Privacy Policy

1. Information We Collect

bktoto collects various categories of personal information necessary to provide our online betting and gaming services, maintain security, comply with legal obligations, and improve user experience. The information we collect falls into the following categories:

1.1 Account Registration Information

When you create a bktoto account, we collect the following personal information:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, and place of birth to verify age eligibility (21+ requirement) and identity.
• Contact Information: Email address, mobile telephone number with country code, and residential address including street, city, province, and postal code for communication and account verification purposes.
• Account Credentials: Username and encrypted password for account access and security.
• Government Identification: Indonesian KTP (Kartu Tanda Penduduk) number and scanned or photographed copy of your KTP for Know Your Customer (KYC) compliance and age verification.

1.2 Financial and Transaction Information

To process deposits, withdrawals, and maintain accurate financial records, bktoto collects:

• Payment Method Details: Bank account numbers, account holder names, bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI), and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing deposits and withdrawals.
• Transaction History: Complete records of all deposits, withdrawals, bets placed, winnings, losses, bonuses claimed, and account balance changes with timestamps and transaction identifiers.
• Payment Verification Documents: Bank statements, e-wallet screenshots, or other documentation proving ownership of payment methods to prevent fraud and money laundering.

1.3 Technical and Usage Information

When you access and use bktoto's platform, we automatically collect technical information including:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider, geographic location derived from IP address (city/region level, not precise GPS coordinates), and timestamp of connections.
• Behavioral Data: Pages visited, games played, bet amounts, session duration, click patterns, and navigation paths through our website to understand user preferences and improve platform usability.
• Cookies and Tracking Technologies: Session cookies to maintain login state, preference cookies to remember settings, and analytics cookies to measure website traffic and user engagement. You can control cookie preferences through your browser settings.

1.4 Communication Records

To provide quality customer service and resolve disputes, bktoto maintains records of:

• Customer Support Interactions: Live chat transcripts, email correspondence, WhatsApp messages, and phone call recordings (with your consent) including timestamps and support agent identifiers.
• Marketing Communications: Records of promotional emails sent, SMS messages delivered, and your consent status for receiving marketing materials.

2. How We Use Your Information

bktoto uses the collected information for legitimate business purposes that are necessary to provide, maintain, and improve our services. Specific uses include:

2.1 Service Provision and Account Management

• Creating and maintaining your bktoto account with secure authentication
• Processing deposits and crediting funds to your account balance
• Processing withdrawal requests and transferring winnings to your designated payment methods
• Enabling you to place bets on sports events, play casino games, and participate in togel (lottery-style numbers betting)
• Calculating winnings, settling bets, and updating account balances accurately
• Providing customer support through live chat, email, WhatsApp, and other communication channels

2.2 Legal Compliance and Security

• Verifying your age to ensure compliance with our 21+ requirement and prevent underage gambling
• Conducting Know Your Customer (KYC) verification to prevent identity theft, fraud, and money laundering
• Monitoring for suspicious activity, fraudulent transactions, bonus abuse, and terms of service violations
• Detecting and preventing multiple accounts, collusion between players, and other prohibited practices
• Complying with legal obligations under our licensing jurisdiction including reporting requirements and responding to lawful requests from authorities
• Enforcing our Terms & Conditions and investigating disputes between bktoto and users

2.3 Service Improvement and Personalization

• Analyzing user behavior and preferences to improve website navigation, game selection, and overall user experience
• Identifying and fixing technical issues, bugs, and performance problems
• Developing new features, games, and betting markets based on user demand
• Personalizing bonus offers, promotions, and game recommendations based on your playing history and preferences
• Conducting research and analytics to understand market trends and player behavior patterns

2.4 Marketing and Communications

• Sending promotional emails about bonuses, special offers, and new games (only with your explicit consent)
• Delivering SMS notifications about account activity, withdrawal confirmations, and important updates
• Providing personalized recommendations for sports betting markets and casino games you might enjoy
• Communicating important service announcements, maintenance schedules, and policy changes

Note on Marketing Consent: You can withdraw consent for marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account settings, or contacting customer support. Withdrawal of marketing consent does not affect essential service communications like withdrawal confirmations and security alerts.

3. Information Sharing and Disclosure

bktoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

3.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform specific functions on our behalf, and these providers may have access to personal information necessary to perform their services:

• Payment Processors: PCI-DSS compliant payment gateways that handle deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, etc.). These processors see only the minimum information necessary to complete transactions.
• Identity Verification Services: KYC verification providers that authenticate government-issued identification documents to prevent fraud and comply with anti-money laundering regulations.
• Customer Support Tools: Live chat software providers, email service providers, and CRM systems that help us deliver efficient customer support.
• Analytics and Monitoring: Web analytics services that help us understand user behavior, identify technical issues, and improve platform performance.
• Game and Betting Providers: Licensed software providers who supply slots, live casino games, and sportsbook odds integration.

All third-party service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection laws.

3.2 Legal Obligations and Authorities

bktoto may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal processes such as court orders, subpoenas, or lawful requests from government authorities
• Enforce our Terms & Conditions and investigate potential violations
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of bktoto, our users, or the public as required or permitted by law
• Cooperate with law enforcement investigations into money laundering, terrorist financing, or other criminal activities

3.3 Business Transfers

In the event that bktoto is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information with other parties when you have given explicit consent for such sharing. For example, if you participate in a tournament or promotion co-sponsored with another brand, we may share your username and tournament results with that partner with your permission.

4. Data Security Measures

bktoto employs comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

4.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and bktoto's servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, preventing interception by third parties.
• Data Encryption at Rest: Personal information stored in our databases is encrypted using advanced encryption standards (AES-256) to protect against unauthorized access even if storage media is compromised.
• Secure Password Storage: User passwords are hashed using bcrypt or similar one-way cryptographic algorithms, meaning even bktoto cannot retrieve your original password.
• Network Security: Firewalls, intrusion detection systems, and regular vulnerability scans protect our infrastructure from external attacks.
• DDoS Protection: Distributed Denial of Service mitigation systems ensure platform availability and protect against malicious traffic.

4.2 Organizational Security Measures

• Access Controls: Personal information is accessible only to authorized employees and contractors who require access to perform their job functions, based on the principle of least privilege.
• Staff Training: All employees with access to personal data receive regular training on data protection, security best practices, and privacy regulations.
• Confidentiality Agreements: Employees and contractors sign legally binding confidentiality agreements prohibiting unauthorized disclosure of customer information.
• Audit Trails: All access to sensitive personal information is logged with timestamps, user identifiers, and actions performed for accountability and investigation purposes.
• Third-Party Audits: bktoto undergoes regular security audits by independent cybersecurity firms to identify vulnerabilities and verify compliance with security standards.

4.3 Your Security Responsibilities

While bktoto implements robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password containing a mix of letters, numbers, and special characters
• Never share your password with anyone, including customer support representatives (legitimate staff will never ask for your password)
• Log out of your account when using shared or public computers
• Keep your email account secure, as it can be used to reset your bktoto password
• Report any suspicious account activity to customer support immediately
• Be cautious of phishing attempts—bktoto will never ask you to provide sensitive information via email

5. Data Retention and Deletion

5.1 Retention Periods

bktoto retains your personal information for different periods depending on the type of data and purpose for which it was collected:

• Account Information: Retained for the duration of your active account plus seven (7) years after account closure to comply with financial record-keeping regulations and resolve potential disputes.
• Transaction Records: Retained for seven (7) years from the transaction date as required by anti-money laundering regulations and tax laws.
• Identity Verification Documents: Retained for seven (7) years after account closure to comply with KYC and anti-money laundering obligations.
• Communications: Customer support chat transcripts and emails retained for three (3) years to maintain service quality and resolve disputes.
• Technical Logs: IP addresses, device information, and access logs retained for one (1) year for security monitoring and fraud prevention.
• Marketing Consent Records: Retained indefinitely to demonstrate compliance with marketing regulations and respect your communication preferences.

5.2 Account Closure and Data Deletion

You may request account closure at any time by contacting customer support. Upon account closure:

• Your account will be permanently deactivated and you will no longer be able to log in or place bets
• Any remaining account balance must be withdrawn before closure (subject to meeting wagering requirements)
• Personal information will be retained for the periods specified above to comply with legal obligations
• After the retention period expires, your personal data will be securely deleted or anonymized such that it can no longer identify you

5.3 Right to Erasure Requests

You have the right to request deletion of your personal information under certain circumstances. However, we may be unable to delete data if retention is necessary to comply with legal obligations, establish or defend legal claims, or fulfill legitimate business purposes. When processing erasure requests, we will explain any limitations on deletion and delete all data that is not subject to retention requirements.

6. Your Privacy Rights

As a bktoto user, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to receive a copy of that data. To exercise this right, contact customer support with your request. We will provide the information in a commonly used electronic format within thirty (30) days.

6.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update many details yourself through your account settings, or contact customer support for assistance with changes that require verification (such as name or date of birth changes, which require supporting documentation).

6.3 Right to Erasure

You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected, you withdraw consent, or you object to processing. As noted above, legal obligations may require us to retain certain data despite erasure requests.

6.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain circumstances, such as when you contest data accuracy or object to processing while we verify legitimate grounds for processing.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

6.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can exercise this right by clicking unsubscribe links in promotional emails or adjusting your account preferences.

6.7 Exercising Your Rights

To exercise any of these rights, please contact bktoto customer support via email at [email protected] or through live chat. We will respond to your request within thirty (30) days and may require identity verification to protect your privacy before disclosing or modifying personal information.

7. International Data Transfers

bktoto operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian regulations. When we transfer data internationally, we implement appropriate safeguards including:

• Ensuring data recipients are located in countries with adequate data protection regulations recognized by international standards
• Executing data processing agreements with third-party service providers that include standard contractual clauses ensuring equivalent data protection
• Implementing technical and organizational measures to protect data during transit and storage regardless of location
• Conducting regular assessments of data transfer risks and implementing additional safeguards as necessary

By using bktoto's services, you acknowledge and consent to the transfer of your personal information outside Indonesia under these protective measures.

8. Children's Privacy

bktoto's services are strictly for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under 21 years of age. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information and close the associated account. If you believe we have collected information from someone under 21, please contact us immediately at [email protected].

9. Changes to This Privacy Policy

bktoto reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this policy and notify you through one or more of the following methods:

• Prominent notice on our website homepage or within your account dashboard
• Email notification to your registered email address
• In-platform notification when you next log in

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of bktoto's services after changes are posted constitutes your acceptance of the revised policy.

10. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or bktoto's data practices, or if you wish to exercise any of your privacy rights, please contact us through any of the following channels:

• Email: [email protected] (we aim to respond within 24 hours on business days)
• Live Chat: Available 24/7 through the bktoto website (typical response time under 60 seconds)
• WhatsApp: +62 812 3456 7890 (available 08:00-24:00 WIB daily)

For privacy-specific inquiries, please indicate "Privacy Request" in your communication subject line to ensure your message is directed to the appropriate team member.