bungtotoPrivacy Policy

This page describes what data we collect when you use bungtoto and how we keep that data protected. We collect personal information during account registration, deposit processing, withdrawal requests, and KYC verification. We use this information to verify your identity, prevent fraud, process payments through providers like DANA, e-wallet, mobile banking, local payment, online payment, and bank transfer services, and comply with anti-money-laundering regulations. We do not sell your data to third parties and we do not share it without your explicit consent except where required by law.

Our approach to privacy reflects our commitment to operating transparently. We encrypt all data in transit using TLS (Transport Layer Security) and store sensitive information like passwords using strong hashing algorithms. Your account is accessible only to you and to bungtoto staff members who need it for account support, fraud investigation, or regulatory compliance. We retain your data only as long as necessary for these purposes, and you can request deletion of your account and associated data subject to legal retention obligations.

We at bungtoto recognise that privacy concerns arise particularly around mobile usage—your phone holds sensitive information, and you may worry about data leaks or unauthorised access. This policy explains how we minimise those risks on the bungtoto platform, whether you're accessing via Android app, iOS browser, or desktop, and what rights you have over your information.

What Data We Collect on bungtoto

Registration and account information

When you create a bungtoto account, we collect your email address, password (which we hash and never store in plain text), full name, date of birth, and residential address. We use email to communicate account alerts, deposit confirmations, withdrawal approvals, and password reset requests. We use your date of birth to verify that you meet our minimum age requirement. Your address is used during Know Your Customer (KYC) verification and to comply with anti-money-laundering regulations.

Payment and financial information

When you deposit or withdraw on bungtoto, we record the payment method you used (DANA account, e-wallet wallet, bank account, mobile banking, etc.), the amount, the date, and the status (successful, pending, failed). We do not store your full payment credentials—e-wallet passwords, bank account numbers, or card details. Payment providers like local payment, online payment, and bank processors for e-wallet, mobile banking, local payment, and online payment handle credential storage on their own secure systems. We store only confirmation codes and transaction references so we can trace deposits and withdrawals if there's a dispute.

During your first withdrawal, we collect government-issued identification (passport, driving licence, national identity card), a recent utility bill or bank statement, and a selfie holding your ID. We store these documents securely for KYC compliance and regulatory audit purposes. We do not use these documents for any other purpose and we delete them after a set retention period unless we're required by law to keep them longer.

Usage and activity data

We record your gaming and wagering activity on bungtoto—which games you play, which sportsbook markets you access (Liga 1, Piala AFF, Piala Indonesia, Champions League, badminton, MotoGP, esports), how much you wager, and the outcomes. We use this data to settle wagers, calculate your balance, detect fraud or unusual patterns, and improve game performance. We also log your login times, which device you used, and your IP address. This helps us detect unauthorised account access and secure your account if your password is compromised.

Support and communication data

When you contact bungtoto support, we record your messages, our responses, and any attachments (screenshots, error logs). We use this information to resolve your issue, improve our support process, and train our support staff. Support conversations are retained for a set period and then deleted unless you request otherwise.

We at bungtoto collect only what we need, encrypt what we collect, and delete what we no longer require by law to keep.

Our bungtoto Data Protection and Your Rights

Encryption and secure storage

All data transmitted between your device and bungtoto's servers is encrypted using TLS (Transport Layer Security) protocol. Your password is hashed using strong algorithms such that even our staff cannot view your original password—we only store and verify the hash. Sensitive data like payment confirmations and KYC documents are stored on encrypted servers with access restricted to authorised personnel. We perform regular security audits to identify and patch vulnerabilities.

Third-party processors

We rely on third-party payment processors to handle deposits and withdrawals. When you use DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers, your payment information is transmitted to those providers according to their own privacy policies. We do not control how they handle your data once it leaves our platform. We recommend reviewing their privacy policies if you have concerns. We also use third-party cloud storage providers for backup and disaster recovery; these providers are contractually obligated to protect your data.

International data transfer

Our servers may be located outside your jurisdiction. This means your data may be transferred to and processed in other countries where data protection laws may differ from your local laws. By using bungtoto, you consent to this international transfer. We apply industry-standard protections (encryption, access controls, audit logs) regardless of server location.

Your rights and data subject requests

You have the right to access all personal data we hold about you on bungtoto. You can request a copy of your data by contacting our support team. We provide it in a readable format within a reasonable timeframe. You also have the right to request correction of inaccurate data—if your address or name is wrong, tell us and we'll update it. You have the right to request deletion of your account and associated data, subject to our legal obligation to retain certain records (e.g., for anti-money-laundering compliance or tax purposes). We typically fulfil deletion requests within thirty days.

If we store data longer than necessary or process it in ways you believe violate your privacy, you can lodge a complaint with the relevant data protection authority in your jurisdiction.

Cookies and tracking on bungtoto mobile

Our website and mobile app use cookies and similar technologies to improve user experience. Session cookies keep you logged in; analytics cookies help us understand which features users interact with most. You can disable cookies in your browser or app settings, though some features may not work properly without them. We do not use cookies to track you across other websites.

Policy updates and contact

We may update this privacy policy at any time. We notify users of material changes through in-app alerts or email. If you have questions about how we handle your data, contact our support team through your account help menu or by email. We respond to privacy inquiries within a standard timeframe. Our privacy practices apply equally to all bungtoto users regardless of whether they're accessing from Jakarta, Surabaya, Bandung, Medan, or anywhere else in our service area.

Our commitment at bungtoto is to handle your personal information with care—collecting only what we need, protecting it with strong encryption and access controls, sharing it only where necessary for payment processing or legal compliance, and respecting your rights to access, correct, and delete your data. Whether you're using our platform during Liga 1 season, around holidays like Idul Fitri or Idul Adha, or year-round, your privacy remains a priority in our operations.