bdtoto is committed to handling your personal data with the highest standards of care, transparency, and security. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over it. Please read this document in full before registering an Account.
All data transmitted between your device and the bdtoto platform is protected by industry-standard 256-bit SSL encryption, preventing interception by third parties.
bdtoto does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely to operate and improve your Account experience.
Identity verification documents submitted during KYC are stored in an isolated, access-controlled environment separate from general platform databases.
You may request access to, correction of, or deletion of your personal data at any time by contacting our support team. We will respond within the timeframes set out in this Policy.
bdtoto's servers are hosted in internationally certified data centres with physical security controls, redundant power, and regular third-party security audits.
We do not retain your personal data indefinitely. Specific retention periods for each data category are defined in this Policy and applied consistently across all systems.
This Privacy Policy ("Policy") applies to all personal data processed by bdtoto in connection with the operation of the platform accessible at https://bdtoto.cam (the "Platform"), including all associated mobile-optimized interfaces.
The data controller responsible for your personal data is the internationally incorporated entity that owns and operates bdtoto under an offshore gaming license ("the Operator", "we", "us", "our"). For all data-related inquiries, the Operator can be reached at [email protected].
This Policy covers:
By accessing or using the Platform, or by registering an Account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
Indonesia market context: bdtoto primarily serves players based in Indonesia. While Indonesian domestic privacy law (Government Regulation No. 71 of 2019 on Electronic Systems and Transactions, and the Personal Data Protection Law No. 27 of 2022) informs our data handling standards, this Platform is operated under international jurisdiction. We apply internationally recognized privacy principles — including data minimization, purpose limitation, and accountability — as the baseline standard for all data processing.
bdtoto collects personal data from you in the following categories and through the following means:
2.1 — Data you provide directly:
2.2 — Data collected automatically:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, DOB, KTP number, photograph | Registration & KYC form |
| Contact Data | Email address, residential address | Registration form |
| Financial Data | Bank account details, e-wallet IDs, transaction history | Payment flow & transaction logs |
| Technical Data | IP address, device type, browser, session logs | Automatic server-side collection |
| Gaming Activity Data | Bets placed, games played, RTP history | Platform activity logs |
| Communications Data | Support chat transcripts, email threads | Live chat & email systems |
| Cookie & Analytics Data | Page-view events, session durations, referral sources | Cookie & analytics tools |
bdtoto processes your personal data on the following legal bases, consistent with internationally recognized data protection principles:
bdtoto uses the personal data described in Section 2 for the following specific purposes:
bdtoto uses cookies and similar tracking technologies to deliver core functionality, enhance user experience, and collect analytics data. The following categories of cookies are used on the Platform:
You may control non-essential cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some Platform features. We do not use advertising cookies from third-party ad networks, and we do not share cookie data with external marketing platforms.
bdtoto does not sell or rent your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes outlined in Section 4:
No data sales: bdtoto does not engage in the sale or rental of customer data to data brokers, marketing agencies, or advertising networks. Your data is processed solely to operate the Platform and comply with our legal obligations.
bdtoto is an internationally operated platform. Your personal data may be transferred to, and stored in, jurisdictions outside Indonesia where our servers, service providers, or business partners are located. These jurisdictions may have data protection laws that differ from those in Indonesia.
Where data is transferred internationally, bdtoto ensures that appropriate safeguards are in place, including:
By using the Platform, you acknowledge and consent to the international transfer of your data as described above.
bdtoto retains your personal data for as long as necessary to fulfill the purposes for which it was collected, and to comply with legal and regulatory obligations. Specific retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Profile Data | Active Account + 7 years post-closure | Legal and regulatory requirements, dispute resolution |
| KYC Documents (KTP, selfie) | Active Account + 7 years post-closure | AML and licensing compliance |
| Transaction History | Active Account + 7 years post-transaction | Financial auditing and tax compliance |
| Gaming Activity Logs | Active Account + 5 years | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years post-communication | Customer service quality and complaint handling |
| Marketing Consent Records | Until consent withdrawn + 2 years | Proof of consent for regulatory audit |
| Session & Analytics Data | Anonymized after 12 months | Platform improvement, aggregated reporting |
After the applicable retention period expires, personal data is either permanently deleted or anonymized such that it can no longer be associated with an identifiable individual.
bdtoto implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures include:
While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. bdtoto cannot guarantee absolute security, but we commit to notifying you promptly in the unlikely event of a data breach affecting your personal data.
You have the following rights with respect to your personal data held by bdtoto:
Request a copy of the personal data we hold about you, in a commonly used electronic format.
Request correction of inaccurate or incomplete personal data without undue delay.
Request deletion of your personal data where there is no overriding legal obligation to retain it.
Request temporary suspension of data processing in certain circumstances (e.g., while disputing accuracy).
Receive your personal data in a structured, machine-readable format for transfer to another service.
Object to processing based on legitimate interests, or withdraw consent for marketing communications.
How to exercise your rights: Submit a written request to [email protected] clearly stating which right you wish to exercise and providing sufficient information for us to verify your identity. We will respond within 30 calendar days of receiving a valid request. In complex cases, we may extend this period by an additional 30 days with prior notice.
Limitations: Certain rights are not absolute. For example, we may be unable to delete data that we are legally required to retain for AML or tax compliance purposes. Where we cannot comply fully with your request, we will explain the reasons clearly in our response.
bdtoto is an adults-only platform. The minimum age to register an Account and use the Platform is 21 years, consistent with Indonesian legal standards for gambling activities.
We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an Account or submitted personal data, we will take immediate action to:
Parents and guardians are encouraged to monitor their children's internet usage and prevent access to gambling platforms. If you believe a minor has accessed bdtoto, please contact us immediately at [email protected].
As part of our commitment to responsible gaming, bdtoto monitors certain behavioral data to identify patterns that may indicate problem gambling. This includes:
Where our monitoring systems detect concerning patterns, we may:
All responsible gaming data is processed under the legal basis of legitimate interest in player welfare and is handled with the same confidentiality standards as other personal data. For more details on our responsible gaming tools and policies, please visit our Responsible Gaming page.
The Platform integrates with third-party services (payment processors, game providers, analytics tools) as described in Section 6. Each of these third parties operates under its own privacy policy, which governs how they handle data you share with them directly.
bdtoto is not responsible for the privacy practices or content of external websites or services. If you navigate away from the Platform to a third-party site (for example, a payment provider's authentication page), you are subject to that site's own privacy policy.
We recommend reviewing the privacy policies of any third-party service you interact with through the Platform.
bdtoto reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features.
Material changes — those that substantively alter your rights or expand the ways in which we use your data — will be notified to you via email to your registered address at least 14 days before the changes take effect. Non-material changes (such as clarifications, corrections of typos, or updates to contact information) may be made without advance notice.
The current version of this Privacy Policy is always accessible at https://bdtoto.cam/privacy-policy. The "Effective Date" displayed at the top of this page reflects the date on which the current version came into force.
Continued use of the Platform after the effective date of an amended Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should close your Account before the new Policy takes effect.
For all privacy-related inquiries, data access requests, correction requests, deletion requests, or complaints regarding the handling of your personal data, please contact bdtoto's data protection team:
If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction. For Indonesian residents, the relevant authority is the Ministry of Communication and Informatics (Kominfo) or the Personal Data Protection Authority once fully operational under Law No. 27 of 2022.
We're here to help: bdtoto takes data privacy seriously. If you have any questions or concerns about how your data is handled, don't hesitate to reach out. We commit to responding promptly, transparently, and in accordance with best-practice data protection standards.
Our support team is available 24/7 to answer any privacy-related questions, help you exercise your data rights, or assist with Account security settings.