Your Privacy Matters: This Privacy Policy applies to all users of the sdtoto platform. By creating an account or using our services, you acknowledge that you have read and understood this policy and consent to the collection, use, and disclosure of your personal information as described herein.
1 Introduction
sdtoto ("we", "us", "our") operates an online betting platform accessible at https://sdtoto.cam and is committed to protecting the privacy and security of our users' personal information. This Privacy Policy describes our practices concerning the collection, use, storage, disclosure, and protection of personal data in accordance with applicable data protection laws and regulations.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the sdtoto platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.
2 Data Controller
For the purposes of applicable data protection laws, sdtoto acts as the data controller with respect to personal information collected through the platform. We determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable legal requirements.
You may contact our Data Protection Officer or customer support team using the contact details provided in Section 13 of this Privacy Policy if you have any questions or concerns regarding how we handle your personal information.
3 Information We Collect
sdtoto collects several categories of personal information to provide, improve, and secure our services. The types of data we collect include:
| Data Category |
Examples |
| Identity Data |
Full legal name, date of birth, gender, nationality, government-issued identification number (KTP, passport, driver's license), selfie photograph for KYC verification. |
| Contact Data |
Email address, mobile phone number, residential address, city (Jakarta, Surabaya, Bandung, etc.), province, postal code. |
| Account Data |
Username, password (stored in hashed form), account balance, transaction history, deposit and withdrawal records, bonus history, betting history, game play records. |
| Financial Data |
Bank account details (bank name: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata; account number; account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), payment transaction records. |
| Technical Data |
IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, time zone setting (WIB, WITA, WIT), session duration, pages visited, referring URL. |
| Usage Data |
Betting patterns, favorite games, login frequency, feature usage, customer support interaction records, promotional email engagement (open rates, click rates). |
| Marketing Data |
Your preferences for receiving promotional communications, participation in surveys or promotions, referral data if you invite friends to join sdtoto. |
3.1 Data You Provide Directly: Most personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, participate in promotions, or otherwise interact with our platform.
3.2 Data Collected Automatically: When you access the sdtoto platform, we automatically collect certain technical and usage data through cookies, web beacons, log files, and similar tracking technologies. This data helps us understand how users interact with our services and allows us to improve platform performance, security, and user experience.
3.3 Data from Third Parties: In some cases, we may receive personal data from third-party sources, including payment processors, identity verification services, fraud prevention agencies, and regulatory authorities. Such data is used to verify your identity, prevent fraud, and comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
4 How We Use Your Data
sdtoto processes your personal information for the following purposes:
- Account Registration & Management: To create and maintain your user account, authenticate your identity, and provide access to platform features and services.
- KYC Verification: To verify your identity and age (confirming you are at least 21 years old) in compliance with legal and regulatory requirements. KYC verification is mandatory before processing any withdrawal requests.
- Payment Processing: To process deposits, withdrawals, and other financial transactions through supported payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja). All transactions are denominated in Indonesian Rupiah (IDR / Rp).
- Service Delivery: To provide access to sports betting markets (football, badminton, basketball, volleyball, MotoGP, E-sports), live casino games (Baccarat, Roulette, Blackjack, Dragon Tiger, Teen Patti, Andar Bahar), slots, togel (Indonesian numbers lottery), and other wagering products.
- Customer Support: To respond to your inquiries, resolve technical issues, handle complaints, and provide 24/7 assistance in English and Bahasa Indonesia via live chat and email.
- Security & Fraud Prevention: To detect, prevent, and investigate fraudulent activity, money laundering, account takeover attempts, bonus abuse, collusion, and other prohibited conduct. We monitor betting patterns, login behavior, device fingerprints, and IP addresses to maintain platform integrity.
- Responsible Gaming: To enforce age restrictions (21+), implement self-exclusion requests, deposit limits, time-out periods, and other responsible gaming tools. We may use behavioral data to identify users who may be at risk of problem gambling and proactively offer support resources.
- Legal Compliance: To comply with applicable laws, regulations, licensing requirements, court orders, and requests from regulatory or law enforcement authorities in Indonesia and internationally. This includes AML, CTF, and know-your-customer (KYC) obligations.
- Marketing & Communications: To send you promotional offers, bonus announcements, newsletters, and other marketing communications via email or SMS, provided you have consented to receive such communications. You may opt out at any time.
- Platform Improvement: To analyze usage patterns, conduct A/B testing, gather user feedback, and improve our website, mobile interface, game offerings, payment methods, and overall user experience.
- Analytics & Reporting: To generate internal business reports, statistical analysis, and performance metrics. Aggregated and anonymized data may be used for research and reporting purposes without identifying individual users.
5 Legal Basis for Processing
sdtoto processes your personal data based on one or more of the following legal grounds:
- Contractual Necessity: Processing is necessary to perform the contract between you and sdtoto (i.e., the Terms & Conditions) and to provide the services you have requested, including account registration, payment processing, and game access.
- Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including KYC verification, AML/CTF compliance, age verification, tax reporting, and cooperation with law enforcement or regulatory authorities.
- Consent: Where required by law, we obtain your explicit consent before processing certain categories of personal data, such as sending marketing communications or using optional tracking technologies. You may withdraw consent at any time.
- Legitimate Interests: Processing is necessary for sdtoto's legitimate business interests, such as fraud prevention, security monitoring, platform improvement, customer support, and internal analytics, provided such interests are not overridden by your fundamental rights and freedoms.
6 Data Sharing & Disclosure
sdtoto does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients in limited circumstances:
- Payment Service Providers: We share necessary financial data with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and other payment processors to facilitate deposits and withdrawals.
- Game Studios & Software Providers: We share technical and usage data with third-party game developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, etc.) to deliver live casino, slots, and other gaming content on the platform.
- Identity Verification Services: We share identity data with KYC and identity verification providers to confirm your age, identity, and address as part of our regulatory compliance obligations.
- Fraud Prevention & Security Partners: We share risk and transactional data with fraud detection agencies, anti-money laundering services, and cybersecurity providers to protect the platform and our users from fraudulent activity.
- Legal & Regulatory Authorities: We may disclose personal data to government agencies, courts, law enforcement, or regulatory bodies if required by law, court order, subpoena, or to comply with legal obligations in Indonesia or other jurisdictions.
- Professional Advisors: We may share data with lawyers, accountants, auditors, and other professional advisors in connection with legal, financial, or business matters, subject to confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, sale of assets, or other business restructuring, your personal data may be transferred to the acquiring entity, subject to the protections set out in this Privacy Policy.
All third-party service providers are required to process your personal data only for the specified purposes, to implement appropriate security measures, and to comply with applicable data protection laws. We do not authorize third parties to use your personal data for their own purposes.
7 Data Security
sdtoto implements industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, destruction, or loss. Our security practices include:
- 256-Bit SSL Encryption: All data transmitted between your device and sdtoto servers is encrypted using 256-bit Secure Sockets Layer (SSL) technology, the same encryption standard used by international banks.
- Secure Data Storage: Personal data is stored on secure servers with restricted access controls. Access to personal data is limited to authorized personnel who require such access to perform their job functions.
- Password Protection: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text. We encourage users to create strong, unique passwords and to keep their login credentials confidential.
- Two-Factor Authentication (2FA): We offer optional two-factor authentication to add an extra layer of security to your account login process.
- Regular Security Audits: We conduct periodic security assessments, vulnerability testing, and penetration testing to identify and address potential security risks.
- Monitoring & Incident Response: We continuously monitor our systems for suspicious activity and maintain an incident response plan to address data breaches or security incidents promptly.
Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee absolute security. You acknowledge and accept the inherent security risks of internet-based transactions.
8 Data Retention
sdtoto retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and the purpose for which it is processed:
- Account Data: Active account data is retained for the duration of your account relationship with sdtoto. If you close your account voluntarily, we will retain certain data for up to seven (7) years to comply with AML, CTF, tax, and financial recordkeeping obligations.
- Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years in accordance with Indonesian financial regulations and international AML standards.
- KYC Documents: Identity verification documents (KTP, passport, selfie) are retained for the duration of your account relationship and for seven (7) years after account closure to satisfy regulatory compliance requirements.
- Customer Support Records: Live chat transcripts, email correspondence, and support tickets are retained for up to three (3) years for quality assurance and dispute resolution purposes.
- Marketing Data: Marketing preferences and communication history are retained until you withdraw consent or request deletion, subject to legal recordkeeping requirements.
- Technical & Usage Data: Log files, cookies, and analytics data are typically retained for up to two (2) years unless a longer retention period is required for security, fraud prevention, or legal purposes.
At the end of the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be associated with you as an individual.
9 Cookies & Tracking Technologies
sdtoto uses cookies, web beacons, pixels, local storage, and similar tracking technologies to enhance your user experience, analyze platform usage, deliver personalized content, and improve our services. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information about your preferences and activity.
Types of Cookies We Use:
- Essential Cookies: These cookies are necessary for the platform to function properly and cannot be disabled. They enable core features such as user authentication, session management, and security.
- Performance Cookies: These cookies collect information about how you use the platform, such as which pages you visit, how long you stay, and whether you encounter errors. This data helps us optimize platform performance and user experience.
- Functionality Cookies: These cookies remember your preferences (language, time zone, currency) and enable personalized features to enhance your experience.
- Analytics Cookies: We use third-party analytics services (such as Google Analytics) to collect aggregated usage data and generate insights about user behavior. This data is typically anonymized and does not directly identify you.
- Advertising Cookies: These cookies may be used to deliver personalized promotional content based on your interests and activity. If you do not wish to receive personalized advertising, you may opt out through your browser settings or industry opt-out tools.
Managing Cookies: Most web browsers allow you to control cookies through their settings. You can block, delete, or restrict cookies, but please note that disabling essential cookies may affect your ability to use certain features of the sdtoto platform. For more information on managing cookies, consult your browser's help documentation.
10 Your Rights
Under applicable data protection laws, you have certain rights regarding your personal information. These rights include:
- Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.
- Right to Rectification: If you believe any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it.
- Right to Deletion (Right to be Forgotten): You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Please note that we may be required to retain certain data to comply with legal obligations or for legitimate business purposes.
- Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes or when processing is based on our legitimate interests. We will cease such processing unless we have compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
- Right to Lodge a Complaint: If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of these rights, please contact our Data Protection Officer or customer support team using the contact details provided in Section 13. We will respond to your request within 30 days and may require verification of your identity before processing certain requests.
11 International Data Transfers
sdtoto operates internationally and may transfer, store, and process your personal data in countries outside of Indonesia. Some of these countries may have data protection laws that differ from those in Indonesia. When we transfer personal data across borders, we implement appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy and applicable data protection laws.
Such safeguards may include standard contractual clauses approved by relevant regulatory authorities, adequacy decisions recognizing equivalent levels of data protection, or other legally recognized transfer mechanisms. By using the sdtoto platform, you consent to the international transfer of your personal data as described in this Privacy Policy.
12 Changes to This Privacy Policy
sdtoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes to this policy, we will notify you by posting the updated policy on this page with a new "Last Updated" date at the top.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the sdtoto platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using the platform and close your account.
If you have any questions, concerns, or requests regarding this Privacy Policy or how sdtoto processes your personal data, please contact us using the following methods:
- Email: [email protected] (plain text only, not a clickable link)
- Subject Line: "Privacy Inquiry" or "Data Protection Request"
- Live Chat: Available 24/7 via the chat widget on the sdtoto homepage
- Response Time: We aim to respond to all privacy-related inquiries within 72 hours and to data subject access requests within 30 days.
By using the sdtoto platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. We are committed to protecting your privacy and handling your personal data with care, transparency, and respect.