bursatoto Privacy Policy
This page describes what we collect when you use bursatoto and how we keep that data protected. We take privacy seriously. Our policy is transparent: we tell you what information we gather, why we gather it, who we share it with, and what rights you have over your data. We do not sell your personal information to marketers or data brokers. We use your data only to operate our platform, process payments, comply with law, and improve your experience.
We are a sportsbook and casino operator offering football betting (Liga 1, Piala AFF, Piala Indonesia, Champions League, Premier League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), esports markets (Mobile Legends, Free Fire, PUBG Mobile), and additional gaming services. To run these services, we must collect certain information from you. This policy explains exactly what, why, and how.
Our services are available only where local law permits. If you are uncertain whether accessing bursatoto is legal in your jurisdiction, we urge you to verify with local authorities before using our platform. Once you have confirmed legal access, you can trust that we handle your data responsibly and in accordance with this policy.
What We Collect and Why
Account Information
When you register for a bursatoto account, we collect your email address, phone number, full legal name, date of birth, and residential address. We also ask you to create a username and password. This information is necessary to verify your identity, prevent fraud and underage access, comply with anti-money-laundering regulations, and allow you to log in securely. We verify your identity using government-issued documentation (national ID, passport, or equivalent) which you upload during account setup.
Payment Information
When you deposit or withdraw funds on bursatoto, we collect information about your payment method. If you use DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect your e-wallet account details. If you use bank transfer (mobile banking, local payment, online payment, e-wallet), we collect your bank account number and name on the account. We do not store credit card numbers or full banking credentials on our servers; instead, we pass payment data directly to our payment processors (PCI-DSS-compliant third parties) who handle the transaction securely. We keep a record of every deposit and withdrawal for accounting and fraud-prevention purposes.
Betting and Game Activity
We collect records of every bet you place on bursatoto—which markets you bet on (Liga 1 matches, live blackjack rounds, Aviator spins, esports predictions), your stake amounts, the outcomes, and your winnings or losses. We use this data to settle your account correctly, calculate your weekly cashback, track your tier progression in our loyalty system, and detect suspicious patterns (e.g., sudden large bets that might indicate account compromise). This information is stored in our database and is accessible to you in your account transaction history.
Technical and Device Information
We collect information about the device you use to access bursatoto (device type, operating system, browser type), your IP address, and how you navigate our platform (pages visited, time spent, features used). We use cookies and similar tracking technology to remember your login session, store your preferences, and understand how players interact with our site. We use this data to improve our platform's performance, fix technical issues, and prevent abuse. Our servers are located outside Indonesia; your data may transit through international networks.
- Cookies
- We use session cookies (deleted when you close your browser) and persistent cookies (stored on your device) to manage your login and remember your settings.
- Third-party data
- We may receive fraud-prevention data from external services to verify your identity and detect suspicious activity on your account.
- Legal holds
- If we receive a legal request (court order, police investigation), we may be required to share your data with authorities without your consent.
- Retention period
- We keep your account data for as long as your account is active, plus 7 years after account closure for compliance purposes.
Communication Data
When you contact our customer support team via live chat or email, we keep records of your messages and our responses. We use this data to resolve your issue, improve our support process, and train our support staff. If you opt into promotional email communications, we collect your email preferences and send you newsletters about new games, promotions, and seasonal events (Idul Fitri, Idul Adha, Imlek, Nyepi special offers). You can unsubscribe from promotional emails at any time via a link in each message or by updating your account preferences.
Your Rights and Our Commitments on bursatoto
Data Security
We protect your data using industry-standard encryption (TLS/SSL for data in transit, AES-256 for data at rest). Our servers are secured with firewalls, intrusion detection, and regular security audits. We limit access to your personal data to employees and contractors who need it to operate bursatoto. However, we cannot guarantee absolute security; no system is entirely immune to attack. If we suffer a data breach, we will notify affected users without unreasonable delay and provide information about what data was exposed and what steps we have taken in response.
Your Rights
Under applicable data protection law, you have the right to access, correct, and delete your personal data. You can request a copy of all data we hold about you by contacting our support team. You can update your account information (name, address, email, phone) directly in your account settings. You can request deletion of your account and associated data; however, we may retain certain information for legal and compliance purposes (e.g., anti-money-laundering records for 7 years). You can opt out of promotional communications at any time. To exercise any of these rights, contact us via email or live chat with your request and proof of identity.
Third Parties and Data Sharing
We share your data with the following categories of third parties: Payment processors (to process deposits and withdrawals), payment networks (Visa, MasterCard, e-wallet operators), identity-verification services (to confirm your identity during account setup), fraud-detection services (to prevent abuse and money laundering), and customer-support platforms (to manage your support tickets). We do not share your data with advertisers, data brokers, or marketers. We may share aggregate, anonymized data (e.g., "players in Jakarta have a non-specific info preference for Liga 1 betting") with our business partners, but this data cannot identify you individually.
Servers and International Transfer
Our bursatoto servers are located outside Indonesia. When you use our platform, your data may be transferred to and stored in a country outside your jurisdiction. By registering for a bursatoto account, you consent to this transfer. We ensure that all international data transfers comply with applicable data protection law and are protected by standard contractual clauses or adequacy decisions where required by law.
Updates to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or law. We will notify you of material changes by posting the updated policy on our website and updating the "effective date" at the top of this policy. Your continued use of bursatoto after such updates constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you may delete your account and cease using our services.
We are committed to protecting your privacy and operating bursatoto transparently. We collect only the data necessary to provide our services, and we use that data only for the purposes described in this policy. We do not sell your information. We encrypt your data, limit access to authorized personnel, and comply with applicable data protection law. If you have concerns about how we handle your data, contact us directly—we take all privacy questions seriously.