bomtotoPrivacy Policy

This page describes what we collect when you use bomtoto and how we keep that data protected. We take your privacy seriously. When you sign up for an account, deposit funds via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or place bets on Liga 1, Piala AFF, live casino games, or esports markets, we collect certain information about you. This policy explains what data we hold, why we need it, how long we keep it, and what rights you have over it.

Our commitment is to be transparent about data handling. We encrypt all sensitive information in transit and at rest. We use third-party payment processors to handle deposits and withdrawals—they follow their own privacy practices, which we summarise below. We do not sell your personal data to advertisers or data brokers. We share information only with our service providers, payment partners, and where required by law.

Read on to understand how we collect, use, and protect your information on bomtoto.

What Data We Collect on bomtoto

When you create an account on bomtoto, we collect your email address, phone number, full name, and date of birth. We ask for this to verify your identity and comply with Know Your Customer (KYC) regulations. As you use bomtoto—betting on football matches, playing slots, accessing live casino tables, or placing esports wagers—we record your activity: which games you access, how much you wager, your wins and losses, and the times you play. We also collect your IP address and device information (operating system, browser type, device model) so we can detect fraud and support you if you lose access to your account.

When you deposit or withdraw funds via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect transaction data: the amount, the date, and the payment method used. We do not store full card details or bank account numbers—our payment processors handle those securely. If you contact our support team, we keep records of your inquiries and our responses. If you enable two-factor authentication (2FA), we store your phone number or email to send verification codes. We use cookies and similar tracking technologies to remember your login preferences and track how you navigate bomtoto.

How We Use Your Data

We use your data for several core purposes. First, we use it to operate bomtoto—to verify your account, process your deposits and withdrawals, record your bets, and calculate your winnings. Second, we use it to comply with law. In supported jurisdictions like Indonesia, we are required to verify user identity (KYC) and report suspicious activity. Third, we use it to protect bomtoto and our users. We analyse activity patterns to detect fraud, money laundering, and abuse. If your account shows suspicious behaviour—like rapid deposits and withdrawals from different locations, or patterns matching known fraud schemes—we may freeze your account and ask you to verify your identity.

Fourth, we use your data to improve bomtoto. We analyse which games are popular, how often players access the platform on mobile versus desktop, and what payment methods are most used. This helps us make bomtoto faster and more user-friendly. Fifth, we use it to communicate with you. We send login confirmations, deposit receipts, withdrawal notifications, and support responses to your email or phone. We may also notify you if we detect unusual activity on your account or if we need to ask you to update your information.

Third-Party Processors and Our Data Partners

We use third-party services to run bomtoto. Our payment processors (the companies that handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers) receive your transaction data. These partners have their own privacy policies; we encourage you to review them. Our hosting provider stores our servers (which may sit outside Indonesia); they have access to encrypted account data but cannot read it. Our email and SMS provider sends you notifications; they see your email and phone number but not your betting history or financial details.

We do not sell your personal data to third parties for marketing or advertising. We do not share your name and betting history with external brokers. If a government authority requests your data (via legal process), we comply where required by law. We may disclose information to our legal counsel, accountants, and auditors—all under strict confidentiality agreements. We may share aggregated, anonymised data (like "non-specific info of our players in Jakarta access bomtoto on mobile") with partners to improve our service, but this cannot identify you.

How Long We Keep Your Data

We keep your account information for as long as your account is active. If you close your account, we retain minimal data (email, name, account ID) for 5–7 years to comply with financial regulations and prevent fraud. We keep transaction records (deposits, withdrawals, bets) for 7 years for tax and regulatory purposes. We keep support tickets and communications for 2 years. Cookies are typically deleted when you clear your browser, or they expire after 12 months if left untouched. If you request deletion of your data (subject to legal obligations), we delete non-essential information; however, we must retain transaction records for regulatory compliance.

We at bomtoto believe your data belongs to you. We collect only what we need, keep it secure, and delete it when it's no longer necessary.

Your Rights and Control Over Your Data

You have rights over your data on bomtoto. You can access your account information anytime by logging into your account. You can request a copy of all data we hold about you by contacting our support team. You can update your email, phone, or password in your account settings. You can request deletion of your account and associated data, subject to our legal obligations to retain transaction records. You can opt out of non-essential communications (like marketing emails); however, we will continue to send transaction confirmations and security alerts.

If you believe we have misused your data or violated your privacy, you can file a complaint with us first—contact our support team with details. If you're unsatisfied with our response, you may have the right to escalate your complaint to a data protection authority in your jurisdiction. We will not discriminate against you for exercising your privacy rights.

How We Protect Your Data

We protect your data using industry-standard encryption and security practices. All data in transit (when you log in, place a bet, or deposit funds) travels over SSL encryption (256-bit). All sensitive data at rest (stored on our servers) is encrypted. We use firewalls, intrusion-detection systems, and regular security audits to prevent unauthorised access. We limit employee access to personal data to those who need it for their work, and we require confidentiality agreements. We do not store passwords in plain text; we hash them using cryptographic functions. If we experience a data breach, we notify affected users and relevant authorities as required by law.

However, no security is perfect. While we do everything we can to protect your data, we cannot guarantee absolute security. If you have concerns, please contact us immediately.

Cookies and Tracking Technologies

We use cookies to enhance your experience on bomtoto. Cookies are small files stored on your device that remember your preferences. We use session cookies (deleted when you close your browser) to keep you logged in. We use persistent cookies (lasting up to 12 months) to remember your language preference and login state. We use analytics cookies to track how you navigate bomtoto—which pages you visit, how long you stay, and which games you access. This helps us improve our platform.

We use advertising cookies only if you've consented. On mobile (Android APK and iOS browser), we minimise tracking to reduce data usage. You can disable cookies in your browser settings, but this may affect your bomtoto experience. We do not use cookies to track you across other websites—only within bomtoto.

Contact Us About Privacy

If you have questions about this privacy policy, or if you want to exercise your rights (access, update, or delete your data), contact our support team. We respond to privacy inquiries within a standard window. You can reach us via live chat in English or email. For players in Jakarta, Surabaya, Bandung, Medan, and across Indonesia, our support team is available to assist.

Our services are available only where local law permits. If you're in a jurisdiction where online gaming is prohibited, this policy does not apply to you, as you should not be accessing bomtoto. We do not collect data from users in prohibited jurisdictions. We update this policy occasionally to reflect changes in our practices or legal requirements. We will notify you of material changes. Continued use of bomtoto after a policy update constitutes acceptance of the new terms.