bigtoto Platform Privacy Notice

This page describes what we collect when you use bigtoto and how we keep that data protected. We at bigtoto take data privacy seriously. When you create an account, deposit funds, or play our games—whether on live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), our sportsbook (Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton), slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), or esports markets (Mobile Legends, Free Fire, PUBG Mobile)—we collect certain information to operate the service and comply with legal obligations.

Our bigtoto privacy practices are grounded in transparency. We explain exactly what data we collect, why we collect it, who has access to it, and how long we keep it. We do not sell your personal information to advertisers or data brokers. We do not use your gaming history for external marketing purposes. We encrypt your data in transit and at rest, and we restrict access to it within our organization.

Our services are available only where local law permits. We comply with data protection rules in the jurisdictions where we operate, including requirements in Indonesia and other Southeast Asian regions. By using bigtoto, you acknowledge that you have read and understood this privacy notice and agree to our practices as set out below.

What Data We Collect at bigtoto

When you create a bigtoto account, we ask for your email address, full name, date of birth, and a password. We also collect your nationality and jurisdiction. These are necessary for account management and verification.

For identity verification, we at bigtoto ask you to provide a government-issued ID (passport, national ID card, or driver's license) and proof of address (utility bill, bank statement, or similar document dated within recent months). We store these documents encrypted and separate from your gaming account. We use them only to verify that you meet legal eligibility requirements and to comply with anti-money-laundering regulations. We do not share ID copies with third parties without your consent, except where required by law.

When you deposit or withdraw funds on bigtoto, we collect transaction details: the method used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), the amount, the date and time, and a transaction reference number. We do not store full payment card or bank account numbers; those details are processed by our payment partners and not retained on our servers.

Your gaming activity on bigtoto is logged: the games you play, the bets you place, the stakes and outcomes, and the time and date of each session. We use this data for account reconciliation, fraud detection, dispute resolution, and regulatory compliance. We do not share gaming history with external parties for marketing or analysis.

Account data
Email, name, date of birth, nationality, password hash (not plaintext). Used for account access and verification.
Identity verification
Government ID and proof of address. Encrypted, segregated, used only for legal compliance.
Transaction records
Deposits, withdrawals, payment method, amounts, dates. Payment card details are not stored by bigtoto.
Gaming logs
Games played, bets placed, outcomes, session timestamps. Used internally; not shared externally.
Device and IP info
IP address, device type, browser, approximate location. Used for security and fraud prevention.

How We Use Your Data on bigtoto

We use data collected through bigtoto for the following purposes. First, account management and service delivery—we need your email, name, and account credentials to let you log in and manage your wallet. Second, legal compliance—we verify your identity to comply with anti-money-laundering, know-your-customer (KYC), and anti-terrorism financing regulations. Third, fraud prevention—we analyze transaction patterns and device information to detect suspicious activity and protect your account.

Fourth, dispute resolution—if you contest a bet or transaction, we review your account history and gaming logs to investigate fairly. Fifth, regulatory reporting—we may be required by law to report certain data to financial authorities or law enforcement in the jurisdictions where we operate. Sixth, service improvement—we analyze aggregated (non-personal) data to understand how players use bigtoto and to identify technical issues.

We do not use your data to send unsolicited marketing emails or SMS. We do not profile your gaming behavior to target you with external advertising. If you subscribe to our newsletter or promotional updates, we send only what you have opted into, and you can unsubscribe at any time through your account settings or an unsubscribe link in each message.

Third Parties and Data Processors

We at bigtoto work with third-party service providers who handle data on our behalf. Our payment processors (the companies that manage mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, bank transfers, and other deposit/withdrawal methods) receive transaction data necessary to settle deposits and withdrawals. These processors are contractually bound to protect your data and to use it only for payment processing.

Our identity verification partner receives a copy of your government ID and proof of address to confirm your eligibility. This partner is certified to handle sensitive documents and is required to delete them after verification is complete or after a set retention period required by law.

Our cloud infrastructure provider hosts our servers and databases. They maintain standard data-center security: encryption, firewalls, access controls, and disaster recovery. Our hosting agreement includes strict confidentiality and data-protection clauses. Note that our servers may be located outside your jurisdiction—typically in secure data centers in the Southeast Asian region—but all data is encrypted in transit and at rest.

We may disclose your data if required by a court order, government agency, or law enforcement request. We will comply with such requests to the extent required by law. If we receive a request that we believe is improper or overly broad, we may challenge it or seek to limit disclosure.

Note: We do not sell your personal data. We do not share gaming history with marketing companies, data brokers, or advertisers. Your account information is used solely to operate bigtoto and to comply with applicable law.

Your Rights and Our Commitments on bigtoto

Your Data Rights

You have the right to access all personal data we hold about you on bigtoto. You can request a copy by contacting our customer support team. You have the right to correct inaccurate or incomplete data—if your name or address has changed, update your profile or notify us and we will correct it. You have the right to request deletion of your data, subject to legal retention requirements. For example, we may be required to keep transaction records for tax or anti-money-laundering purposes for a set period even after you close your account.

You have the right to object to certain processing. For example, if we use your data for analytics that is not legally required, you can ask us to stop. You also have the right to data portability—we can provide your data in a structured, commonly used format suitable for transfer to another service (to the extent technically feasible and not prohibited by law).

To exercise any of these rights, contact our customer support team. Provide your account reference and a clear description of your request. We will respond within a reasonable timeframe, typically within 30 days.

Cookies and Tracking

Our bigtoto platform uses cookies and similar technologies. These are small data files stored on your device that help us remember your login state, preferences, and session activity. We use session cookies (deleted when you close your browser) and persistent cookies (stored until expiry or deletion). These cookies are necessary for bigtoto to function—without them, you would have to log in again after each page load.

We do not use cookies for external tracking or advertising. We do not partner with ad networks or analytics services that track your behavior across multiple websites. Our analytics are limited to internal measurement of how our own platform performs.

You can disable cookies in your browser settings, but doing so may limit your ability to use bigtoto. Most modern browsers allow you to manage cookie preferences—consult your browser's help section for instructions.

Data Retention and Deletion

We retain your bigtoto account data as long as your account is active. Once you close your account, we retain transaction records, gaming history, and identity verification documents for the period required by law—typically 5–7 years for anti-money-laundering compliance. After that period, we delete the data or anonymize it so it cannot be linked to you.

If you request account deletion and there is no legal retention requirement, we delete your data within a reasonable timeframe. Some data may persist in backups for a short period; these backups are eventually purged according to our data-retention schedule.

We keep your account credentials (email and password hash) encrypted. If you forget your password, you can request a reset link. We will send the link to your registered email address. You must use that link within a set timeframe to create a new password. If you do not recognize a password reset request, contact our support team immediately—it may indicate unauthorized access.

Data Security Practices

We at bigtoto use industry-standard encryption (TLS 1.2 or higher) to protect data in transit between your device and our servers. All sensitive data at rest is encrypted using AES-256 or equivalent. Our servers are hosted in secure data centers with physical access controls, surveillance, and regular security audits. We restrict database access to a small number of authorized personnel on a need-to-know basis.

We conduct regular security assessments and penetration testing to identify vulnerabilities. We patch software and systems promptly when security updates are released. We maintain an incident response plan and a responsible-disclosure program—if you discover a security issue, you can report it to our team and we will investigate and remedy it promptly.

However, no online system is non-specific info secure. While we undertake significant effort to protect your data, we cannot guarantee absolute protection against every conceivable attack. If a security breach occurs, we will notify affected users and relevant authorities as required by law.

International Data Transfers

Our bigtoto service operates across multiple jurisdictions in Southeast Asia. Your data may be processed and stored in countries other than your own. By using bigtoto, you consent to this international transfer. We ensure that any transfer is protected by appropriate safeguards—such as encryption, contractual clauses, or adequacy decisions under applicable law.

If you have concerns about data transfers, contact our support team and we can discuss specific circumstances. Our about us page provides more information on our operational footprint and data practices across regions.

Changes to This Policy

We may update this privacy notice from time to time as our practices evolve or as law requires. We will notify you of material changes by posting the revised notice on bigtoto and updating the effective date. Your continued use of our platform after such changes constitutes your acceptance of the revised notice. We recommend reviewing this page periodically to stay informed of how we handle your data.

If you have questions or concerns about our privacy practices, contact our customer support team via in-app chat, email, or support portalOur team is available to clarify our policies and address your privacy concerns. We are committed to operating bigtoto with transparency and respect for your personal data.