htotoPrivacy Policy

This page describes what we collect when you use htoto and how we keep that data protected. We at htoto take your privacy seriously. When you create an account, deposit funds, place bets on Liga 1 or Piala AFF matches, or play live tables, you share personal and financial information with us. We explain here what information we gather, who has access to it, how long we retain it, and what rights you have.

Our privacy practices comply with applicable data-protection laws in jurisdictions where we operate. We do not sell your data to third parties for marketing. We use your information only to operate your account, process your payments (through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), verify your identity, resolve disputes, and provide customer support. We encrypt sensitive data and limit access to employees who need it to serve you.

If you have questions about how we handle your data, contact our support team. We respond to data-access and deletion requests within the timeframes required by law.

What Data We Collect on htoto

We collect personal data when you create an htoto account. This includes your full name, date of birth, residential address, email address, and phone number. We also collect your government-issued ID number and a photo of your ID document for identity verification. This verification process is mandatory — we cannot grant account access without it.

We collect financial data when you deposit or withdraw. We record your payment method (e.g., DANA account, e-wallet account, or bank account), the amount, the date, and your transaction ID. We also record your bank or payment-provider account details to facilitate withdrawals. We do not store your full credit-card numbers or full bank-account numbers — we retain only enough information to process future transactions and disputes.

We collect betting and gaming data automatically. When you place a bet on a Liga 1 match or spin a slot game on htoto, we record the bet amount, the odds, the outcome, and your resulting balance change. We keep this history permanently in your account ledger so you can audit your activity at any time. This data also helps us identify fraudulent patterns and resolve disputes.

Info: We collect your IP address and device information (browser type, operating system) when you access htoto. We use this to detect unauthorized login attempts and verify your location for compliance purposes.

We collect communication data when you contact our support team. If you email us, use our live chat, or submit an in-app message, we retain that conversation history. This helps us provide better support and resolve future issues faster. We also retain records of transactions you dispute so we can investigate and respond with evidence.

How We Use Your Data on htoto

We use your personal data to create and maintain your htoto account. Without your name, address, and ID, we cannot verify your identity or comply with anti-money-laundering laws. We use your financial data to process deposits and withdrawals. When you request a payout to mobile banking or request a local payment transfer, we access your payment details to route the funds correctly.

We use your betting and gaming data to settle your bets, calculate your balance, and generate your account statements. We also analyze this data in aggregate (anonymized) to understand usage patterns, identify bugs, and improve our platform. We do not use individual betting data for marketing.

We may use your email or phone number to send you account notifications — payment confirmations, withdrawal statuses, security alerts. We do not send unsolicited marketing emails without your consent. If you receive marketing communications from us, you may unsubscribe by clicking the link in the email or by updating your account preferences.

Note: We may disclose your data to government authorities if required by law — for example, if a court orders us to provide records in a fraud investigation.

Data Retention, Third Parties, and Your Rights Under htoto's Policy

We retain your personal data (name, address, ID) for as long as your account is active plus a retention period required by law — typically three to five years after account closure. We retain your betting history permanently in your account ledger. We retain payment records for at least five years to comply with financial-regulation requirements. If you request account deletion, we anonymize or delete personal data where permitted by law, but we may retain betting and payment records to comply with legal obligations.

We may share your data with third-party processors who help us operate htoto. These include payment processors (who handle DANA, e-wallet, mobile banking, and bank transfers), identity-verification vendors, customer-support tools, and data-center providers. We have contracts with all third parties requiring them to protect your data and use it only as we direct. Our servers may sit outside your jurisdiction — for example, our data centers may be in Singapore or another region. We maintain the same privacy standards regardless of server location.

We do not share your data with marketing partners or advertisers. We do not sell your contact information or betting history. We may share anonymized, aggregated data (e.g., "our users bet on Piala AFF matches at these frequency levels") with business partners or published research, but this data does not identify you.

Your Rights and Data Access

You have the right to access, correct, and delete your personal data. Log into your htoto account and update your name, email, or phone number yourself. If you want a copy of all data we hold on you, contact our support team and request a data-access report. We provide this within the timeframes required by law (typically 30 days). If you believe we hold inaccurate data, notify us and we will investigate and correct it.

You have the right to request deletion of your personal data. We will delete your name, address, and ID document upon request, subject to legal retention requirements. Deletion does not remove your betting history — we must retain this for financial-regulation compliance. After deletion, we cannot restore your account; you would need to create a new account and re-verify.

Cookies: We use cookies and similar tracking technologies to remember your login, track your session, and analyze how you use htoto. You may disable cookies in your browser settings, but some htoto functions may not work properly.
Security: We encrypt data in transit using HTTPS and at rest using industry-standard encryption. We limit employee access to data and conduct regular security audits.
Contact: If you have privacy questions or wish to exercise your data rights, contact our support team through the contact channels in our FAQ section.
Jurisdiction: We do not offer our services in jurisdictions where online wagering is prohibited. Users are responsible for verifying compliance with local law.

We may update this privacy policy from time to time. Changes are posted on this page with an updated date. Your continued use of htoto after changes indicates your acceptance. If material changes affect how we handle your data, we will notify you through email or an in-app alert.