hdltoto Platform Privacy Notice

This page describes what we collect when you use hdltoto and how we keep that data protected. When you register an account, we request your email address, create a password, and begin collecting information you provide voluntarily — national ID (KTP or passport), residential address proof, payment method details via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers (mobile banking, local payment, online payment, e-wallet). We also collect technical data: IP address, device type, browser information, and session timestamps. This information serves account verification, payment processing, fraud prevention, and regulatory compliance.

We at hdltoto encrypt all personal data in transit and at rest. We store documents securely and retain them only as long as necessary for compliance purposes. We do not sell your data to third parties. We do not use your information for marketing without explicit consent. Our privacy practices comply with Indonesian data-protection standards and international best practices.

Our servers may sit outside your jurisdiction; your data crosses borders when you use hdltoto. We maintain contractual safeguards with all third-party processors — payment gateways, hosting providers, and support platforms. You retain the right to access, correct, or delete your data. Contact our support team to exercise these rights.

Data Collection and Use on hdltoto

We collect personal data in several categories. Registration data includes email, password hash, and account username. Verification data includes your national ID (KTP or passport) and proof of residential address (utility bill or government letter). Payment data includes your registered payment method — e-wallet account details, bank account number, or QRIS identifier. We collect this data only for account opening, identity verification, and payment processing.

We also collect gameplay data: every spin result on slots like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, or Mahjong Ways; every hand on live-dealer tables; every bet on Liga 1, Piala Indonesia, Piala AFF, or esports markets (Mobile Legends, Free Fire, PUBG Mobile). This data enables account balance tracking, tournament leaderboard calculation, and dispute resolution. We maintain complete transaction history for 90 days of active play; older records archive but remain retrievable for compliance and legal investigation.

Technical data collection is automatic. When you access hdltoto, our servers log your IP address, device type, operating system, browser version, and session duration. We use this data to detect fraud, prevent unauthorized access, and optimize platform performance. We do not use this data to profile you for marketing purposes.

Third-Party Processors and Data Sharing

We share your data only with service providers who process it on our behalf under contract. Payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) receive transaction details necessary to complete deposits and withdrawals. Email service providers receive your email address to send account notifications and support responses. Hosting providers store your account data in encrypted form at secure data centres.

We do not sell your data. We do not share your information with marketing firms, data brokers, or advertising networks. We do not use your gameplay history for profiling. We may disclose your data if required by law — law-enforcement requests with legal authority, regulatory inquiries from financial authorities, or court orders. We will notify you of legal demands unless we are legally prohibited from doing so.

We maintain data-processing agreements with all third parties specifying security requirements, retention limits, and non-disclosure obligations. Our support team and game-operations team access your account data only when necessary to resolve your request or investigate disputes. Access logs track all internal data retrieval for audit purposes.

Your Rights and Data Access on hdltoto

You have the right to access your personal data. Contact our support team with your account email; we will provide a complete export of your account data, transaction history, and personal information within 10 business days. You have the right to correct inaccurate information — if your registered address or payment method has changed, update it in your account settings or request corrections via support.

You have the right to request deletion of non-essential data. We retain your national ID and address proof for seven years post-account-closure for regulatory compliance and money-laundering prevention; we cannot delete this data during the retention window. We can delete other personal information (email preferences, support ticket history) upon request. Your account balance remains accessible for withdrawal even after deletion of non-essential data.

Data retention

Active account data stored indefinitely; gameplay history 90 days; KYC documents 7 years post-closure.

Data access

Request export of your complete personal data and account history from hdltoto support within 10 business days.

Data correction

Update address, email, and payment details in your account settings or contact support for assistance.

Data deletion

Request deletion of non-essential data; KYC documents retained per regulatory requirement.

Security Measures and International Data Transfer

We encrypt all data in transit using TLS (Transport Layer Security) protocol. Data at rest is encrypted using AES-256 encryption. Our servers sit behind firewalls with intrusion-detection systems. We conduct regular security audits and penetration testing. We do not guarantee absolute security, but we maintain industry-standard protections aligned with financial-services practices.

Your data may be processed by servers located outside Indonesia. When you use hdltoto from Jakarta, Surabaya, Bandung, Medan, or Semarang, your account information may be stored and processed in international data centres. We maintain contractual safeguards — Standard Contractual Clauses or equivalent mechanisms — to ensure your data receives equivalent protection outside your jurisdiction. You acknowledge this international transfer by using hdltoto.

Privacy Policy Updates and Contact

We may update this privacy notice periodically. Changes take effect upon posting on hdltoto. Continued use of the platform after notice constitutes acceptance of revised terms. If you have privacy concerns — requests for data access, questions about third-party processors, or complaints about data handling — contact our support team via the channels listed in your account.

Our services are available only where local law permits. Your privacy rights vary by jurisdiction. We comply with Indonesian data-protection standards and respect legal frameworks where hdltoto operates. If you believe we have violated your privacy rights, you may contact your regional data-protection authority or escalate via our compliance channel. We commit to investigating all privacy complaints and responding within 15 business days.