At 1toto, we take the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and what rights you have over your own data as a player on our platform.
These cards highlight our core privacy commitments. They supplement — and do not replace — the full policy text below.
1toto does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is shared only with the specific service providers required to operate the platform — payment processors, KYC partners, and fraud prevention tools — under strict contractual obligations of confidentiality.
Every connection between your device and the 1toto platform is encrypted using TLS 1.3, the current industry standard for transport-layer security. This means that your login credentials, payment details, and personal information are protected against interception at every point of transit.
Registered players have the right to access, correct, and request deletion of their personal data at any time by contacting 1toto support. You can also withdraw consent to optional marketing communications at any time, update your registered contact details, and request a copy of the data 1toto holds about you.
1toto collects only the data that is genuinely necessary to operate your account, process your transactions, and comply with our licensing obligations. We do not collect data for speculative future use or for purposes unrelated to the operation of the platform and your account.
1toto's data handling practices are governed by our international gaming license obligations, which include data security, retention, and breach notification requirements. Our KYC and anti-money-laundering processes follow internationally recognized standards for identity verification and financial crime prevention.
1toto uses cookies strictly for essential platform functionality (session authentication, security tokens) and anonymous performance analytics. We do not use third-party advertising cookies or behavioral profiling cookies. You can manage cookie preferences through your browser settings at any time without affecting core platform functionality.
The following terms have the meanings assigned below wherever they appear in this Privacy Policy:
1toto collects Personal Data in the following categories. We collect only what is necessary for the purposes described in Section 4 of this policy.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, KTP / passport number | Mandatory (KYC) |
| Contact Data | Email address, Indonesian mobile number, city or region (e.g., Jakarta, Surabaya, Bandung) | Mandatory |
| Financial Data | Bank account number and registered name (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) | Mandatory (transactions) |
| Identity Verification Documents | Photograph or scan of KTP or passport, KYC selfie | Mandatory (withdrawals) |
| Technical Data | IP address, device type, browser type and version, operating system, time zone (WIB/WITA/WIT) | Automatic |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Automatic |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact us |
| Marketing Preferences | Email and SMS communication opt-in/opt-out status, preferred promotional categories | Optional |
1toto collects your Personal Data through the following channels:
The majority of your Personal Data is provided directly by you during account registration, KYC submission, deposit and withdrawal requests, and communications with our support team. You choose what information to provide; however, certain fields are mandatory to access specific platform features.
When you access the 1toto platform, our servers and analytics tools automatically record Technical Data and Usage Data, including your IP address, the pages you visit, the games you play, and the duration of your session. This data is collected via server logs, session cookies, and first-party analytics scripts. No third-party advertising or cross-site tracking scripts are used.
During the KYC process, we may receive data from our identity verification partners to confirm the authenticity of the documents you submit. This data is used solely for verification purposes and is not retained beyond the period required by our licensing obligations.
When you make a deposit or withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment processor confirms transaction status and may share associated account metadata with 1toto for reconciliation and fraud prevention purposes. 1toto does not receive full bank account credentials or e-wallet passwords from payment processors.
1toto processes your Personal Data for the following purposes:
1toto processes your Personal Data on the following legal bases:
1toto does not sell, rent, or trade your Personal Data to third parties. We share your data only in the following limited circumstances:
We share the minimum data required (registered name, account identifier, transaction amount in IDR) with our partner banks and e-wallet providers to process your deposit and withdrawal instructions. All payment processor partners are bound by contractual data protection obligations.
Your identity documents and KYC selfie are shared with our designated verification partner solely for the purpose of confirming your identity and age. Verification partners are contractually prohibited from using your data for any purpose other than verification services provided to 1toto.
Technical Data (IP address, device fingerprint, session metadata) may be shared with fraud detection and cybersecurity service providers to identify suspicious activity patterns and protect the integrity of the platform and all player accounts.
1toto will disclose Personal Data to government agencies, licensing authorities, or law enforcement bodies when required to do so by applicable law, court order, or lawful regulatory request. We will notify you of any such disclosure to the extent permitted by law.
In the event of a merger, acquisition, or sale of all or part of 1toto's business, your Personal Data may be transferred to the relevant acquiring entity, subject to equivalent data protection obligations applying to that entity from the date of transfer.
1toto is an internationally operated platform. Your Personal Data may be processed on servers located outside of Indonesia. Where data is transferred internationally, 1toto ensures that appropriate safeguards are in place, including:
By registering an account on the 1toto platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia as described in this section.
1toto retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years post-closure | Licensing obligation |
| KYC Documents | Duration of account + 5 years post-closure | AML/regulatory compliance |
| Transaction Records | Duration of account + 5 years post-closure | AML/regulatory compliance |
| Support Communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical and Usage Data | 13 months from collection | Analytics and security |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents re-identification.
As a 1toto player, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team using the details in Section 14.
Request a copy of the Personal Data 1toto holds about you, including the categories processed and the purposes of processing.
Request correction of inaccurate or incomplete Personal Data held about you, such as a misspelled name or outdated contact details.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that 1toto restrict the processing of your data in specific circumstances, such as while a dispute about data accuracy is being resolved.
Receive a structured, machine-readable copy of the Personal Data you provided to 1toto for transfer to another service provider.
Object to processing of your Personal Data based on legitimate interests, including profiling for marketing or platform analytics purposes.
1toto uses the following categories of cookies and similar tracking technologies on the platform:
These cookies are essential for the platform to function. They include your session authentication token, security tokens used for CSRF protection, and preference cookies that remember your language and display settings. These cookies cannot be disabled without preventing you from using the platform.
1toto uses first-party analytics cookies to collect anonymized data about how players use the platform — which pages are visited most frequently, where players encounter errors, and how different features are used. This data is aggregated and cannot be used to identify individual players. No third-party analytics services that track users across external sites are used.
1toto does not use advertising cookies, behavioral profiling cookies, retargeting pixels, social media tracking pixels, or any cookie technology that tracks your activity outside of the 1toto platform. We do not serve third-party advertising on the platform.
You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your account. Disabling performance cookies will not affect core platform functionality but will reduce our ability to identify and fix technical issues efficiently. Specific browser cookie management guidance is available from your browser's help documentation.
1toto requires all Players to confirm that they are at least 21 years of age at the time of registration. Age is independently verified during the KYC process by cross-referencing the date of birth declared at registration against the identity document submitted.
If 1toto discovers that a Player has provided a false date of birth and is under the age of 21, the account will be immediately suspended, all pending bets will be voided, and any deposited funds will be returned to the source payment method after deduction of any withdrawals already made. The Personal Data of the underage user will be securely deleted upon completion of the review, except where retention is required by applicable law.
If you are a parent or guardian and believe that a person under 21 in your care has registered on the 1toto platform, please contact our support team immediately at [email protected] so that we can investigate and take prompt action.
1toto implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:
While 1toto takes all reasonable technical and organizational measures to protect your data, no internet-based platform can guarantee absolute security. You can reduce your personal risk by using a strong, unique password for your 1toto account and enabling 2FA.
1toto may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will notify registered Players via the email address on file at least seven (7) days before the updated policy takes effect.
The current version of this Privacy Policy is always available on the 1toto platform at 1toto.club/privacy-policy. The "Last Reviewed" date at the top of this document indicates when the policy was most recently assessed and updated. We encourage you to review this policy periodically.
Your continued use of the 1toto platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept the updated policy, you must cease using the platform and contact support to request account closure.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a data protection concern, please contact 1toto through the following channel:
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the 1toto Privacy Policy.
Your data is protected and your privacy respected at every step. Log in to your 1toto account, explore our full game catalog, or read our FAQ if you have further questions.
🔞 Adults only — 21+ required to register and play. Please gamble responsibly.