Your privacy matters to us. This policy explains exactly what personal data hbtoto collects, why we collect it, how it is used and protected, who it may be shared with, and what rights you hold over your own information as a registered player on our platform.
Last Updated: 1 January 2026These cards summarize the core principles underpinning hbtoto's approach to data protection. They complement — but do not replace — the full legal text below.
All personal and financial data stored by hbtoto is protected using industry-standard 256-bit SSL encryption. Our infrastructure undergoes regular independent security audits to identify and address vulnerabilities proactively.
hbtoto will never sell, rent, or trade your personal data to third parties for commercial marketing purposes. Any data sharing is limited strictly to operational needs — such as payment processing and KYC verification.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within the timeframes set out in this policy.
We use cookies strictly for session management, platform performance, and analytics. We do not deploy third-party advertising trackers. Our cookie policy is described in full in the relevant section below.
hbtoto applies a data minimization principle — we collect only the information that is genuinely necessary to operate your account, verify your identity, process transactions, and deliver our services.
In the unlikely event of a data security incident affecting your personal information, hbtoto will notify impacted users by email within 72 hours of becoming aware of the breach, in line with international best practice.
hbtoto ("we", "us", "our") is committed to protecting the privacy and security of all personal data entrusted to us by our users ("you", "your"). This Privacy Policy sets out in clear terms how hbtoto collects, processes, stores, shares, and protects your personal information in the course of providing our online gaming and sports betting services.
hbtoto operates the platform accessible at https://hbtoto.cam, which serves Indonesian players with a range of gaming products including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot games, and crash games. As part of operating these services, we necessarily process certain personal data to fulfill account management, payment processing, identity verification, fraud prevention, and customer support functions.
We take our responsibility as custodians of your data seriously. This policy is written in plain, professional English to ensure that every player — regardless of technical background — can clearly understand how their information is handled. If at any point you have questions not answered by this document, please contact our data support team at the details provided in Section 16.
The following terms carry specific meanings throughout this Privacy Policy:
hbtoto collects Personal Data through several channels and for clearly defined purposes. The categories of data we collect are described below:
When you create an account, we collect: full legal name, date of birth, email address, mobile phone number, residential address (including city and province within Indonesia), username, and encrypted password.
To comply with our identity verification obligations, we collect copies of government-issued identification documents — primarily the Indonesian National Identity Card (KTP) — along with selfie photographs and, where required, proof of address documents and source-of-funds evidence.
We collect details of the payment accounts you use to deposit and withdraw funds, including Indonesian bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, OCBC NISP, BSI, Bank Permata) and e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full card numbers, CVV codes, or bank PINs.
We maintain records of all deposit and withdrawal transactions, bet placements, game outcomes, bonus activations, and account balance history associated with your account.
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and clickstream data.
When you contact our customer support team via live chat or email, we retain records of those communications, including your support tickets, chat transcripts, and any documents you share with us during the interaction.
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Name, email, phone, address | Provided by you at sign-up |
| KYC Data | KTP copy, selfie, proof of address | Uploaded by you during verification |
| Financial Data | Bank account number, e-wallet ID | Provided by you during deposit/withdrawal |
| Transaction Data | Bet history, deposit records | Generated automatically by Platform |
| Technical Data | IP address, device type, browser | Collected automatically via cookies/server logs |
| Communications Data | Support chat transcripts, emails | Recorded during support interactions |
hbtoto processes your Personal Data for the following purposes, each of which is necessary for the operation of our platform and services:
To create, maintain, and administer your hbtoto account, including user authentication, session management, and account security monitoring.
To verify your identity, confirm your age (21+ eligibility requirement), and fulfill our compliance obligations relating to anti-money laundering, fraud prevention, and responsible gaming standards.
To process your deposits and withdrawals, reconcile payment records with our banking and e-wallet partners, and maintain accurate financial ledgers for your account.
To provide you with access to sports betting markets, live casino games, togel draws, slot games, and other gaming products available on the Platform, including calculating bet outcomes and crediting winnings to your account.
To respond to your inquiries, resolve technical issues, investigate complaints, and provide assistance via our 24/7 Indonesian-language support channels.
To detect, prevent, and investigate fraudulent activity, collusion, bonus abuse, and other prohibited conduct that violates our Terms & Conditions.
To analyze aggregated usage patterns, improve platform performance, optimize user experience, and develop new features and gaming products.
Where you have consented, to send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and special offers. You may opt out at any time.
hbtoto processes your Personal Data on the following legal grounds:
hbtoto does not sell, rent, or trade your Personal Data to third parties for commercial marketing purposes. However, we may share your Personal Data with the following categories of recipients where necessary to deliver our services:
We share limited financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly for the purpose of processing your deposit and withdrawal transactions.
We share identity documents with specialized third-party KYC verification service providers who assist in validating the authenticity of your submitted documents. These providers are bound by strict data processing agreements and retain data only for the duration required to complete verification.
We share limited technical data (such as session tokens) with our licensed game suppliers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe — to enable you to play their games. These providers do not have access to your full Personal Data profile.
We may share relevant data with fraud detection and prevention platforms to identify and block suspicious activity, collusion, or abuse of our services.
We may disclose Personal Data where required by law, court order, or regulatory request, or where disclosure is necessary to protect the rights, property, or safety of hbtoto, our users, or the public.
hbtoto's primary operations are based internationally, and some of our service providers and data processors are located outside Indonesia. This means that your Personal Data may be transferred to, stored in, and processed in jurisdictions that may not provide the same level of data protection as Indonesian law.
Where we transfer data internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms recognized under international data protection frameworks. We require all international processors to maintain security standards equivalent to those we uphold internally.
hbtoto retains your Personal Data only for as long as necessary to fulfill the purposes set out in this Privacy Policy, or as required by applicable legal, accounting, or regulatory obligations.
While your account remains active, we retain your Personal Data to provide ongoing services, maintain transaction history, and fulfill our compliance obligations.
After you close your account, we retain Personal Data for a period of 7 years from the date of account closure to comply with financial record-keeping obligations, resolve disputes, and investigate fraud or abuse that may have occurred during the account's active period.
If you opt out of marketing communications, we will retain a suppression record of your email address or phone number to ensure that we do not inadvertently contact you again in the future.
Server logs and technical data are typically retained for 90 days, after which they are automatically purged unless required for ongoing security investigations.
The hbtoto Platform uses cookies and similar tracking technologies to enhance your experience, maintain session state, and analyze platform usage.
We use third-party analytics services to understand aggregated user behavior patterns. These services may place cookies on your device. We configure these tools to anonymize IP addresses where possible.
Most web browsers allow you to control cookies through their settings preferences. However, disabling essential cookies may prevent you from accessing certain features of the Platform, including account login and gameplay.
hbtoto employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or damage. Our security infrastructure includes:
While we implement robust security measures, no system can be guaranteed to be 100% secure. In the unlikely event of a data security incident that compromises your Personal Data, we will notify you by email within 72 hours of becoming aware of the breach, in accordance with international best practice.
As a user of the hbtoto Platform, you hold the following rights with respect to your Personal Data:
You may request a copy of the Personal Data we hold about you at any time. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your request.
If any Personal Data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information directly through your account settings, or contact our support team for assistance.
You may request the deletion of your Personal Data. However, we may be required to retain certain data to comply with legal obligations (such as financial record-keeping requirements) or to establish, exercise, or defend legal claims.
You may request that we limit how we use your Personal Data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
You have the right to receive your Personal Data in a portable format and, where technically feasible, have it transmitted directly to another service provider.
You may object to our processing of your Personal Data where we rely on legitimate interests as the legal basis. You also have the absolute right to opt out of direct marketing at any time.
To exercise any of these rights, please submit a written request to our data support team at the contact details provided in Section 16. We will respond to all legitimate requests within 30 days. In complex cases, we may extend this period by an additional 30 days and will inform you of the extension and the reasons for the delay.
The hbtoto Platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from individuals under this age.
If we become aware that we have inadvertently collected Personal Data from a person under 21 years of age, we will take immediate steps to delete that information and permanently close the associated account. Any deposits made by underage users will be returned to the original payment source, and any winnings will be forfeited.
If you believe that a person under 21 has registered an account on our Platform, please contact us immediately at the details provided in Section 16 so that we can investigate and take appropriate action.
The hbtoto Platform may contain links to third-party websites, services, or applications. This Privacy Policy applies only to hbtoto and does not govern the data practices of any third-party service.
We are not responsible for the privacy policies or practices of external websites. We encourage you to review the privacy policies of any third-party services before providing them with your Personal Data.
When you interact with third-party game providers through our Platform, their own privacy policies may apply to data collected during gameplay. We recommend reviewing the privacy notices of Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and other game suppliers whose products you use.
hbtoto may send you promotional communications about bonuses, new games, tournaments, and special offers via email, SMS, or in-platform notifications, where you have consented to receive such communications.
During account registration, you will be given the option to consent to marketing communications. You may also opt in at any time through your account settings.
You may opt out of marketing communications at any time by:
Please note that opting out of marketing communications will not affect transactional or service-related messages, such as account verification emails, withdrawal confirmations, or important policy updates.
hbtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations.
Where amendments are material — meaning they significantly affect how we process your Personal Data or the rights you hold — we will notify registered users by email at least 14 days before the revised policy takes effect.
The "Last Updated" date displayed at the top of this page always reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Your continued use of the hbtoto Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how hbtoto handles your Personal Data, or if you wish to exercise any of your data rights described in Section 11, please contact our data support team:
When submitting a data request, please provide sufficient information to verify your identity (such as your registered email address and account username) to ensure we release Personal Data only to the rightful account holder.
For questions about our Terms & Conditions or responsible gaming tools, please visit our Terms & Conditions and Responsible Gaming pages respectively.
Our dedicated data support team is here to help you understand your privacy rights and assist with any data-related requests. Contact us anytime for clarification or to exercise your data rights.