Your privacy is not an afterthought at idtoto — it is a foundational commitment. This Privacy Policy explains precisely what personal data we collect from Indonesian players, why we collect it, how it is stored and protected, and what rights you hold over that data. We encourage every member to read this document in full before registering an account.
Before diving into the full policy, here are six core privacy commitments that govern how idtoto handles member data across every touchpoint.
Every data transmission between your device and idtoto's servers is protected by industry-standard 256-bit SSL encryption. Your login credentials, financial details, and personal records are never transmitted in plaintext.
idtoto does not sell, rent, lease, or trade your personal data to any third-party advertiser, data broker, or marketing network. Your information is used solely to operate your account and improve your platform experience.
We collect only the data necessary to operate your account, process transactions through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay, and comply with our international licensing obligations.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Account data is deleted or anonymized within 90 days of confirmed account closure.
Access to personal and financial data within idtoto's organization is strictly role-based. Only personnel who require access to perform a specific function — such as KYC review or payment processing — are granted permission to view your records.
You have the right to access, correct, download, restrict, and request deletion of your personal data. idtoto provides a straightforward process for exercising these rights via our 24/7 live chat support team.
This Privacy Policy applies to all personal data collected and processed by idtoto in connection with the operation of its online betting platform at https://idtoto.cam (the "Platform"). idtoto is an internationally operated online gaming and betting service that serves English-preference players based in Indonesia, offering sports betting, live casino, togel (Indonesia's traditional numbers lottery), and slot gacor (high-frequency payout slot games) products.
By registering an account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This policy applies to all registered members, prospective members who have commenced registration, and any individual who contacts idtoto's support team regardless of whether they hold an active account. It does not apply to third-party websites or services linked from the Platform — those entities operate under their own privacy practices.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial account details, location data, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | idtoto — the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third-party entity that processes Personal Data on behalf of idtoto under a written data processing agreement (e.g., payment processors, KYC verification providers). |
| "Member" / "You" | Any individual who has registered or is seeking to register an account with idtoto. |
| "Sensitive Data" | A subset of Personal Data warranting heightened protection, including identification document scans, financial account numbers, and data relating to responsible gaming status. |
idtoto collects personal data across three broad categories, depending on your interaction with the Platform:
3.1 Registration Data. When you create an idtoto account, we collect the following information, which is mandatory for account setup:
3.2 Identity Verification (KYC) Data. Prior to processing your first withdrawal, idtoto's compliance team requires the following documents to complete the Know Your Customer (KYC) verification process:
3.3 Transaction and Betting Data. We automatically record all financial and gaming activity associated with your account, including:
3.4 Technical and Usage Data. When you access the Platform, our servers automatically record:
3.5 Support Communications Data. When you contact our support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and any attachments you provide, for quality assurance, compliance, and dispute resolution purposes.
3.6 Responsible Gaming Data. If you set deposit limits, loss limits, session timers, or request a self-exclusion or time-out, idtoto records those elections and the dates on which they were made. This data is treated as Sensitive Data and subject to heightened access controls.
idtoto collects personal data through the following channels:
idtoto processes your personal data for the following defined purposes only:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your member account; authenticating your identity at login; and enabling account self-service functions. |
| Payment Processing | Executing deposit and withdrawal transactions via Indonesian banks and e-wallets; reconciling transaction records; and investigating payment disputes. |
| Identity Verification (KYC) | Verifying that members are who they claim to be, meet the 21+ age requirement, and are legally resident in Indonesia, in accordance with our licensing obligations. |
| Fraud Prevention & Security | Detecting and preventing unauthorized access, account takeover, money laundering, bonus abuse, and other forms of fraudulent or prohibited activity. |
| Customer Support | Responding to inquiries, resolving disputes, and delivering live chat and email support in English (with Indonesian-speaking agents available). |
| Responsible Gaming | Operating deposit limits, loss limits, session timers, self-exclusion tools, and reality-check notifications at your request or where required by our responsible gaming obligations. |
| Regulatory Compliance | Meeting the reporting and record-keeping requirements of idtoto's international operating license and responding to lawful requests from regulatory or law enforcement bodies. |
| Platform Improvement | Analyzing aggregated usage patterns (never individual-level profiling for marketing) to improve Platform performance, product design, and user experience. |
| Promotional Communications | Sending you information about idtoto bonuses, promotions, and seasonal offers by email or in-platform notification — only where you have opted in to such communications. |
idtoto does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or as otherwise required by applicable law.
idtoto relies on one or more of the following legal bases when processing your personal data:
7.1 No Sale of Personal Data. idtoto does not sell, rent, or trade your personal data to any third party for commercial purposes under any circumstances.
7.2 Service Providers (Data Processors). idtoto engages trusted third-party service providers to assist with specific operational functions. These providers act as Data Processors under written agreements that obligate them to process your data only on idtoto's instructions and to maintain appropriate security standards. Categories of processors include:
7.3 Regulatory and Legal Disclosures. idtoto may disclose your personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts where required to do so by law, by the terms of idtoto's operating license, or pursuant to a valid legal order. Where legally permitted, idtoto will notify you of such a disclosure.
7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of idtoto's business, your personal data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and of any material change to the privacy terms applicable to your data.
7.5 No Third-Party Marketing. idtoto does not share your personal data with any third-party advertiser, affiliate network, or marketing partner for the purpose of targeting you with third-party marketing. Our own promotional communications are governed by Section 5 of this policy.
As an internationally operated platform, idtoto may process and store your personal data on servers located outside Indonesia. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the jurisdiction of idtoto's operating license, idtoto implements appropriate safeguards such as:
By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia, and you consent to such transfers subject to the safeguards described above.
idtoto retains personal data only for as long as necessary to fulfill the purposes described in this policy, or for longer periods where required by law or our licensing obligations. The following default retention periods apply:
| Data Category | Retention Period |
|---|---|
| Registration & account profile data | Duration of account plus 90 days after confirmed closure, then deleted or anonymized. |
| KYC identity documents | 5 years from date of verification, in accordance with standard anti-money-laundering record-keeping requirements. |
| Transaction and betting records | 5 years from the date of each transaction, for financial audit and regulatory compliance purposes. |
| Support communications | 3 years from the date of the communication, for dispute resolution and quality assurance. |
| Technical and usage logs | 12 months from collection, after which logs are aggregated and anonymized. |
| Responsible gaming elections | Duration of account plus 5 years after closure, to ensure self-exclusion commitments are honored if a member attempts to re-register. |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter as evidence of lawful processing. |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where anonymization is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical analysis.
idtoto implements a layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key technical and organizational security measures include:
11.1 What Are Cookies. Cookies are small text files placed on your device by a website to remember information about your session or preferences. idtoto uses first-party cookies only — we do not deploy third-party advertising or cross-site tracking cookies.
11.2 Categories of Cookies We Use.
11.3 Managing Cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For analytics cookies, you may withdraw consent at any time by adjusting your browser settings or contacting our support team.
11.4 No Advertising Trackers. idtoto does not use third-party advertising pixels, social media tracking scripts, retargeting tags, or any other cross-site tracking technology on its platform.
idtoto recognizes and upholds the following data subject rights for all members. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within 30 days of receiving a verified request.
Request a copy of all personal data idtoto holds about you, including the categories of data, processing purposes, and any third parties with whom it has been shared.
Request correction of any inaccurate or incomplete personal data held on your account. Many basic details can be updated directly through your account profile settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that idtoto limit the processing of your personal data in specific circumstances, such as while the accuracy of data is being contested.
Request your personal data in a structured, machine-readable format (JSON or CSV) so that you may transfer it to another service provider.
Object to processing of your personal data carried out on the basis of legitimate interests, including profiling for Platform improvement purposes.
Withdraw consent for optional processing activities — such as promotional email communications — at any time, without affecting the lawfulness of prior processing.
Submit a formal privacy complaint to idtoto's Data Protection team. If unsatisfied with our response, you may escalate to the relevant supervisory authority in your jurisdiction.
idtoto's Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If idtoto becomes aware that an account has been registered by or on behalf of a person under 21 years of age, that account will be immediately suspended, all associated funds will be frozen, and the personal data of the underage individual will be securely deleted as promptly as reasonably possible consistent with our compliance obligations.
If you believe that a person under 21 years of age has registered an account with idtoto, please notify us immediately at [email protected] and we will investigate and act without delay.
14.1 Right to Update. idtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this policy will always be published on this page, with the "Last Updated" date revised accordingly.
14.2 Notification of Material Changes. Where an amendment materially affects your rights — for example, a change to the categories of data we collect, the third parties with whom we share it, or the retention periods that apply — idtoto will notify all registered members via their registered email address at least 14 days before the change takes effect.
14.3 Continued Use as Acceptance. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you disagree with any changes, you may close your account by contacting our support team. Outstanding real-money balances will be processed in accordance with our withdrawal procedures.
For any questions, concerns, or requests relating to this Privacy Policy or idtoto's handling of your personal data, please contact us through the following channels:
Our 24/7 support team is ready to assist with data access requests, corrections, or any privacy concern. You can also review our Terms & Conditions, Responsible Gaming policy, or browse the FAQ.