h2toto Platform Privacy Notice

This page describes what we collect when you use h2toto and how we keep that data protected. We take your privacy seriously because your account information, payment details, and activity history belong to you—not us. Our approach is straightforward: we collect only the data necessary to operate h2toto, process your deposits and withdrawals, verify your identity, and comply with law. We do not sell your data, and we do not share it with third parties except where required for payment processing or legal obligation.

When you create an h2toto account, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or Indonesian banks (mobile banking, local payment, online payment, e-wallet), play on our live-dealer tables or slots, or request a withdrawal, you provide information to h2toto. We encrypt that information, store it securely, and access it only to serve you—to settle your bets, calculate your weekly cashback, manage your tier progression, and prevent fraud. Your data is yours; you can request a copy or deletion anytime by contacting our support team.

Our h2toto servers operate globally, which means your data may be processed outside your home country. Indonesian law and international data-protection standards guide how we handle it. This privacy notice explains the details.

Data We Collect on h2toto

We collect several categories of data when you use h2toto. First, your account setup data: name, email address, phone number, date of birth, residential address, and government-issued identification details (ID number, passport number, or equivalent). We collect this to verify your identity and comply with anti-money-laundering regulations. Second, your payment data: the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), your banking details, and transaction amounts and dates. We collect this to process deposits, withdrawals, and calculate your weekly cashback on h2toto.

Third, your h2toto activity data: every game you play, every stake you place, every win or loss, your account balance changes, your login times, and the devices you use to access our platform. We track this to settle your bets, calculate tier progression, detect fraud, and maintain our transaction ledger. Fourth, your communication data: any support tickets you submit, emails you send us, and chat messages within h2toto's customer service. We retain this to resolve your issues and improve our service.

Fifth, technical data: your IP address, browser type, device model, operating system, and browsing patterns on h2toto. We use this to maintain platform security, detect abuse, and optimize our service. Sixth, optional data: if you participate in h2toto's referral program, we collect your referral links and the accounts you refer. If you use our loyalty tier system, we track your cumulative activity to assign tier status.

How We Use Your Data on h2toto

Compliance and legal obligation: we use your identity data to verify you are not operating under a false name or banned identity, and to comply with Indonesian and international anti-money-laundering regulations. We use your payment data to trace deposits and withdrawals back to verified payment methods, reducing fraud risk. We retain transaction records for seven years as required by law.

Security and fraud prevention: we use your technical data (IP address, device information, login patterns) to detect unusual account activity, unauthorized access attempts, and potential fraud. We use your h2toto activity data to flag suspicious betting patterns or large withdrawals that may warrant additional verification.

Service improvement: we analyze aggregated, anonymized data (not linked to individual identities) to understand which h2toto games are popular, which payment methods users prefer, and where our platform experiences technical issues. This helps us improve h2toto's user experience, add new payment options, and expand our game portfolio.

Third-Party Processors and Data Sharing

We do not sell your h2toto data to third parties for marketing or commercial purposes. However, we share your data with specific service providers who help us operate h2toto. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your banking details to process deposits and withdrawals. Your data remains encrypted in transit and at rest on these platforms.

Identity verification services receive your name, address, ID number, and date of birth to confirm your identity matches official records. These services are contractually bound to use your data only for verification and then delete it after completion. We also share anonymized data with our IT security partners to detect and prevent fraud and cyberattacks against h2toto.

We may disclose your data if required by law—for example, if a law-enforcement agency presents a valid warrant or if a court orders us to provide transaction records. We do not voluntarily share data with government agencies unless legally compelled. If such a request is made, we assess its validity before compliance and notify you where permitted by law.

Your Rights on h2toto

You have several rights regarding your data on h2toto. Right to access: you can request a copy of all personal data we hold on you. We provide this within 30 days of your request. Right to correction: if any data in your h2toto account is inaccurate—such as your address or phone number—you can request we correct it. Right to deletion: you can request we delete your data, though we may retain transaction records if required by law or for fraud prevention.

Right to withdraw consent: if you originally consented to receive promotional emails or marketing communications from h2toto, you can withdraw that consent anytime by adjusting your account preferences or emailing us. Right to lodge a complaint: if you believe we have mishandled your data, you can file a formal complaint with us or with the relevant data-protection authority in your jurisdiction.

To exercise any of these rights, contact our support team via email or in-app messaging. We will respond to your request within the timeframe required by law. If your request is complex, we may ask for clarification or additional information to verify your identity before processing.

Cookies and Tracking on h2toto

We use cookies on h2toto to enhance your user experience. Essential cookies are required to keep you logged in, secure your session, and process your bets. Performance cookies track how you interact with h2toto—which games you play, how long you spend on each page, and which features you use most. This helps us optimize h2toto's performance and user interface.

Preference cookies remember your settings—such as your preferred language, display mode (light or dark), and notification preferences. Analytics cookies help us understand traffic patterns to h2toto and identify popular cities like Jakarta, Surabaya, Bandung, Medan, and Semarang. You can manage cookie settings through your browser, though disabling essential cookies may prevent h2toto from functioning properly.

Data Retention and Security on h2toto

We retain your h2toto data only as long as necessary. Account data is retained for the lifetime of your account plus seven years after closure (for legal compliance). Payment data is retained for seven years (as required by anti-money-laundering law). Activity data is retained indefinitely for audit and dispute resolution. Technical data (IP address, device info) is retained for 90 days. You can request deletion of non-essential data anytime by contacting us.

We secure h2toto data using industry-standard encryption (SSL/TLS for data in transit, AES-256 for data at rest). We restrict access to your data to h2toto staff who need it to serve you. We conduct regular security audits and penetration testing to identify and patch vulnerabilities. Our servers are hosted on secure, redundant infrastructure with automatic backups and disaster-recovery protocols.

International Data Transfers and Jurisdiction

h2toto's servers may operate in jurisdictions outside Indonesia. This means your data may be processed or stored outside your home country. When we transfer your data internationally, we use contractual safeguards (data-processing agreements) that require recipients to protect your data to the same standard we do. We do not transfer data to countries without adequate privacy protections unless we have explicitly secured your consent.

By using h2toto, you acknowledge that your data may be processed internationally and that different countries may have different data-protection laws. You retain all your rights (access, correction, deletion) regardless of where your data is processed. If you are uncomfortable with international data transfer, you can request deletion of your h2toto account and all associated data.

Privacy Policy Updates and Contact

We may update this h2toto privacy notice from time to time to reflect changes in our practices, new technologies, or changes in law. When we make material changes, we notify you via email at least 30 days before the update takes effect. Your continued use of h2toto after that date means you accept the updated policy. If you disagree with any updates, you can request deletion of your account and data.

If you have questions about our h2toto privacy practices, want to exercise your data rights, or believe we have mishandled your information, contact our data protection team using the support form on h2toto or by emailing us directly. We will respond within 14 days of receipt. For unresolved complaints, you may escalate to the data-protection authority in your jurisdiction or ours.

Our h2toto privacy notice is the authoritative source for how we handle your data. If any other h2toto document (marketing material, terms and conditions, game rules) conflicts with this notice, the notice takes precedence. Thank you for trusting h2toto with your information.