shoptoto Casino & Sportsbook Data Care

This page describes what we collect when you use shoptoto and how we keep that data protected. We process information you provide during account registration, verification, betting, and withdrawal. We are transparent about how your data flows, who has access to it, and what rights you hold over your personal information.

Our commitment to data protection applies regardless of whether you access shoptoto from Jakarta, Surabaya, Bandung, Medan, or Semarang. We comply with applicable data-protection regulations in supported jurisdictions and follow anti-money-laundering and fraud-prevention protocols. Your account security is a core shoptoto responsibility — we use encryption, two-factor authentication, and regular security audits to safeguard your information.

Read this policy to understand what information we collect, how we use it, who may access it, and how you can exercise your rights regarding your personal data.

What We Collect on shoptoto

We collect information you provide directly: your name, email address, phone number, date of birth, and national identification number. This data is required for account registration and identity verification. We also collect information about your betting activity — which markets you view, which bets you place, which payment methods you use, and how much you deposit and withdraw.

We collect technical data automatically: your IP address, browser type, device type, and the pages you visit within shoptoto. This helps us detect fraud, ensure platform stability, and understand how you use our services. When you use live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger) or sportsbook features (Liga 1, Piala AFF, Mobile Legends, Free Fire), we log your session duration, bet frequency, and settlement outcomes for verification and dispute resolution.

We also collect payment information when you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet). We do not store your card details or bank passwords — those are processed by payment processors. We retain only transaction IDs and amounts for reconciliation.

Note: We never sell your personal data to third parties. We share information only with payment processors, compliance partners, and law-enforcement agencies where legally required.

How We Use Your Information

We use your data to operate shoptoto — to process bets, settle markets, handle withdrawals, and manage your account. We also use it to verify your identity (KYC), prevent fraud, and comply with anti-money-laundering regulations. During high-activity periods like Liga 1 season, Piala AFF tournaments, or Idul Fitri holiday breaks, we may review account activity to ensure all bets are legitimate and withdrawals are traceable.

We use technical data to improve platform performance, fix bugs, and detect security threats. We analyse betting patterns to identify unusual activity that might indicate account compromise or fraudulent play. We do not use your data for marketing unless you have opted in to receive promotional emails from shoptoto.

Data Storage and Third Parties

We store your data on secure servers operated by trusted infrastructure providers. Our servers may be located outside Indonesia — some may be in Southeast Asia, Europe, or North America. You acknowledge that data transferred outside your jurisdiction may be subject to different legal frameworks. We use encryption in transit and at rest, and we restrict access to authorised shoptoto staff only.

We share data with the following types of third parties: payment processors (to verify deposits and withdrawals), compliance and KYC services (to verify your identity), customer support platforms (to respond to your inquiries), and legal authorities (when required by law). We do not share your betting data with external betting syndicates, odds providers, or advertisers.

KYC (Know Your Customer)
Our verification process that confirms your identity before your first withdrawal. Required by law in supported jurisdictions.
AML (Anti-Money Laundering)
Our compliance review of large or unusual transactions to detect illicit financial flows. Standard banking practice.
Data Retention
We keep your account data for at least seven years after account closure, or as required by law.

Your Rights Regarding Your Data

You have the right to access all personal data we hold about you on shoptoto. You can request a copy of your account history, betting records, and payment transactions by contacting our support team. You also have the right to request corrections if any of your information is inaccurate.

You may request deletion of your account and associated data, subject to legal and regulatory requirements. If we are required to retain your data for compliance or dispute resolution, we will inform you of the retention period. You may also opt out of promotional communications at any time by adjusting your notification preferences or emailing our support team.

Cookies and Tracking Technologies

We use cookies to remember your login session, store your language preference, and track your activity within shoptoto for fraud detection. We do not use cookies to track you across external websites. You can disable cookies in your browser settings, but this may affect shoptoto functionality.

We use web analytics tools to understand how users navigate the platform. These tools do not collect personally identifiable information — they track aggregate usage patterns only. We do not sell this analytics data to external parties.

Security Measures on shoptoto

We protect your account with encryption (TLS 1.2+), two-factor authentication, and regular security audits. We require strong passwords and do not allow password sharing. If you suspect your account is compromised, contact our support team immediately to reset your credentials.

We store sensitive data in encrypted form and restrict access to authorised staff only. We conduct regular penetration testing and vulnerability assessments. However, no security system is impenetrable — we cannot guarantee absolute protection against all cyber threats. You are responsible for maintaining confidentiality of your login credentials.

Contact Us About Your Data

If you have questions about your personal data on shoptoto, wish to request access to your information, or want to exercise your data rights, contact our support team through the shoptoto platform or via email. We will respond to your request within 30 days. During public holidays such as Idul Adha or Nyepi, processing may take slightly longer.

We may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on shoptoto and updating the effective date. Continued use of shoptoto after changes are posted means you accept the updated policy. shoptoto services are available only where local law permits — verify that your access and use comply with your jurisdiction's regulations.

Your trust in shoptoto depends on our commitment to data protection and transparency. We take that responsibility seriously and will continue to improve our practices as technology and regulations evolve.

shoptoto legal team
Data protection officer

We at shoptoto are committed to transparent data handling and your right to understand how your information is used.