hdtoto is committed to protecting the privacy and security of every player's personal information. This policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have.
Last Updated: 01 January 2026This Privacy Policy describes how hdtoto ("the Company", "we", "us", "our") — the operator of the online betting platform at https://hdtoto.cam — collects, uses, stores, discloses, and protects the personal information of individuals ("you", "the User", "the Player") who access or use our Platform.
hdtoto takes data privacy seriously. We operate in a digital environment where trust is foundational — particularly for players across Indonesia who entrust us with both their personal details and their financial transactions. This Policy has been drafted to be transparent, complete, and written in plain language so that you understand exactly how your information is handled at every stage of your relationship with us.
This Privacy Policy forms part of and should be read together with our Terms & Conditions. By registering an Account or continuing to use the Platform after any update to this Policy, you confirm that you have read, understood, and agreed to its terms. If you do not agree, you must discontinue use of the Platform immediately.
This Policy applies to all personal data processed in connection with your use of the hdtoto Platform, including data collected via the website, live chat, email correspondence, and any third-party integrations (such as payment processors and game studios) that operate on behalf of hdtoto. It does not apply to third-party websites that may be referenced from the Platform — those sites operate under their own privacy policies.
For the purposes of this Privacy Policy, the following definitions apply:
hdtoto collects only the data that is necessary for the purposes described in this Policy. The categories of Personal Data we process are set out in the table below.
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, KTP / SIM / Paspor number and copy | Registration; KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Registration; support interactions |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit/withdrawal amounts | Deposit / withdrawal requests; KYC |
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution, time zone | Automatically on each session |
| Usage Data | Pages visited, games played, bet history, session duration, click-path data, search queries within the Platform | Continuously during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | Support and contact interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, session time preferences, cooling-off periods activated | Account settings; support requests |
| Marketing Preferences | Communication opt-in/opt-out status, preferred promotional categories, language and contact channel preferences | Registration; Account settings |
hdtoto collects Personal Data through the following channels:
hdtoto processes your Personal Data for the following specific purposes:
hdtoto will not use your Personal Data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or being otherwise required to do so by law.
hdtoto processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
hdtoto does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data only in the following circumstances and only to the extent strictly necessary:
The hdtoto Platform uses cookies and similar technologies (including local storage, session storage, and pixel tags) to ensure the Platform functions correctly, to keep your session secure, and to understand how the Platform is used. The following cookie categories are in use:
hdtoto does not use third-party advertising cookies or behavioral tracking cookies that share your data with external ad networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.
Session cookies are deleted when you close your browser. Persistent cookies used for functional and analytics purposes are retained for a maximum of 12 months from the date of last activity, after which they expire automatically.
hdtoto retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law, whichever is longer. The following retention periods apply as a general guide:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Deletion requests submitted by Users under Section 11 will be honored within the bounds of these retention obligations — where a legal hold applies, we will clearly communicate which data cannot yet be deleted and the expected retention end date.
hdtoto implements a layered set of technical and organizational security controls to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:
While hdtoto employs industry-standard security measures, no system is entirely immune to risk. You are responsible for maintaining the security of your own Account credentials — see our Terms & Conditions for your obligations in this regard.
hdtoto respects your rights as a data subject. Regardless of your location within Indonesia — whether you are based in Jakarta, Surabaya, Bali, Bandung, Medan, or any other city — you are entitled to exercise the following rights in relation to your Personal Data:
To exercise any of the above rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days — in that case, we will notify you of the extension within the initial 30-day window.
We may need to verify your identity before acting on a data subject request to ensure that Personal Data is not disclosed to an unauthorized party. Identity verification for this purpose may require you to provide a copy of a government-issued ID document.
The hdtoto Platform is strictly for adults aged 21 years or older. We do not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. If we become aware that Personal Data of a person under 21 has been collected — whether through a misrepresentation during registration or any other means — we will immediately suspend the relevant Account, delete all associated Personal Data, and void any transactions.
If you are a parent or guardian and believe that a minor has registered on the hdtoto Platform using false age information, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.
The hdtoto Platform may display links to or integrate content from third-party service providers — such as game studio interfaces delivered by Pragmatic Play, Evolution Gaming, or Pocket Games Soft. While these studios provide content under license agreements that include data handling obligations, their own privacy practices are governed by their respective privacy policies, which are separate from this document.
hdtoto is not responsible for the privacy practices or content of any third-party website or service that is not operated directly by hdtoto. We encourage you to review the privacy policy of any third-party service you interact with through the Platform.
hdtoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will notify registered Users by email to their registered address and/or by displaying a prominent notice on the Platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how hdtoto protects your information. The current version of this Policy is always available at https://hdtoto.cam/privacy-policy.
Your continued use of the Platform after the effective date of any update constitutes your acknowledgment and acceptance of the revised Policy. If you do not accept the revised terms, you must close your Account and cease using the Platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hdtoto handles your Personal Data, please contact our dedicated privacy team using the details below. All data subject requests and privacy-related complaints will be handled with priority and in strict confidence.
Email: [email protected]
Subject line: [Privacy Request] — [Your Full Name]
Live Chat: Available on the Platform 24/7
Response Time: Within 30 calendar days for formal data subject requests; within 24 hours for general privacy
inquiries
For general customer support matters not related to privacy, please visit our FAQ page or use the standard support channels described on our homepage.
How hdtoto protects Indonesian players' personal data across every interaction
Every piece of data you submit — from your KTP document during KYC verification to your BCA/BRI/BNI/Mandiri account details for withdrawals — is protected by 256-bit AES encryption both in transit (TLS 1.3) and at rest. The same encryption standard used by major Indonesian banks to protect online banking sessions.
We collect only what is necessary to operate your Account, process payments, and meet our legal obligations. We never ask for information that is not relevant to your use of the Platform. No tracking of your browsing activity outside hdtoto. No data harvesting for resale.
Request access to all data we hold about you. Correct inaccurate information. Request deletion where legally permissible. Withdraw consent for marketing. Export your data in a portable format. All data subject rights honored within 30 days. No questions, no penalties.
hdtoto has never sold, rented, or traded player data to third parties and never will. Your personal information is not a revenue stream for us. We share data only with trusted processors (payment gateways, KYC providers, game studios) who are contractually prohibited from using it for any purpose beyond delivering their service to you.
We retain your data only as long as necessary. Active Account data is kept during your relationship with us plus 5 years for AML compliance. After that, all personal identifiers are securely deleted. We publish exact retention periods in Section 9 of this Policy so you know precisely how long each category of data is kept.
While hdtoto operates internationally and serves the Indonesian market, we voluntarily align our data handling practices with GDPR principles — lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability. These principles protect every player, regardless of jurisdiction.
Our support team is available 24/7 to answer any data privacy questions. You can also explore our FAQ section, review our Terms & Conditions, or learn about Responsible Gaming tools.
Visit Our FAQ Read Terms & Conditions Responsible Gaming Back to Home