hdltoto Casino & Sportsbook Data Care

This page describes what we collect when you use hdltoto and how we keep that data protected. We collect personal information only when you register, verify your identity, deposit funds, or contact our support team. Our approach differs from platforms that harvest behavioral data for resale: we treat your account details, betting history, and payment information as confidential and process them only as needed to operate your account, settle wagers, and comply with financial regulations.

We store your data on servers located outside Indonesia (typically in Southeast Asia or Europe) to ensure redundancy and uptime. Our infrastructure uses encryption for data in transit and at rest, following industry-standard practices. We do not sell your personal information to third parties. We share data only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment integrations), compliance partners, and fraud-detection services. This policy explains each category of data, our retention rules, and your rights to access, correct, or delete your information.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's applicable law.

What We Collect on hdltoto

We collect data in four primary categories. Account information includes your legal name, date of birth, national identity number (KTP or passport), email address, phone number, and residential address. We require this data to verify your identity and comply with anti-money-laundering (AML) regulations enforced across Indonesia. Payment information includes your bank account number or e-wallet identifier (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) used for deposits and withdrawals. We do not store your full payment credentials; our payment processors handle sensitive data directly. Activity logs include your betting history, game sessions, login times, IP addresses, and device identifiers. We retain these logs to detect fraud, investigate disputes, and audit settlement accuracy. Support communications include emails, chat transcripts, and phone recordings when you contact our team.

We collect additional data automatically. When you access hdltoto via browser or app, we log your IP address, device type, operating system, and browser. We use cookies to track your session, remember your preferences, and display accurate odds. Our cookies are functional (required for login) and analytical (optional, for performance tracking); we do not use tracking cookies for behavioral advertising. You can disable cookies in your browser settings without losing core hdltoto functionality, though some features may degrade.

We collect this data only from you directly (via registration, deposits, support contact) or automatically (via browser and device). We do not purchase data from brokers, scrape third-party sites, or aggregate behavioral profiles from other platforms. Our data collection scope is narrow and operational: we gather what is needed to run your account, settle wagers, detect fraud, and comply with Indonesian financial law.

Our Privacy Commitments on hdltoto

Data retention: We retain your account information (name, ID, contact details) for as long as your account is active. After you close your account, we retain this data for seven years to comply with financial anti-money-laundering regulations. Betting history and transaction logs are kept for three years post-closure. Support communications are retained for one year. You can request data deletion after account closure by contacting our support team; we will erase non-regulatory data within thirty days, though we cannot delete information required by law.

Data security: We encrypt all data in transit (using TLS/SSL between your browser and our servers) and at rest (using AES-256 encryption on stored databases). Our servers are located outside Indonesia—typically in data centres across Southeast Asia or Europe—and are monitored 24/7 by our operations team. We conduct annual security audits by third-party firms. In the event of a data breach affecting personal information, we will notify affected users and relevant authorities within seventy-two hours as required by Indonesian data protection law.

Third-party sharing: We share your data only with entities necessary to operate hdltoto. Payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your payment identifier and transaction amount. Fraud-detection services receive your IP address and betting patterns to identify suspicious activity. Compliance partners may receive aggregate, anonymised data to meet regulatory reporting requirements. We never sell personal information to marketers, data brokers, or advertisers. We do not share your betting history, account balance, or support communications outside hdltoto without your explicit consent.

Data retention

We keep account information for seven years post-closure for AML compliance; betting logs for three years; support communications for one year.

Server location

Our servers sit outside Indonesia in Southeast Asia or Europe; this geographic placement ensures redundancy and uptime but means your data crosses international borders.

Encryption

We use TLS/SSL for data in transit and AES-256 encryption for stored data; all passwords are hashed and salted, never stored in plain text.

Breach notification

If we discover a breach affecting personal data, we notify affected users and authorities within seventy-two hours per Indonesian law.

Cross-border data transfer: Our servers sit outside Indonesia; when you use hdltoto from Jakarta, Surabaya, Bandung, or Medan, your data is transmitted internationally. We acknowledge this risk and mitigate it through encryption and security audits. By using hdltoto, you consent to this cross-border transfer. If you reside in a jurisdiction with stricter data protection laws, you may have additional rights; we recommend reviewing local regulations.

Children's data: We do not knowingly collect personal information from children under eighteen. If we discover that a child has registered on hdltoto, we will immediately suspend the account and delete the data. Parents or guardians who believe their child has created an account should contact us immediately.

Marketing communications: We do not send unsolicited marketing emails or SMS messages. If you opt in to email newsletters about Liga 1 fixtures, Piala AFF schedules, or new game releases, you can unsubscribe at any time by clicking the link in those emails. We may send transactional emails (deposit confirmations, withdrawal status, support replies) which you cannot disable without closing your account.

Cookie policy: We use cookies for session management (required) and analytics (optional). Functional cookies allow you to stay logged in and access your account. Analytical cookies track page visits, button clicks, and game choices to help us improve hdltoto's performance. You can disable analytical cookies in your browser settings; doing so does not affect core functionality. We do not use third-party cookies for behavioural tracking or retargeting advertising.

Contact and updates: If you have questions about this privacy policy or wish to exercise your data rights, contact our support team via live chat (English or Bahasa Indonesia), email, or phone. We will respond within four business hours for urgent requests and seven business days for data access requests. We may update this privacy policy as our practices evolve or regulations change; we will notify you of material changes by email if you have provided contact information. Your continued use of hdltoto after policy updates constitutes your acceptance of the revised terms. Our services are available only where applicable law permits.