hptoto Casino & Sportsbook Data Care

When you open an account on hptoto, we collect personal data for verification and payment processing. This page explains what we gather, how we protect it, and what rights you hold over that information. Our approach is to collect only the minimum data needed to operate a compliant service and to keep that data secure.

We recognize that privacy is a central concern for account holders. We do not sell your data to third parties. We do not use your information for marketing beyond service notifications. We encrypt sensitive details like payment information and identity documents. This policy describes our practices across all jurisdictions where hptoto operates, including Jakarta, Surabaya, Bandung, Medan, and Semarang.

If you have privacy questions or wish to request access to or deletion of your data, contact our support team. We respond in Indonesian and English within business hours. Your rights under this policy are binding regardless of your jurisdiction.

Data we collect on hptoto

We collect the following categories of data when you use hptoto:

• Account information: name, email address, phone number, date of birth, national ID (KTP) number
• Identity and address verification: photograph of your ID document and proof of address (utility bill, rental agreement)
• Payment information: bank account details (for virtual-account transfers) or e-wallet account details (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet handles)
• Account activity: games played, wagers placed, deposits and withdrawals, session timestamps
• Device and connection data: IP address, browser type, device model, operating system
• Cookies and tracking data: session identifiers to keep you logged in and remember preferences

We collect this data when you register, submit verification documents, deposit funds, or interact with hptoto during a session. Some data is collected automatically by our servers; other data you provide voluntarily.

How we use your data

We use the data we collect for the following purposes:

1. Account verification and compliance: We verify your identity against your ID document to comply with anti-money-laundering and anti-fraud regulations. This is required by law in all jurisdictions where hptoto operates.
2. Payment processing: We use your bank or e-wallet details to process deposits and withdrawals. We do not store full payment card details; we use secure third-party processors.
3. Account security: We analyze your activity to detect fraud, account takeover, and suspicious patterns. If we detect unusual behaviour, we may lock your account pending review.
4. Service delivery: We use your email and phone to send account notifications, session history, withdrawal confirmations, and support responses.
5. Legal and regulatory compliance: We retain data as required by your jurisdiction's gaming and financial laws, typically for a minimum of six years.

We do not use your data for marketing beyond transactional emails about your account. We do not share your information with advertisers. We do not profile you for behavioural targeting.

Third-party processors on hptoto

We use external partners to handle specific functions:

• Payment processors: Third-party payment gateways handle mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment transfers. We share only the minimum payment data needed to complete transactions.
• Identity verification providers: We use automated document-scanning services to verify ID photos and address proofs. These services scan your documents but do not store them permanently.
• Hosting and data storage: Our servers are hosted by third-party providers. Data is encrypted both in transit and at rest.
• Email delivery: Transactional emails (password resets, deposit confirmations) are sent via a third-party email service that does not use your data for marketing.

All third-party processors are bound by data-protection agreements that require them to protect your information as we do. We regularly audit their security practices.

Cookies and tracking on hptoto

We use cookies to maintain your session and remember your preferences. Essential cookies are necessary for hptoto to function — for example, a session cookie that keeps you logged in while you play. You cannot disable essential cookies; doing so will log you out.

We also use analytics cookies to understand how our platform is used — for instance, which game categories are most popular or which payment methods process fastest. This helps us optimize our service. Analytics cookies are optional; you can disable them, but doing so will not affect your account functionality.

We do not use cookies for third-party advertising or behavioural tracking.

How long we keep your data

We retain your account data for as long as your account is active. If you close your account, we retain your information for six years to comply with financial and gaming regulations. After six years, we delete or anonymize your data unless law requires longer retention.

Identity documents and payment information are encrypted and stored securely. We do not share these details with anyone except as required by law enforcement or regulatory authorities.

How we protect your data

We use industry-standard encryption (TLS/SSL) to protect data in transit. Passwords are hashed and salted so we cannot read them. Payment details are encrypted and stored in isolated, secure vaults. Identity documents are scanned, verified, and stored in encrypted archives.

Our servers are protected by firewalls and intrusion-detection systems. We perform regular security audits. We monitor for unauthorized access attempts. If we discover a data breach, we notify affected users and relevant authorities without undue delay.

International data transfers and jurisdiction

hptoto is available in multiple jurisdictions. Your data may be transferred to and processed in countries where hptoto operates. These countries may have different data-protection standards than your home jurisdiction. By opening an account, you consent to international data transfers as described in this policy.

If your jurisdiction has a data-protection authority (such as in Indonesia), you have the right to lodge a complaint with that authority regarding our handling of your data.

Contact us about privacy

If you have questions about this privacy policy, wish to request access to your data, or believe your privacy has been violated, contact our support team via live chat or email. We respond in Indonesian and English. We will acknowledge your request within three business days and provide a full response within 30 days.

Our support team can also assist if you are accessing hptoto during holidays like Idul Fitri or Idul Adha when support hours may vary. For urgent data-protection concerns, request escalation to our compliance team.

Policy updates

We may update this privacy policy at any time by publishing a new version on this page. If we make material changes — for instance, adding a new category of data collection or a new third-party processor — we notify registered users via email. Continued use of hptoto after a change constitutes acceptance of the updated policy. If you do not accept a change, you may close your account and request deletion of your data.