Your Privacy Matters to Us
We built bantoto around your account security and data protection. This policy explains how we collect, use and safeguard your information across our live casino, slots and sportsbook...
Our Privacy Commitment
bantoto operates under Indonesian data protection standards and complies with local regulations where we're licensed to operate. We collect only the information needed to verify your identity, process your QRIS, DANA, OVO and GoPay transactions, and deliver our live casino, slots and sportsbook services. Your personal data is encrypted, stored securely and never sold to third parties. We use cookies and analytics
to improve your experience, and you can manage these preferences in your account settings at any time.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Questions? We're Here
Email Support
Reach our privacy team at [email protected] with any data protection questions, access requests or concerns about how we handle your information.
Account Settings
Manage your privacy preferences, cookie consent and data sharing options directly in your bantoto account dashboard under Privacy & Security.
Live Chat
Connect with our support team via live chat during operating hours to discuss your privacy rights, data deletion requests or account security concerns.
Why Your Data Is Safe With Us
Encryption Standard
All payment data, account credentials and personal information are encrypted using industry-standard TLS 1.2+ protocols. Your QRIS, DANA, OVO and GoPay transactions are protected end-to-end.
No Third-Party Sales
We never sell, rent or share your personal data with marketing firms, data brokers or unaffiliated companies. Your information stays within bantoto's secure systems.
Regular Security Audits
Our infrastructure undergoes quarterly security assessments and penetration testing to identify and patch vulnerabilities before they affect your account.
Transparent Data Use
We document exactly how your data flows through our systems — from account creation through payment processing to analytics. You can request a full data audit anytime.
Compliance Framework
bantoto follows Indonesian data protection guidelines and maintains compliance with local regulations in supported regions where we operate our live casino and sportsbook.
Incident Response Plan
If a data breach occurs, we notify affected users within 48 hours and provide guidance on account protection steps. Our incident team works around the clock to contain and resolve issues.
How Our Policy Stands
| Data Minimization | We collect only what's essential for account verification, payment processing and service delivery — no unnecessary personal details or behavioral tracking beyond analytics. |
|---|---|
| User Rights | You can request access to your data, correct inaccuracies, delete your account and export your information in portable format. Submit requests via [email protected] anytime. |
| Cookie Transparency | Our cookie banner explains each tracking type — essential, performance, marketing — and lets you opt out of non-essential cookies without losing core platform functionality. |
| Payment Partner Privacy | QRIS, DANA, OVO and GoPay transactions are processed through encrypted channels. We share only transaction IDs and amounts needed for settlement; payment partners handle card data separately. |
| Retention Limits | Account data is retained for the duration of your membership plus 12 months after closure for regulatory compliance. Transaction records follow Indonesian tax and banking retention rules. |
| International Transfers | If your data is transferred outside Indonesia for backup or analytics, it remains under the same encryption and protection standards as data stored locally. |
| Policy Updates | We notify you of material privacy policy changes 30 days in advance via email and in-app notification. Continued use of bantoto after the effective date means you accept the updated terms. |
What Defines Our Privacy Approach
Account Verification
We verify your identity using government ID and phone number to prevent fraud and comply with Indonesian financial regulations. This protects both your account and our platform.
Session Security
Your login sessions expire after 30 minutes of inactivity. Multi-factor authentication is available to add an extra layer of protection to your bantoto account.
Audit Logs
We maintain detailed logs of account access, payment transactions and security events. You can review your login history and connected devices in your account settings.
Fraud Detection
Our system monitors for unusual account activity, suspicious login patterns and unauthorized payment attempts. We alert you immediately if we detect potential fraud.
Data Portability
Export your account data, transaction history and personal information in standard formats. This lets you move your records to another service if you choose to leave bantoto.
Deletion Rights
Close your account and request permanent deletion of your personal data. We remove your information from active systems within 30 days, with backups purged within 90 days.