, online payment, and e-wallet, and to comply with anti-money-laundering and know-your-customer regulations. We also collect gameplay data—bets placed, games played, outcomes—to maintain your account history and to detect fraud.
We understand that privacy matters. Our approach is straightforward: we collect only what is necessary, we protect it with industry-standard encryption, we do not sell it to third parties, and we retain it only as long as applicable law requires. If you have questions about how we handle your data, this policy answers them in plain language. If you need clarification beyond this page, our support team can help.
By using idtoto, you confirm that you have read and understood this privacy policy. If you do not agree with our practices, you should not register or use our platform.
What Data We Collect on idtoto
We collect several categories of data when you register and use idtoto. First, identity data: your full name, date of birth, email address, phone number, and residential address. We collect this during registration and verify it against government-issued ID and third-party data sources. This verification is mandatory; we cannot create an account without it.
Second, financial data: bank account numbers, e-wallet credentials, and transaction history. We collect this to process deposits via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfers from mobile banking, local payment, online payment, and e-wallet. We also collect records of every deposit, withdrawal, and internal balance transfer you make on idtoto.
Third, gameplay and betting data: every bet you place on Liga 1 or Piala AFF football matches, every spin on Aviator or Sweet Bonanza, every hand of blackjack or roulette, every esports wager on Mobile Legends or Free Fire. We record the date, time, stake amount, game outcome, and resulting balance change. This history appears in your account dashboard and is available for your review.
We do not sell your data to third parties
Your personal information is never sold to marketers, brokers, or advertisers. We share data only with payment partners and service providers necessary to operate idtoto, and only to the extent required.
How We Use Your Data on idtoto
We use your identity and financial data to verify your account, comply with anti-money-laundering regulations, and process deposits and withdrawals. We use your gameplay data to calculate payouts, settle disputes, detect fraud, and maintain your account history. We may also use aggregated, anonymized data (e.g., "non-specific info of users in Jakarta prefer football betting over slots") for internal analytics and product improvement—never linked to you personally.
We do not use your data for marketing without your explicit consent. We do not share your email address with third-party marketers. If we send you account notifications, promotions, or service updates, they are triggered by your account activity or your explicit opt-in, and they come directly from idtoto.
Our Data Processors and Third Parties
We work with third-party service providers to deliver idtoto. These include: payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment network operators, and our banking partners), cloud-hosting providers (who may store our servers and databases in locations outside Indonesia), customer-support platforms, and fraud-detection services. All processors sign data-processing agreements requiring them to protect your data and use it only for their contracted services. We do not grant them permission to use your data for their own purposes.
We may also disclose your data if required by law. If a law-enforcement agency, court, or regulatory authority issues a valid legal order (warrant, subpoena, court directive) requesting your information, we comply. We will inform you of such requests where applicable law permits.
Your Rights and Data Retention on idtoto
We recognize your right to access, correct, and delete your personal data. You can request a copy of all personal data we hold about you at any time by contacting our support team via email or live chat. We will provide that data in a portable format within 5 business days. You can also request correction of inaccurate information—for example, if your address changes, you can update it in your account settings immediately.
You may request deletion of your account and associated data. We will close your account and pay out any remaining balance to your nominated payment method. However, we retain certain data for the periods required by applicable law: transaction records and identity verification documents are typically retained for 5–7 years to satisfy regulatory obligations. We cannot delete data that law requires us to keep, but we will anonymize or securely archive it after the mandatory retention period expires.
Our commitment on idtoto is to collect responsibly, protect fiercely, and respect your rights to know and control your data.
Security and Data Protection on idtoto
We use industry-standard encryption (TLS 1.2 or higher) to protect data in transit between your device and our servers. We encrypt sensitive data at rest—passwords are hashed, financial information is encrypted, and access logs are secured. Our infrastructure undergoes regular security audits by third-party testing firms. We maintain intrusion-detection systems, firewalls, and access controls to prevent unauthorized access.
No security system is perfect. If we detect a breach or unauthorized access to your data, we will notify affected users within the timeframe required by applicable law and provide guidance on protective steps. We also encourage you to use a strong, unique password on idtoto, never share your login credentials, and log out when you finish a session—particularly on shared devices.
Cookies and Tracking on idtoto
We use cookies to remember your login session, track which games you have visited, and measure site performance. These cookies are either essential (required for idtoto to function) or analytical (used to understand how you interact with idtoto, entirely for our improvement—not shared with third parties). We do not use tracking pixels or third-party advertising cookies. You can disable cookies in your browser settings, though some functionality on idtoto may not work correctly if you do so.
We collect standard server logs: your IP address, browser type, pages visited, and timestamps. We use this data to diagnose technical issues, detect abuse, and maintain security. These logs are retained for 30–90 days then automatically deleted.
We take your privacy seriously. Our policies evolve as technology and regulation change, and we remain committed to transparency in how we handle your data on idtoto.
Contact Us About Data and Privacy
If you have questions about this privacy policy, want to exercise your rights, or suspect a data breach, contact our privacy team via email or live chat. We respond to privacy inquiries within 5 business days. For data-access requests, we typically provide a response within 5–10 business days depending on the volume and complexity of your request. If you believe we have mishandled your data in violation of applicable privacy law, you may lodge a complaint with your local data-protection authority.
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will post any significant changes on this page and, if appropriate, notify you via email. Your continued use of idtoto after a change means you accept the updated policy.
Jurisdiction, Eligibility, and Legal Framework
Expand for service availability and legal details
Service availability
We at idtoto provide our sportsbook, live-dealer, slot, and esports services only in jurisdictions where local law explicitly permits online gaming, wagering, and casino operations. We do not specify which jurisdictions are legal or illegal; that determination is governed by applicable regulations in each region. Our platform uses geolocation technology to restrict or deny access from jurisdictions outside our permitted service areas. This determination is made at our sole discretion and may change at any time if we reassess jurisdictional compliance or if local regulations change. Access to idtoto may be blocked if we detect that your connection originates from a restricted jurisdiction. Users who are uncertain about the legality of our services in their location should not attempt to register or access our platform. We make no guarantee of continuous service availability in any particular region, and we reserve the right to suspend or terminate service in any jurisdiction without prior notice if we determine that continued operation would violate applicable law.
Account eligibility
To create and maintain an account on idtoto, you must satisfy the eligibility requirements established by applicable law in your jurisdiction. These typically include a minimum age requirement (which varies by region) and the legal right to participate in online gaming and wagering in your location. During account registration, we collect personal information and conduct identity verification through Know Your Customer (KYC) processes, including cross-checking your details against government-issued ID and third-party data sources. If our verification determines that you do not meet eligibility criteria, we will deny account creation or suspend an existing account. Eligibility is a continuous condition; if your circumstances change—such as relocation to a restricted jurisdiction or change in legal status—you must inform us immediately. Continued use of your idtoto account after becoming ineligible may result in immediate account suspension, forfeiture of funds, and potential cooperation with law-enforcement authorities if required by applicable law.
Local-law responsibility
It is your sole responsibility to verify that your access to and use of idtoto comply with the laws and regulations of your own jurisdiction before you register, deposit funds, or participate in any game, bet, or service. We do not provide legal advice and make no representation that our services are lawful in any specific location. Regulatory frameworks governing online gaming, sports betting, and casino operations vary widely across regions and are subject to frequent change; it is your obligation to stay informed about your own legal environment. If your jurisdiction prohibits online gaming, restricts wagering to licensed operators (and we are not licensed in your area), or imposes other restrictions on casino or sportsbook activities, you should not access or use idtoto. Your continued use of our platform constitutes your acceptance of these terms and your representation that you have independently verified lawful access in your jurisdiction. We accept no liability for any legal consequences arising from your use of idtoto in violation of applicable law.
Data and privacy scope
We collect personal data from all account holders to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. This includes your name, date of birth, email, phone number, residential address, government-issued ID number and image, and financial information (bank account and e-wallet credentials). We use this data to verify your identity and eligibility, process deposits and withdrawals, prevent fraud and financial crime, and comply with applicable law. All your activity on idtoto—every bet, game, deposit, withdrawal, and balance change—is recorded as part of your account history and is subject to the same data protections outlined in this privacy policy. We do not sell your personal data to third parties. We share data only with payment processors, hosting providers, and service providers necessary to operate idtoto, and only to the extent required to deliver our services. Our complete data practices, retention periods, and your rights are detailed in our full privacy policy. We retain transaction records and identification documents for the periods required by applicable law, typically 5–7 years, then securely delete or anonymize them.
Contact for legal inquiries
If you have legal, compliance, or regulatory questions regarding idtoto, your data privacy, or our services, contact our legal and compliance team via our support portal, live chat, or email. We aim to respond to legal and privacy inquiries within 5 business days, though complex matters may require additional time. We do not provide individualized legal advice; if you need legal counsel regarding your use of idtoto or your jurisdiction's regulations, we recommend consulting a qualified attorney. Regulatory agencies, law-enforcement bodies, and government entities may contact us directly regarding platform operations or specific user accounts. We comply with valid legal orders and cooperate with law-enforcement and regulatory authorities as required by applicable law. All legal and regulatory correspondence is handled confidentially and in accordance with applicable data-protection regulations. Users may also contact their local gaming regulator, data-protection authority, or consumer-protection agency if they believe idtoto is operating in violation of local law or if they wish to lodge a formal complaint.