At 89toto, protecting your personal information is a core responsibility â not an afterthought. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and what rights you hold as a Member of our platform.
Six principles that guide the way 89toto handles your personal data. The complete legal text follows in the clauses below.
All data transmitted between your browser and 89toto's servers is protected by industry-standard TLS/SSL encryption. Your account details, payment information, and betting history are never transmitted in plain text.
89toto does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data exists solely to support your 89toto account and our regulatory obligations.
Our data practices are designed with Indonesian players in mind â including data handling relevant to local payment methods such as BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay, as well as national identity (KTP) verification processes.
You have the right to access, correct, port, restrict, or request deletion of your personal data at any time. Submit a data request to our support team and we will respond within the timeframes stated in this Policy.
We use cookies and similar tracking technologies solely to deliver a functional, personalized platform experience. We do not deploy third-party advertising cookies without disclosure. Full details are in our Cookie Policy section below.
89toto does not retain personal data beyond what is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. Retention periods are clearly documented in this Policy.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
89toto acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, 89toto determines the purposes and means of Processing your Personal Data and is responsible for ensuring that such Processing complies with applicable data protection standards.
All data protection inquiries, access requests, and complaints should be addressed to our dedicated privacy contact at [email protected] with the subject line "Privacy Request â [Your Account Username]".
When you register an account, complete KYC verification, make a deposit, place a bet, or contact our support team, you may provide us with the following categories of Personal Data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP or passport number | Registration, KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, city or province of residence | Registration, profile updates |
| Financial Data | Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja) | Deposit, withdrawal requests |
| Identity Documents | Scanned or photographed KTP, passport, selfie verification images | KYC verification process |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Any support or contact interaction |
When you access the Platform â whether logged in or browsing as a guest â our systems automatically collect certain technical and behavioral data:
We may receive additional Personal Data about you from the following third-party sources:
89toto processes your Personal Data on one or more of the following legal bases, depending on the nature of the Processing activity:
89toto processes your Personal Data for the following specific purposes:
You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email, adjusting your Account notification preferences, or contacting our support team.
89toto does not sell, rent, or trade your Personal Data to any third party. However, we do share your data with the following categories of Third Parties under the circumstances described below:
We engage trusted third-party service providers to support Platform operations. These providers process Personal Data on our behalf under strict contractual data protection obligations:
We may disclose Personal Data to law enforcement, regulatory bodies, or judicial authorities where legally required to do so, including in response to:
In the event that 89toto undergoes a merger, acquisition, corporate reorganization, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and Platform announcement if such a transfer occurs, and the acquiring entity will remain bound by the commitments set out in this Privacy Policy.
89toto does not sell your Personal Data to data brokers, advertising networks, or any third party for their independent commercial use.
The nature of the online gaming industry means that certain Third Parties engaged by 89toto â including game studio providers, cloud infrastructure hosts, and KYC verification services â may be located outside of Indonesia. Your Personal Data may therefore be transferred to, and processed in, jurisdictions with data protection laws that differ from those in Indonesia.
Where such international transfers occur, 89toto ensures that appropriate safeguards are in place, including:
By using the Platform, you acknowledge and consent to such international transfers as necessary for the provision of services.
89toto retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal and regulatory obligations.
While your account remains active, we retain all account-related data including identity information, transaction history, betting records, and communications. This data is necessary to provide ongoing services and ensure Platform security.
If you request account closure or if 89toto closes your account due to a breach of our Terms & Conditions, we will retain your Personal Data for a period of 7 years from the date of closure to comply with regulatory record-keeping obligations, resolve disputes, and prevent fraud.
If you opt out of marketing communications, we will suppress your contact information from promotional campaigns but retain a record of your opt-out preference indefinitely to ensure we do not re-contact you.
We may retain aggregated, anonymized data indefinitely for statistical analysis and business intelligence purposes. Such data cannot be used to identify you personally.
You may request deletion of your Personal Data at any time by contacting [email protected]. We will honor your request subject to any overriding legal obligations to retain certain records. Further details on deletion rights are provided in Clause 9.
As a Member of 89toto, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request â [Your Account Username]".
Request a copy of all Personal Data we hold about you, including account details, transaction history, and communications.
Request correction of inaccurate or incomplete Personal Data in your account profile.
Request deletion of your Personal Data where no legal obligation requires us to retain it.
Request that we temporarily restrict processing of your Personal Data while a dispute or verification is resolved.
Request a machine-readable copy of your Personal Data to transfer to another service provider.
Object to processing of your Personal Data where we rely on legitimate interests as the legal basis.
89toto will acknowledge your data rights request within 48 hours and provide a substantive response within 30 calendar days of receipt. In complex cases, we may extend this period by an additional 30 days and will notify you of the extension and the reasons for it.
To protect your privacy and prevent unauthorized access, we may require you to provide proof of identity before fulfilling a data rights request. Acceptable forms of verification include login to your account from a recognized device or submission of your registered email address and date of birth.
89toto uses cookies, web beacons, and similar tracking technologies to deliver core Platform functionality, analyze usage patterns, and personalize your experience. This section explains what types of cookies we use and how you can manage them.
Cookies are small text files placed on your device by your web browser when you visit a website. Cookies allow the website to recognize your device on subsequent visits and store information about your preferences and actions.
You can control and delete cookies through your browser settings. Most browsers allow you to block third-party cookies, delete all cookies on exit, or prompt you before accepting any cookie. Please note that disabling essential cookies will prevent you from using key Platform features such as account login and bet placement.
To learn more about managing cookies in popular browsers, visit:
89toto employs industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction.
While we implement robust security measures, you also play a critical role in protecting your account. You must keep your password confidential, log out after each session on shared devices, and notify us immediately at [email protected] if you suspect unauthorized access to your account.
The 89toto Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect or process Personal Data from individuals under the age of 21.
If we discover that we have inadvertently collected Personal Data from a minor, we will delete that data immediately and close the associated account. If you believe that we have collected data from a minor, please contact us at [email protected] with the subject line "Minor Data â Immediate Attention Required".
Parents and guardians are encouraged to monitor their children's internet usage and prevent minors from accessing online gambling platforms.
The 89toto Platform may contain links to third-party websites, services, or applications â including game studio providers such as Evolution Gaming, Pragmatic Play, Microgaming, and NetEnt, as well as payment processors and social media platforms. This Privacy Policy applies solely to Personal Data collected by 89toto.
We are not responsible for the privacy practices or content of third-party services. When you navigate away from the 89toto Platform, you are subject to the privacy policies and terms of service of the destination site. We recommend reviewing the privacy policy of any third-party service before providing them with your Personal Data.
Third-party game studios may collect limited session data (such as your Member ID, game choices, and bet outcomes) to deliver game functionality. Such data collection is governed by the studio's own privacy policy, and 89toto does not control how these studios process your data beyond the initial transfer.
89toto reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and notify you via email or an in-platform notification.
Your continued use of the Platform after such notification constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must discontinue use of the Platform and may request account closure and data deletion as described in Clause 9.
We recommend that all Members bookmark this page and review it periodically to stay informed about how we protect your Personal Data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 89toto processes your Personal Data, please contact our dedicated privacy team:
We aim to acknowledge all privacy inquiries within 48 hours and provide a substantive response within 30 calendar days.
If your privacy concern is not resolved to your satisfaction through our standard support process, you may escalate it as a formal complaint by emailing [email protected] with the subject line "Formal Privacy Complaint â [Your Account Username]". Formal complaints are reviewed by our Data Protection Officer and you will receive a detailed written response within 30 calendar days.
Depending on your jurisdiction and the nature of your complaint, you may also have the right to lodge a complaint with a relevant data protection supervisory authority. For Indonesian residents, general data protection inquiries may be directed to the Ministry of Communication and Informatics (Kominfo) or other applicable regulatory bodies.
Our support team is here to help you understand how we protect your information. You can also explore our other policies or return to the homepage.