Last Updated: January 15, 2026 | Effective Date: January 15, 2026

This Privacy Policy ("Policy") describes how hjtoto ("we", "us", "our", "the Company", "the Platform") collects, uses, stores, processes, shares, and protects the personal information of users ("you", "your", "User", "Player") who access or use our online betting platform at hjtoto.cam. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable Indonesian data protection laws and international best practices. By creating an account, accessing our website, or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

hjtoto takes data protection seriously. We implement industry-standard security measures, including military-grade 256-bit SSL encryption, secure server infrastructure, and strict access controls to prevent unauthorized access, disclosure, alteration, or destruction of your personal information. This Policy explains what information we collect, why we collect it, how we use it, with whom we may share it, and the choices you have regarding your data. If you have any questions or concerns about our privacy practices, please contact us at [email protected].

1. Information We Collect

1.1 Personal Information You Provide

When you register for an hjtoto account, we collect the following personal information directly from you:

  • Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP, passport, or driver's license number).
  • Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code).
  • Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account numbers), payment card information (if applicable), transaction history, deposit and withdrawal records.
  • Account Credentials: Username, password (stored in encrypted form), security questions and answers.
  • Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), selfie photographs for identity verification (KYC/AML compliance).
  • Communication Data: Messages sent to customer support via live chat, email, or WhatsApp, including the content of your inquiries and our responses.

1.2 Information Automatically Collected

When you access or use hjtoto services, we automatically collect certain technical and usage information:

  • Device Information: Device type (mobile, tablet, desktop), operating system and version (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifiers (IP address, device ID).
  • Usage Data: Pages visited, features accessed, time spent on pages, clickstream data, referring/exit pages, date and time stamps of activity.
  • Betting Activity: Bets placed, stakes, odds selected, game types played (sports betting, casino games, slots, togel, sabung ayam), win/loss records, bonus usage, session duration.
  • Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdictional restrictions.
  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to remember your preferences, authenticate your login sessions, analyze site traffic, and improve user experience. You can manage cookie preferences through your browser settings.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Providers: Transaction confirmation data from BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, OVO, DANA, GoPay, and other payment processors.
  • Identity Verification Services: Age verification, identity authentication, and fraud prevention data from KYC/AML service providers.
  • Game Providers: Game outcome data, RNG results, and gameplay statistics from third-party casino game studios and sports data feeds.
  • Marketing Partners: Attribution data from advertising platforms to measure campaign effectiveness (if you arrived at hjtoto through a promotional link).

2. How We Use Your Information

hjtoto uses your personal information for the following purposes:

Purpose Description
Account Management Create and maintain your hjtoto account, authenticate login sessions, process account updates, and manage user profiles.
Transaction Processing Process deposits and withdrawals, verify payment method ownership, calculate winnings, credit bonuses, and maintain financial records.
Identity Verification Comply with KYC/AML regulations, verify age (21+ requirement), prevent fraud, detect multiple accounts, and ensure platform security.
Service Delivery Enable access to sports betting, live casino, slots, togel, sabung ayam, and other games; settle bets; calculate odds; deliver promotional offers.
Customer Support Respond to inquiries, resolve disputes, investigate complaints, provide technical assistance, and improve service quality.
Responsible Gaming Monitor betting patterns for problematic behavior, enforce deposit/loss limits, process self-exclusion requests, and provide player protection tools.
Marketing Communications Send promotional emails, SMS, or push notifications about bonuses, VIP rewards, new games, and special events (only with your consent; opt-out available).
Platform Improvement Analyze usage patterns, optimize website performance, fix bugs, develop new features, and enhance user experience.
Legal Compliance Comply with Indonesian laws, respond to legal requests, enforce Terms & Conditions, prevent illegal activity, and protect hjtoto's legal rights.

3. How We Share Your Information

hjtoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf. These providers have access to personal information only as necessary to perform their services and are contractually obligated to maintain confidentiality:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet platforms (OVO, DANA, GoPay) process your financial transactions.
  • Game Providers: Third-party studios deliver casino games, slots, and live dealer streams. They may receive anonymized gameplay data.
  • KYC/AML Verification: Identity verification services validate your age and identity to comply with anti-money laundering regulations.
  • IT Infrastructure: Cloud hosting providers, data storage services, and security firms maintain our technical infrastructure.
  • Customer Support Tools: Live chat software and ticketing systems help our support team assist you efficiently.
  • Analytics Providers: Web analytics tools (anonymized data) help us understand user behavior and improve the platform.

3.2 Legal and Regulatory Obligations

We may disclose your personal information if required by Indonesian law or in response to valid legal processes:

  • Court orders, subpoenas, or other legal demands from Indonesian authorities.
  • Investigations into suspected fraud, money laundering, or illegal gambling activity.
  • Protection of hjtoto's legal rights, property, or safety, or that of our users or the public.
  • Enforcement of our Terms & Conditions or investigation of Terms violations.

3.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and/or prominent notice on our platform of any such change in ownership or control of your personal data.

3.4 With Your Consent

We may share your information with other third parties when you have given explicit consent for such sharing, such as opting into a partner promotion or authorizing data sharing for a specific purpose.

4. Data Security

hjtoto employs robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

  • Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored on our servers (passwords, financial information) is encrypted at rest.
  • Access Controls: Personal data is accessible only to authorized hjtoto employees and contractors who require it to perform their job functions. Access is logged and monitored.
  • Secure Infrastructure: Our servers are housed in secure data centers with physical access restrictions, fire suppression, climate control, and 24/7 surveillance.
  • Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
  • Incident Response: In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide details of the breach, its impact, and remediation steps.

Your Responsibility: While we implement strong security measures, you also play a critical role in protecting your account. Never share your password, use a strong unique password, log out after each session on shared devices, and enable two-factor authentication if available. Report any suspicious account activity to [email protected] immediately.

5. Data Retention

hjtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

  • Active Accounts: We retain your data for the duration of your active hjtoto account and for a reasonable period afterward to resolve disputes or enforce our Terms.
  • Financial Records: Transaction records, deposit/withdrawal history, and betting activity are retained for at least 7 years to comply with Indonesian financial regulations and tax requirements.
  • KYC Documents: Identity verification documents are retained for 7 years after account closure as required by anti-money laundering laws.
  • Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to honor your opt-out preference.
  • Inactive Accounts: Accounts with no login or betting activity for 12 consecutive months are considered inactive. Inactive accounts with balances below Rp 100,000 may be closed after 18 months, with remaining funds forfeited.

After the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you.

6. Your Privacy Rights

As an hjtoto user, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF or CSV file) within 30 days of your request.

6.2 Right to Rectification

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings, or contact [email protected] for assistance.

6.3 Right to Deletion

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or you withdraw consent. Note that we may be required to retain certain information to comply with legal obligations (e.g., financial transaction records for 7 years).

6.4 Right to Object

You have the right to object to our processing of your personal information for direct marketing purposes. You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email, or by adjusting your communication preferences in account settings.

6.5 Right to Data Portability

You have the right to receive your personal information in a portable format and to transmit it to another service provider, where technically feasible.

6.6 Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact our Privacy Officer at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days and may request additional information to verify your identity before processing your request.

7. Cookies and Tracking Technologies

hjtoto uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device that help us remember your preferences and improve site functionality.

7.1 Types of Cookies We Use

  • Essential Cookies: Required for basic site functionality, authentication, and security. These cannot be disabled without affecting site performance.
  • Performance Cookies: Collect anonymized data about how users interact with our site, helping us identify and fix issues and improve user experience.
  • Functional Cookies: Remember your preferences (e.g., language, region, display settings) for a more personalized experience.
  • Advertising Cookies: Track your activity across websites to deliver targeted promotional content. You can opt out of advertising cookies through your browser settings.

7.2 Managing Cookies

Most web browsers allow you to control cookies through settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. Note that disabling essential cookies may prevent you from using certain hjtoto features. Consult your browser's help documentation for specific instructions on managing cookies.

8. Children's Privacy

hjtoto services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information from our systems. If you believe a minor has provided personal information to hjtoto, please contact us at [email protected] so we can investigate and take appropriate action.

9. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries outside of Indonesia where our service providers operate. While these countries may have different data protection laws, we ensure that any international data transfers comply with applicable Indonesian regulations and that adequate safeguards are in place to protect your information, such as standard contractual clauses or other approved transfer mechanisms.

10. Changes to This Privacy Policy

hjtoto reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to you via email to your registered address, through notifications on the platform, or by posting a prominent notice on our homepage. The "Last Updated" date at the top of this document indicates the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of hjtoto services after changes become effective constitutes acceptance of the revised Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer:

  • Email: [email protected] (subject line: "Privacy Inquiry")
  • Live Chat: Available 24/7 through the hjtoto platform
  • WhatsApp Support: Contact link available in your account dashboard
  • Response Time: We aim to respond to all privacy-related inquiries within 48 hours for general questions and 30 days for formal data rights requests.

Your Privacy Matters: At hjtoto, we understand that trust is earned through transparency and accountability. We are committed to protecting your personal information with the same rigor we apply to securing financial transactions. Your data privacy is not just a legal obligation—it is a core value that guides everything we do. Thank you for trusting hjtoto with your information.

Privacy Protection Highlights

256-Bit Encryption

All personal data and financial transactions are protected with military-grade SSL encryption, the same security standard used by international banks.

Strict Access Control

Your data is accessible only to authorized personnel who require it to perform their duties. All access is logged and monitored for security.

KYC Compliance

We adhere to strict Know Your Customer and Anti-Money Laundering regulations to verify identities and prevent fraud, keeping the platform safe for everyone.

No Data Selling

hjtoto never sells, rents, or trades your personal information to third parties for marketing purposes. Your data stays with us.

Secure Data Retention

We retain your data only as long as necessary for legal compliance and service delivery, then securely delete or anonymize it.

Your Privacy Rights

Access, correct, or delete your personal information at any time. Opt out of marketing communications with a single click.

Questions About Privacy?

Our team is here to help. Review our FAQ or contact support for personalized assistance.

View FAQ Back to Home