Your privacy matters to us. This policy explains precisely what personal data bototo collects, why we collect it, how it is used, and the rights you hold as a player registered on our Platform.
Last Updated: January 2026Six core commitments that define how we handle your personal information on the bototo Platform.
Every data transmission between your device and the bototo Platform is protected by industry-standard 256-bit TLS/SSL encryption. Your account details, financial information, and personal records are never transmitted in plain text.
Player data is stored on access-controlled servers with multiple layers of physical and digital security. We apply the principle of least privilege — only authorized personnel with a genuine operational need can access your personal information.
bototo does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Data is shared only with regulated service providers who support our Platform operations, and only under strict confidentiality agreements.
You have the right to access, correct, and request deletion of your personal data at any time, subject to our legal retention obligations. Submit a data subject request to our support team and we will respond within the timeframe required by applicable law.
bototo uses cookies and similar tracking technologies strictly for Platform functionality, security, and analytics. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings at any time.
bototo's data practices comply with applicable international data protection standards and our licensing authority's requirements. All data processing is grounded in a lawful basis — either your consent, the performance of our contractual obligations, or a legitimate legal interest.
Introduction: bototo ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our Platform. This Privacy Policy ("Policy") describes in detail how we collect, use, store, share, and protect your personal information when you access https://bototo.cam or interact with any bototo service. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you have questions at any point, please contact us at [email protected].
For the purposes of this Privacy Policy, the following terms have the meanings given below:
2.1 bototo acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, bototo is responsible for ensuring that your Personal Data is Processed lawfully, fairly, and transparently, and that appropriate technical and organizational measures are in place to protect it.
2.2 For all data protection inquiries, requests, or complaints, you may contact our Data Protection team directly at [email protected]. Our support team is available 24/7 across WIB, WITA, and WIT time zones to assist players from Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, and all regions of Indonesia.
3.1 Registration Data. When you create a bototo account, we collect your full legal name, date of birth, residential address in Indonesia, email address, phone number, and chosen username. This information is mandatory for account creation and cannot be omitted.
3.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and to verify that you meet the 21+ age requirement, we collect government-issued identity documents such as your KTP (Indonesian national identity card) or passport, proof of residential address, and proof of ownership of your registered payment method.
3.3 Financial Data. We collect details of your deposits and withdrawals, including bank account numbers associated with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, and e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. We do not store full bank account credentials on our servers beyond what is operationally necessary for transaction processing.
3.4 Transaction & Gameplay Data. We record all deposits, withdrawals, wagers placed, game sessions, bet amounts, winnings, and bonus usage. This data is used for account management, fraud prevention, responsible gaming monitoring, and regulatory compliance.
3.5 Technical Data. We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, session duration, and pages visited.
3.6 Communications Data. If you contact our support team via live chat or email, we retain records of those communications — including the content of your messages and any supporting files you attach — for quality assurance, dispute resolution, and training purposes.
3.7 Voluntary Data. Any additional information you choose to provide — such as feedback, survey responses, or promotional entries — will also be collected and stored in line with this Policy.
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Name, date of birth, email, phone, address | Provided by you at sign-up |
| KYC Documents | KTP, passport, utility bill | Uploaded by you during verification |
| Financial Data | Bank account details, e-wallet IDs, transaction history | Provided by you; generated by transactions |
| Gameplay Data | Bets placed, game history, bonus usage | Automatically generated by Platform activity |
| Technical Data | IP address, device type, browser, session logs | Automatically collected via cookies and server logs |
| Communications Data | Live chat transcripts, support emails | Generated when you contact support |
bototo uses your Personal Data for the following purposes:
5.1 Contractual Necessity. The majority of our data Processing is necessary for the performance of the contract between you and bototo — specifically, providing access to the Platform, processing wagers, and managing your account. Without this Processing, we cannot deliver our services.
5.2 Legal Obligation. Certain Processing activities — including KYC identity verification, AML transaction monitoring, and record retention — are required by law. We are obligated to perform these activities regardless of your preferences and cannot offer an opt-out for legally mandated Processing.
5.3 Legitimate Interests. We process certain data — such as technical logs, fraud detection signals, and Platform analytics — on the basis of our legitimate interests in operating a secure, reliable, and legally compliant gambling platform. We conduct a balancing test before relying on this basis to ensure our interests do not override your fundamental privacy rights.
5.4 Consent. Where we send you marketing communications or deploy non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of Processing carried out before the withdrawal.
6.1 What We Do Not Do. bototo does not sell, rent, lease, or otherwise commercially transfer your Personal Data to any third party for their own marketing or commercial purposes. Period.
6.2 Service Providers (Data Processors). We engage carefully selected third-party service providers who Process data on our behalf, strictly under written data processing agreements and only for the purposes we specify. These providers include payment processors and banking partners (to facilitate IDR transactions), KYC and identity verification technology providers, fraud detection and cybersecurity services, cloud hosting and infrastructure providers, and customer support platform providers.
6.3 Game Content Providers. bototo's Platform integrates games developed by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive limited technical data (such as session tokens) necessary to deliver their games. Their own privacy practices are governed by their respective policies.
6.4 Regulatory & Law Enforcement Disclosure. We may disclose your Personal Data to regulatory authorities, law enforcement agencies, tax authorities, or courts where required by applicable law or a valid legal order. We will notify you of such disclosure to the extent permitted by law.
6.5 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of bototo's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice before your data becomes subject to a different privacy policy.
Your Assurance: In every case where your data is shared with a third party, bototo requires that party to maintain appropriate security standards and to use your data solely for the purpose for which it was shared. We do not permit our service providers to use your data for their own purposes.
7.1 bototo operates internationally and some of our service providers are located outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence.
7.2 Where Personal Data is transferred internationally, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with the standards described in this Policy. These safeguards include contractual clauses that bind the receiving party to data protection obligations equivalent to those applied within our own operations.
7.3 By using the bototo Platform, you acknowledge and consent to the transfer of your Personal Data to other jurisdictions as described in this section, where such transfers are necessary for the delivery of our services.
8.1 bototo retains your Personal Data for as long as your account remains active and for a further period as required by applicable law and licensing conditions after account closure. In practice, financial and transaction records are typically retained for a minimum of five years following account closure to satisfy AML and tax reporting obligations.
8.2 KYC documents and identity records are retained for the period required by our licensing authority — generally five to seven years from the date of submission or from the date of account closure, whichever is later.
8.3 Technical logs and gameplay data may be retained for up to two years for fraud detection, dispute resolution, and Platform improvement purposes.
8.4 Marketing communication preference records and consent logs are retained for the duration of your account and for five years thereafter, to demonstrate compliance with applicable consent requirements.
8.5 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that renders it impossible to re-identify.
9.1 What Are Cookies. Cookies are small text files stored on your device when you visit a website. They allow the Platform to recognize your browser, remember your preferences, and maintain session state across page loads.
9.2 Essential Cookies. Certain cookies are strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable Platform performance. These cookies cannot be disabled without impairing Platform functionality.
9.3 Analytics Cookies. We use first-party analytics cookies to understand how players interact with the Platform — which pages they visit most frequently, how long they spend on each section, and which features they use. This data is aggregated and anonymized; it cannot be used to identify individual players.
9.4 Preference Cookies. These cookies remember your settings and preferences — such as your chosen language or display settings — so that you do not need to re-enter them on each visit.
9.5 No Third-Party Advertising Cookies. bototo does not deploy third-party advertising or retargeting cookies. We do not allow external ad networks to track your browsing behavior across other websites via our Platform.
9.6 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features. Refer to your browser's help documentation for instructions on cookie management.
10.1 bototo implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include 256-bit TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for player accounts, regular independent security audits and penetration testing, strict access controls and role-based permissions for internal staff, and 24/7 automated intrusion detection and monitoring systems.
10.2 Your Responsibilities. While we take all reasonable steps to protect your data, account security is a shared responsibility. You are responsible for keeping your login credentials confidential, using a strong and unique password, enabling any additional security features offered by the Platform, and logging out of your account after each session — particularly when using a shared or public device.
10.3 Data Breach Response. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bototo will notify the relevant regulatory authority within 72 hours of becoming aware of the breach and will communicate directly with affected players without undue delay where required by applicable law.
Security Reminder: bototo staff will never ask for your password, PIN, or full payment card details via live chat, email, or any other channel. If you receive any communication claiming to be from bototo and requesting this information, please do not respond and report it to us immediately at [email protected].
As a player on the bototo Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within a reasonable timeframe as required by applicable law, and in any case within 30 calendar days.
Important Note on Legal Obligations: Some rights — particularly the right to erasure — may be limited where bototo is required by law to retain certain data. For example, we cannot delete KYC records or financial transaction logs before the expiry of our legally mandated retention period, even upon your request. We will always explain any such limitation clearly when responding to your request.
12.1 The bototo Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.
12.2 If we become aware that Personal Data has been collected from a person under 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the originating payment method following verification.
12.3 If you are a parent or guardian and believe that a minor in your care has accessed or registered on the Platform, please contact us immediately at [email protected] so that we can take prompt remedial action.
13.1 With your consent, bototo may send you promotional emails, bonus offers, and Platform news. We may also notify you of seasonal promotions tied to Indonesian cultural events such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August).
13.2 You may opt out of marketing communications at any time by clicking the "unsubscribe" link included in every marketing email, or by updating your communication preferences in your Account settings, or by contacting our support team directly.
13.3 Please note that opting out of marketing communications will not affect transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent as part of the contractual relationship and cannot be disabled while your account is active.
13.4 bototo does not engage in unsolicited SMS marketing or outbound telemarketing. We will never contact you by phone to promote our services.
14.1 The bototo Platform may contain references to third-party game providers and payment service partners. If you navigate away from our Platform to a third-party website or service, please be aware that this Privacy Policy does not apply to those external sites.
14.2 bototo has no control over the content or privacy practices of third-party websites and accepts no responsibility or liability for their policies. We encourage you to review the privacy policy of any external service you access.
15.1 bototo reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The "Last Updated" date at the top of this page will be revised accordingly.
15.2 Where changes are material — meaning they significantly affect your rights or how we use your data — we will provide prominent notice on the Platform and, where appropriate, send a notification to your registered email address prior to the changes taking effect.
15.3 Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and request account closure.
For any privacy-related questions, data subject requests, or concerns about how bototo handles your Personal Data, please reach out to our team through the following channels:
Our support team includes native Indonesian-speaking agents who can assist players from Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Makassar, Semarang, Palembang, and all other regions across the Indonesian archipelago. While this website is in English, we understand that privacy matters may sometimes be easier to discuss in your first language, and our team is fully equipped to help.
Our team is available around the clock to address any concerns about how your data is handled. You can also explore our Terms & Conditions for full platform rules, or visit our FAQ for quick answers to common questions.