Privacy Policy

gdtoto is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and protect your data.

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and protection of personal information by gdtoto ("we," "us," or "our") in relation to users ("you" or "your") of the gdtoto online gaming platform accessible at gdtoto.cam. By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

gdtoto operates primarily for users residing in Indonesia and processes personal data in accordance with applicable Indonesian data protection regulations and international best practices. We are committed to transparency about our data handling procedures and to providing you with control over your personal information.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. If you do not agree with any aspect of this Privacy Policy, please discontinue use of the gdtoto platform immediately.

2. Information We Collect

gdtoto collects various categories of personal information necessary to provide our services, ensure platform security, comply with legal obligations, and improve user experience. The types of information we collect include:

2.1 Information You Provide Directly

  • Registration Information: When you create an account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, username, and password.
  • Identity Verification Documents: As part of our Know Your Customer (KYC) compliance procedures, we collect copies of government-issued identification documents (Indonesian KTP or passport), proof of address documentation (utility bills, bank statements, or government correspondence), and selfie photographs holding your identification.
  • Financial Information: We collect payment method details including bank account information (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, and other supported banks, as well as e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. We do not store complete credit or debit card numbers.
  • Communication Data: When you contact our customer support team via live chat, email, or other communication channels, we retain records of your inquiries, complaints, and our responses to provide better service and resolve disputes.
  • Marketing Preferences: Your consent choices regarding promotional emails, SMS messages, push notifications, and other marketing communications.

2.2 Information Collected Automatically

  • Gaming and Transaction History: Comprehensive logs of all bets placed, games played, deposits made, withdrawals requested, bonus claims, wagering activity, win/loss records, and account balance changes.
  • Technical and Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, device identifiers, time zone settings, and language preferences.
  • Usage Data: Pages viewed, features used, clickstream data, time spent on different sections of the platform, navigation paths, and interactions with promotional offers.
  • Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to collect information about your browsing behavior, personalize content, remember login credentials, and analyze platform performance. For detailed information, see our Cookie Policy section below.
  • Location Data: We may collect geolocation information (IP-based or GPS-based with your consent) to verify you are accessing our services from within Indonesia and to comply with geographical restrictions.

2.3 Information from Third-Party Sources

  • Payment Processors: Confirmation of successful deposits and withdrawals from banks and e-wallet providers.
  • Identity Verification Services: Results from third-party identity verification and fraud prevention services used during KYC procedures.
  • Game Providers: Game session data, results, and technical information from our third-party game content suppliers.

3. How We Use Your Information

gdtoto processes your personal information for the following legitimate purposes:

3.1 Service Provision and Account Management

  • Create, maintain, and manage your gaming account
  • Process deposits, withdrawals, and other financial transactions
  • Enable you to play games and place bets on our platform
  • Administer bonuses, promotions, tournaments, and loyalty rewards
  • Provide customer support and respond to your inquiries
  • Send transactional notifications (account confirmations, password resets, deposit/withdrawal confirmations)

3.2 Security and Fraud Prevention

  • Verify your identity and age to ensure compliance with legal requirements (21+ age restriction)
  • Detect and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct
  • Monitor for multi-accounting, collusion, bonus abuse, and other terms violations
  • Protect the security and integrity of our platform and other users
  • Investigate and resolve disputes, complaints, and suspected violations

3.3 Legal and Regulatory Compliance

  • Comply with applicable laws, regulations, and legal obligations in Indonesia and internationally
  • Fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements
  • Respond to lawful requests from government authorities, regulators, and law enforcement agencies
  • Maintain records required by gaming regulations and financial transaction laws
  • Enforce our Terms & Conditions and other policies

3.4 Platform Improvement and Analytics

  • Analyze user behavior and preferences to enhance platform functionality and user experience
  • Conduct statistical analysis and research to identify trends and improve our services
  • Test new features, games, and promotional offers
  • Optimize platform performance, loading times, and mobile responsiveness
  • Troubleshoot technical issues and bugs

3.5 Marketing and Communications (With Your Consent)

  • Send promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers
  • Personalize marketing content based on your gaming preferences and history
  • Conduct surveys and request feedback to improve our services
  • Provide information about VIP program benefits and tier upgrades

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account settings, or contacting customer support. Opting out does not affect transactional communications necessary for service delivery.

4. Legal Basis for Processing (Indonesia Context)

Under applicable data protection principles, gdtoto processes your personal information based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to perform our contract with you (Terms & Conditions) and provide gaming services you have requested.
  • Legal Obligation: Processing is required to comply with Indonesian laws, gaming regulations, KYC/AML requirements, and other legal obligations.
  • Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, platform security, service improvement, business analytics) provided these interests do not override your fundamental rights and freedoms.
  • Consent: For marketing communications and certain data processing activities, we rely on your explicit, freely given, and informed consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

gdtoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients in specific circumstances:

5.1 Service Providers and Business Partners

  • Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
  • Game Providers: Third-party game studios and suppliers whose content appears on our platform.
  • Identity Verification Services: KYC/AML compliance providers that verify identity documents and screen for fraud.
  • Cloud Hosting and IT Infrastructure: Providers of server hosting, data storage, cybersecurity, and technical maintenance services.
  • Customer Support Tools: Live chat platforms and customer relationship management systems.
  • Analytics and Marketing Platforms: Tools for website analytics, email marketing, and performance tracking (used only with your consent where required).

All third-party service providers are contractually obligated to maintain confidentiality, use your information only for the specified purposes, and implement appropriate security measures.

5.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, regulators, law enforcement, courts, or other authorities when:

  • Required by applicable law, regulation, legal process, or enforceable governmental request
  • Necessary to investigate potential violations of our Terms & Conditions or applicable laws
  • Required to detect, prevent, or address fraud, security, or technical issues
  • Necessary to protect the rights, property, or safety of gdtoto, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding involving gdtoto, your personal information may be transferred to the successor entity or acquiring party. You will be notified via email and/or prominent notice on our platform of any such change in ownership or control of your personal information.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. Such data does not constitute personal information under this Privacy Policy.

6. Data Security Measures

gdtoto employs industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

  • Encryption: All sensitive data transmissions between your device and our servers are protected by 256-bit SSL/TLS encryption (the same standard used by banks).
  • Secure Storage: Personal information is stored on secure servers in protected data centers with restricted physical access, environmental controls, and 24/7 monitoring.
  • Access Controls: Role-based access restrictions ensure that only authorized personnel with legitimate business needs can access personal information.
  • Authentication: Multi-factor authentication, strong password requirements, and session management protocols protect account access.
  • Firewalls and Intrusion Detection: Advanced firewall systems and intrusion detection/prevention tools monitor and block malicious traffic.
  • Regular Security Audits: Periodic vulnerability assessments, penetration testing, and third-party security audits identify and address potential weaknesses.
  • Employee Training: All staff members handling personal information receive mandatory training on data protection principles and security best practices.
  • Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data security incidents.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and should notify us immediately if you suspect unauthorized account access.

7. Data Retention

gdtoto retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices include:

  • Active Accounts: Information associated with active accounts is retained for the duration of your membership plus any applicable post-termination obligations.
  • Closed Accounts: After account closure, we retain essential data (identity verification documents, transaction history) for 7 years to comply with financial record-keeping and anti-money laundering regulations.
  • Gaming and Transaction Records: Logs of bets, deposits, withdrawals, and gameplay are retained for 7 years for regulatory compliance, dispute resolution, and auditing purposes.
  • Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to honor your request.
  • Legal Disputes: Information relevant to ongoing legal proceedings, investigations, or disputes is retained until the matter is fully resolved.

After the applicable retention period expires, personal information is securely deleted or anonymized in accordance with our data destruction procedures.

8. Your Privacy Rights

As a gdtoto user, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request confirmation of whether we process your personal information and to obtain a copy of the information we hold about you. You can access much of your account information directly through your gdtoto account dashboard. For additional information, contact our support team.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction or update. You can modify most account information (email, phone number, address) directly in your account settings. For changes to verified identity information, contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes it was collected, or you withdraw consent for processing based on consent. However, we may be required to retain certain information to comply with legal obligations (KYC/AML records, transaction history for tax and regulatory purposes). Account deletion requests can be submitted through customer support.

8.4 Right to Restrict Processing

You may request temporary restriction of processing your personal information in specific situations, such as while we verify the accuracy of data you have contested, or while we determine whether our legitimate interests override your objection to processing.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible. This right applies to information you provided based on consent or contract.

8.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. You can opt out via account settings or unsubscribe links in marketing emails. You may also object to processing based on legitimate interests by contacting customer support with specific reasons related to your particular situation.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal. Note that withdrawal of certain consents may impact our ability to provide services.

8.8 Automated Decision-Making

gdtoto may use automated systems and algorithms for fraud detection, bonus abuse prevention, and risk assessment. You have the right to request human review of decisions made solely by automated means that significantly affect you.

To exercise any of these rights, contact us at [email protected] with your request. We will respond within a reasonable timeframe as required by applicable law (typically within 30 days). We may request additional information to verify your identity before processing requests.

9. Cookies and Tracking Technologies

gdtoto uses cookies and similar tracking technologies to enhance your browsing experience, personalize content, analyze platform usage, and deliver targeted marketing (with your consent where required). A cookie is a small text file stored on your device by your web browser.

Types of Cookies We Use:

  • Strictly Necessary Cookies: Essential for platform functionality, authentication, security, and service delivery. These cannot be disabled without severely impacting platform usability.
  • Performance and Analytics Cookies: Collect anonymized information about how users interact with our platform to help us improve performance and user experience.
  • Functionality Cookies: Remember your preferences (language, region, login credentials) to provide enhanced, personalized features.
  • Marketing and Targeting Cookies: Track your browsing activity to deliver personalized advertisements and promotional content. These are only used with your consent.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. However, disabling certain cookies may impact platform functionality. Refer to your browser's help documentation for specific instructions.

10. Third-Party Links and Services

The gdtoto platform may contain links to third-party websites, services, or resources (such as payment processors or social media platforms) that are not operated by us. This Privacy Policy does not apply to third-party sites. We are not responsible for the privacy practices, content, or security of external sites. We encourage you to review the privacy policies of any third-party services you access through our platform.

11. Children's Privacy

gdtoto services are strictly intended for users who are at least 21 years of age or the legal age of majority in their jurisdiction, whichever is greater. We do not knowingly collect personal information from individuals under the legal gambling age. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and terminate the associated account. If you believe a minor has provided information to gdtoto, please contact us immediately at [email protected].

12. International Data Transfers

gdtoto primarily serves users in Indonesia. However, some of our service providers and business partners may be located in other countries. When we transfer your personal information outside Indonesia, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by relevant data protection authorities
  • Ensuring the recipient country provides adequate data protection standards
  • Obtaining your explicit consent for specific transfers

By using gdtoto services, you acknowledge and consent to such international transfers as necessary for service provision.

13. Changes to This Privacy Policy

gdtoto reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated through:

  • Prominent notice on the gdtoto homepage
  • Email notification to registered users
  • In-platform notifications upon login

The "Last Updated" date at the bottom of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of gdtoto services after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy, our data handling practices, or wish to exercise your privacy rights, please contact us:

Email: [email protected]
Subject Line: Privacy Inquiry / Data Protection Request
Live Chat: Available 24/7 through the gdtoto platform (select "Privacy & Data" as your inquiry topic)
Response Time: We aim to respond to all privacy-related inquiries within 5 business days

For specific concerns about how your personal information is being processed, you may also contact our Data Protection Officer, who oversees compliance with data protection regulations and handles privacy complaints.

Your Consent: By creating an account and using gdtoto services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of our platform immediately.

Last Updated: January 2026

Your Data Security is Our Priority

Industry-leading measures protecting your personal information

256-Bit SSL Encryption

All data transmissions between your device and our servers are protected by bank-grade encryption, ensuring your information remains confidential and secure.

Strict Access Controls

Only authorized personnel with legitimate business needs can access your personal information, subject to comprehensive audit trails and accountability measures.

Secure Data Centers

Your information is stored on secure servers in protected facilities with 24/7 monitoring, environmental controls, and redundant backup systems.

Advanced Threat Protection

Multi-layered security systems including firewalls, intrusion detection, and real-time threat monitoring protect against cyber attacks and data breaches.

Regular Security Audits

Independent third-party security assessments, penetration testing, and vulnerability scans ensure our defenses remain current against evolving threats.

Employee Training

All gdtoto staff receive mandatory training on data protection principles, privacy regulations, and security best practices to safeguard your information.

Questions About Your Privacy?

Our dedicated support team is available 24/7 to address your data protection concerns

View FAQ Return to Home