Your privacy matters to us. This policy explains exactly what personal data dktoto collects, why we collect it, and how it is stored, used, and protected.
Throughout this Privacy Policy, the following terms are used with the meanings given below:
2.1 dktoto acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, dktoto determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.
2.2 dktoto operates under an international gaming license. Its data handling practices are designed to comply with internationally recognized data protection principles, including those derived from the General Data Protection Regulation (GDPR) framework, which the Operator applies as a global baseline standard even where not strictly legally mandated.
2.3 Questions about data handling, requests to exercise data rights, or complaints regarding this policy should be directed to our Data Privacy team via the contact details set out in Section 16 of this policy.
dktoto collects Personal Data in the following categories. Not all categories apply to every user — the scope of collection depends on the features you use and the stage of your account with us.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, national ID (KTP) number | Account registration, KYC compliance, age verification |
| Contact Data | Email address, mobile phone number, residential address | Account communication, support, verification |
| Financial Data | Bank account number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) | Processing deposits and withdrawals in IDR |
| KYC Documents | Copies of KTP, passport, driver's license, proof of address | Identity and age verification, AML compliance |
| Transaction Data | Deposit history, withdrawal history, bet history, game session records, bonus usage | Account management, dispute resolution, regulatory reporting |
| Technical Data | IP address, browser type and version, device identifiers, operating system, screen resolution | Fraud prevention, security monitoring, platform optimization |
| Usage Data | Pages visited, features used, session duration, click patterns, game preferences | Platform improvement, personalized experience, responsible gaming monitoring |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Support delivery, quality assurance, dispute resolution |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS | Targeted promotions, preference management |
dktoto collects Personal Data through the following means:
You provide Personal Data directly to us when you: register an account on the Platform; complete KYC verification by submitting identity documents; make a deposit or withdrawal request; contact our support team via live chat, email, or WhatsApp; opt in to marketing communications; or respond to surveys and promotions.
When you visit or interact with the Platform, our servers and analytics tools automatically record Technical Data and Usage Data. This includes your IP address, the device and browser you use, the pages you visit, and the actions you take during your session. This data is collected via server logs, session tracking tools, and cookies (see Section 8).
We may receive Personal Data about you from third parties in limited circumstances, including: identity verification and fraud screening agencies that supplement the KYC process; payment processors that confirm the status of a deposit or withdrawal transaction; and, where relevant, responsible gaming support organizations if you have self-excluded through a third-party exclusion registry.
dktoto processes your Personal Data on one or more of the following legal bases, consistent with internationally recognized data protection principles:
dktoto uses the Personal Data it collects for the following purposes:
7.1 dktoto does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. Your data is shared only in the limited circumstances described below.
We engage trusted third-party service providers to assist in delivering the Platform's services. These providers process your data only on our instructions and are bound by contractual data processing agreements. Categories of processor include:
We may disclose Personal Data where required to do so by applicable law, court order, or at the lawful request of a competent regulatory authority. We will always seek to notify affected Members of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or a material portion of the Operator's business assets, Personal Data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer via a prominent notice on the Platform in advance.
8.1 The dktoto Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session integrity, and improve your experience. The following cookie categories are in use on the Platform:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, load balancing | Session / up to 24 hours |
| Functional | Remembering your language and display preferences, responsible gaming limit settings | Up to 12 months |
| Analytics | Aggregated usage statistics, page performance monitoring, error logging | Up to 24 months |
| Marketing | Tracking opt-in status for promotional communications, affiliate attribution | Up to 30 days |
8.2 Strictly Necessary cookies cannot be disabled as they are essential to the operation of the Platform. You may manage Functional, Analytics, and Marketing cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of some Platform features.
8.3 dktoto does not use third-party advertising networks or behavioral retargeting cookies that track your activity across websites other than the Platform itself.
9.1 dktoto retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and compliance obligations. The following retention periods apply as a baseline:
9.2 Where Personal Data is no longer required, it is securely deleted or anonymized in accordance with our internal data destruction procedures. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and research purposes.
10.1 dktoto implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. These measures include:
10.2 In the event of a data breach that is likely to result in a risk to your rights or interests, dktoto will notify affected Members without undue delay and will take all reasonable steps to mitigate the impact of the breach.
11.1 Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by dktoto:
11.2 To exercise any of the above rights, please contact our Data Privacy team at the details in Section 16. We will respond to verifiable requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be informed of any such extension.
11.3 We may be required to verify your identity before processing a data rights request in order to prevent unauthorized access to another Member's data.
12.1 The dktoto Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21.
12.2 If we become aware that Personal Data has been collected from a person under the age of 21, we will immediately close the relevant account, void all pending bets, return any deposited funds to the originating payment method, and permanently delete all Personal Data associated with that account.
12.3 If you are a parent or guardian and believe that your child under 21 has registered on the Platform without authorization, please contact us immediately via the contact details in Section 16.
13.1 As an internationally operated platform serving users primarily in Indonesia, dktoto may transfer Personal Data to countries outside Indonesia for storage and processing. These transfers are made to countries where we have engaged trusted third-party processors operating under contractual data protection obligations.
13.2 Where Personal Data is transferred internationally, dktoto ensures that appropriate safeguards are in place, which may include standard contractual clauses, data processing agreements, or transfers to jurisdictions with recognized adequacy standards for data protection.
13.3 By using the Platform, you acknowledge and consent to the transfer of your Personal Data outside Indonesia for the purposes described in this policy, subject to the safeguards described above.
14.1 The Platform does not contain links to external third-party websites as a matter of policy. However, game content delivered by third-party studios (such as Pragmatic Play, Evolution Gaming, and others) is embedded within the Platform via secure iframes. These studios operate their own data collection practices within their game environments, governed by their own privacy policies.
14.2 dktoto is not responsible for the privacy practices of third-party game studios. We recommend reviewing the privacy documentation of any embedded content provider if you have concerns about how your data is handled within their game environments.
15.1 dktoto reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to all registered Members via a prominent notice on the Platform and, where practicable, by email to the registered address on your account at least 7 calendar days before the changes take effect.
15.2 The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this policy periodically to remain informed of how we handle your Personal Data.
15.3 Your continued use of the Platform after an amended policy takes effect constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must close your account before the amendment takes effect.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact our Data Privacy team through the following channels:
16.2 We aim to acknowledge all privacy-related inquiries within 24 hours (WIB) and to provide a substantive response within 30 calendar days of receiving a verifiable request.
16.3 If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to a relevant data protection authority or seek independent legal advice in your jurisdiction.
Our privacy framework is built around six core principles that govern every aspect of how we collect, use, and safeguard your personal information.
Every connection between your device and the dktoto Platform is protected by industry-standard SSL/TLS encryption. Your login credentials, financial data, and personal information are never transmitted in plain text.
Your Personal Data is never sold, rented, or traded to marketers or data brokers. Data shared with third parties is limited strictly to service providers who assist in delivering the Platform, under binding contractual obligations.
Every dktoto Member has the right to access, correct, export, restrict, or request deletion of their Personal Data at any time. We honor all verifiable data rights requests within 30 calendar days.
Identity documents submitted for KYC verification — including KTP copies and proof of address — are processed by certified verification partners and stored in encrypted form. Documents are retained only for compliance-mandated periods.
dktoto does not hold your data indefinitely. Clear, published retention periods apply to every category of Personal Data. When data is no longer required, it is securely deleted or irreversibly anonymized.
dktoto does not knowingly collect or retain any Personal Data belonging to individuals under the age of 21. Any account found to belong to a minor is immediately closed, with all associated data permanently deleted.
Our FAQ covers common privacy and account security questions. You can also review our full Terms & Conditions or return to the homepage at any time.
Visit the FAQ Terms & Conditions Back to Home