Privacy Policy

1. Introduction and Scope

Welcome to kdtoto's Privacy Policy. This document describes how kdtoto ("we", "us", or "our") collects, uses, stores, shares, and protects personal information obtained from users ("you" or "your") of our online gaming platform located at https://kdtoto.cam. This Privacy Policy applies to all services provided by kdtoto, including casino games, sports betting, live dealer games, lottery games including togel (Indonesia's traditional numbers lottery), and all related features and functionalities.

We are committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards. By accessing or using kdtoto services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should not access or use kdtoto services. We reserve the right to update or modify this Privacy Policy at any time without prior notice. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of our services after any changes constitutes your acceptance of the revised Privacy Policy.

2. Information We Collect

To provide you with a secure, personalized, and efficient gaming experience, kdtoto collects various types of information from and about you.

2.1 Personal Identification Information

When you register an account with kdtoto, we collect personal identification information including but not limited to:

• Full legal name as it appears on your Indonesian national identity card (KTP)
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Gender
• Residential address in Indonesia (including city, province, and postal code)
• Email address
• Mobile telephone number
• Indonesian national identity card (KTP) number and scanned copy of the card
• Selfie photograph holding your identity document for verification purposes
• Proof of address documentation (utility bills, bank statements, or government documents)

2.2 Financial Information

To process deposits and withdrawals securely, we collect financial information including:

• Bank account details (bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon; account number; account holder name)
• E-wallet account information (OVO, DANA, GoPay, ShopeePay account identifiers)
• Transaction history including deposit amounts, withdrawal amounts, dates, and times
• Payment method preferences

Note: kdtoto does not store complete credit or debit card details. Payment card transactions are processed through secure, PCI-DSS compliant third-party payment gateways.

2.3 Account and Gaming Activity Information

We automatically collect information about your account usage and gaming activities, including:

• Login credentials (username, encrypted password)
• Login and logout timestamps
• Game play history (games played, bet amounts, win/loss records, session durations)
• Bonus claims and wagering progress
• Communication with customer support (chat transcripts, email correspondence, support tickets)
• Preference settings and account configurations
• Responsible gaming limit settings (deposit limits, session time limits, self-exclusion status)

2.4 Technical and Device Information

When you access kdtoto, we automatically collect technical information about your device and browsing activity:

• IP address and geographic location (city and region within Indonesia)
• Device type, model, and operating system (Windows, macOS, Android, iOS)
• Browser type and version (Chrome, Firefox, Safari, Edge)
• Screen resolution and device identifiers
• Referring website URLs
• Pages visited on kdtoto and navigation paths
• Time spent on pages and session duration
• Cookies and similar tracking technologies (see Section 8 for details)

2.5 Communication and Marketing Information

If you opt in to receive marketing communications, we collect:

• Marketing preference settings (email, SMS, push notifications)
• Response data to promotional campaigns
• Feedback and survey responses

3. How We Use Your Information

kdtoto uses the collected information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your kdtoto account
• Verifying your identity and age (21+ requirement) through KYC procedures
• Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay)
• Enabling access to casino games, sports betting, live dealer games, and lottery services
• Maintaining account balances and transaction records
• Providing customer support and responding to inquiries

3.2 Security and Fraud Prevention

• Detecting and preventing fraudulent activities, money laundering, and unauthorized access
• Monitoring for multiple accounts and bonus abuse
• Implementing anti-money laundering (AML) and Know Your Customer (KYC) compliance measures
• Investigating suspected violations of our Terms and Conditions
• Protecting the integrity of our games and preventing cheating or collusion

3.3 Legal and Regulatory Compliance

• Complying with applicable laws, regulations, and legal obligations in Indonesia
• Responding to legal processes, court orders, and government requests
• Enforcing our Terms and Conditions and other policies
• Maintaining records required by gaming regulations

3.4 Platform Improvement and Personalization

• Analyzing user behavior to improve website functionality and user experience
• Personalizing game recommendations and content based on your preferences
• Conducting research and statistical analysis to enhance our services
• Optimizing platform performance and resolving technical issues

3.5 Marketing and Promotional Communications

• Sending promotional offers, bonus notifications, and exclusive deals (only if you have opted in)
• Informing you about new games, features, and platform updates
• Conducting surveys and requesting feedback
• Sending important account notifications and service announcements

3.6 Responsible Gaming Support

• Implementing and monitoring responsible gaming tools (deposit limits, time limits, self-exclusion)
• Identifying patterns of problematic gaming behavior
• Providing resources and support for responsible gaming practices

4. How We Share Your Information

kdtoto respects your privacy and does not sell your personal information to third parties. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (for handling deposits and withdrawals via BCA, BRI, BNI, Mandiri, e-wallets)
• Game providers (software developers who supply casino games, sports betting platforms, live dealer systems)
• Identity verification services (KYC and AML compliance providers)
• Customer support platforms
• Email and SMS communication services
• Cloud hosting and data storage providers
• Analytics and performance monitoring services

These service providers are contractually obligated to protect your data, use it only for the specified purposes, and maintain confidentiality.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, or regulatory bodies when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Cooperate with investigations into illegal activities or suspected fraud
• Enforce our Terms and Conditions or protect our legal rights
• Protect the safety and security of kdtoto, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change via email or prominent notice on our website.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent for such sharing.

5. Data Security and Protection

At kdtoto, we implement comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL (Secure Socket Layer) encryption, the same standard used by major financial institutions.
• Secure Data Storage: Personal data is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms. kdtoto staff cannot view your password.
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of security to your account login process.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and address potential risks.

5.2 Organizational Security Measures

• Access to personal data is restricted to authorized personnel who require it to perform their job functions
• Employees are trained on data protection principles and confidentiality obligations
• We maintain incident response procedures to address data breaches or security incidents promptly
• Third-party service providers are selected based on their security capabilities and are contractually bound to protect your data

5.3 Your Role in Security

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication if available
• Log out of your account when using shared or public devices
• Monitor your account activity regularly and report suspicious behavior immediately
• Keep your contact information (email, phone number) up to date

6. Data Retention

kdtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Type	Retention Period
Account registration information	Duration of account lifetime plus 7 years after account closure (for legal compliance)
Financial transaction records	7 years from transaction date (regulatory requirement)
Gaming activity history	5 years from last activity
KYC verification documents	7 years after account closure
Marketing communications data	Until you opt out or 2 years of inactivity
Customer support communications	3 years from last contact

After the retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you.

7. Your Privacy Rights

As a kdtoto user, you have certain rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your account dashboard. For additional information, contact our customer support team.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update many details directly in your account settings, or contact support for assistance.

7.3 Right to Deletion

You may request deletion of your personal data, subject to certain exceptions. We may be legally required to retain certain information for regulatory compliance, fraud prevention, or legal proceedings. To request account deletion, contact our support team.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data or address your objection to processing.

7.5 Right to Data Portability

You have the right to request your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider where technically feasible.

7.6 Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications via the unsubscribe link in emails or by adjusting your account communication preferences.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

kdtoto uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and recognize you on return visits.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These enable core functionalities like account login, secure transactions, and navigation.
• Performance Cookies: Collect anonymous information about how visitors use our website, helping us improve performance and user experience.
• Functionality Cookies: Remember your preferences (language, region, game favorites) to provide enhanced features.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content based on your interests (only with your consent).

8.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect website functionality and prevent you from accessing certain features.

9. Third-Party Links

The kdtoto website may contain links to third-party websites, services, or resources that are not operated by us. This Privacy Policy applies only to kdtoto. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

kdtoto services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete such information and terminate the associated account.

If you believe a minor has provided personal information to kdtoto, please contact us immediately at [email protected] so we can take appropriate action.

11. International Data Transfers

While kdtoto primarily serves Indonesian players and stores data within secure facilities, some of our service providers may be located outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Posting a prominent notice on our website
• Sending an email notification to your registered email address (for material changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on our website
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours

Our Indonesian-speaking customer support team is available around the clock to address your privacy concerns and assist with data-related requests.