s8totoPrivacy Policy

This page describes what we collect when you use s8toto and how we keep that data protected. We collect personal information only when you register, verify your account, or make deposits and withdrawals. We never sell your data to third parties, and we encrypt all sensitive information on our servers. Our commitment is to be transparent about what we collect, why we collect it, and how long we keep it.

When you access s8toto from your phone or desktop, we gather information about how you use our platform — which games you visit, how long you stay, what bets you place, and what time you were active. We also collect technical data like your device type, browser version, and IP address. This information helps us improve your experience, detect fraud, and comply with legal requirements. We store all of this data with encryption and access controls; only our engineering and compliance teams can view it, and only when necessary.

Our servers may sit outside your jurisdiction. If you are in Indonesia and access s8toto from Jakarta, Surabaya, Bandung, or Medan, your data may be processed on servers in another country. This is standard for global platforms, but we want you to know it. We apply the same security standards to data regardless of where it sits. Below, we explain exactly what we collect, how we use it, and your rights regarding it.

What We Collect on s8toto

We collect the following categories of data when you register and use s8toto:

• Identity data: Your full name, date of birth, phone number, email address, and ID card details (for KYC verification).
• Financial data: Bank account details, e-wallet accounts (DANA, e-wallet, mobile banking, local payment, online payment), e-wallet code, and transaction history for deposits and withdrawals.
• Verification data: Selfie photo and ID card photo used for identity verification; we delete these photos after verification is complete.
• Account activity data: Bets placed, games visited, winnings and losses, time spent in each category (Live Football, Live Casino, Slots, Esports, Sports).
• Technical data: IP address, device type, browser version, operating system, connection speed, and crash reports.
• Communication data: Emails and SMS messages we send to you, support tickets you open, and chat history with our support team.

We do not collect your password in plain text — we store only an encrypted hash. We do not collect payment card details; we route card transactions through external payment processors who handle that encryption. We do not track your location beyond your IP address, and we do not use cookies to follow you across other websites.

How We Use Your Data on s8toto

We use your data for the following purposes:

• Account management: We verify your identity, set up your account, and process your logins.
• Payments: We confirm your deposits via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment. We also review your withdrawal requests to ensure they match your account and to detect fraud.
• Compliance: We comply with anti-money-laundering (AML) regulations by keeping records of your identity, account activity, and transactions.
• Fraud detection: We analyse patterns in your account — login times, bet sizes, withdrawal frequency — to spot unusual activity and prevent unauthorized access.
• Support: We use your contact details to respond to your support requests and to notify you of account events (login, withdrawal approval, bonus credit).
• Platform improvement: We analyse aggregate data (not linked to your name) to see which games are popular, how fast our servers respond, and where the interface confuses users.

We at s8toto keep your identity data separate from your account activity data, so no single person or system can see both your name and your betting history without separate authorization.

Third-Party Processors and Data Sharing

We share your data with third parties only when necessary for a specific purpose:

• Payment processors: We share your name and account number with online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet to process deposits and withdrawals. Each of these services has its own privacy policy; we do not control how they use your data.
• Fraud and compliance services: We send your ID card details to external verification companies who cross-check your identity against fraud and sanctions databases.
• Support and hosting: We use cloud hosting providers to store our database and email services to send you confirmations and support replies. These providers are contractually bound to keep your data confidential.
• Legal requests: If a court order, law-enforcement request, or regulatory authority asks for your data, we will comply if legally required. We notify you of such requests unless the law forbids it.

We do not sell your data to advertisers, data brokers, or marketing companies. We do not allow third parties to use your data for their own purposes unless you explicitly consent.

Cookies and Tracking on s8toto

We use cookies to remember your login session on s8toto. When you log in, we create a session cookie that stays in your browser until you log out. This cookie does not track you across other websites. We do not use third-party analytics cookies (like Google Analytics) that would follow your browsing behaviour elsewhere.

If you use our mobile app on Android, we may store your session and preferences locally on your device. If you use our iOS browser version, we rely on Safari's session storage. In both cases, your login token is encrypted on your device; if you uninstall the app or clear your browser data, you will need to log in again.

Your Rights Under Our s8toto Policy

You have the right to request a copy of all data we hold about you. You can contact our support team, confirm your identity via SMS, and we will provide a complete export of your account data, activity, and transactions within 14 days. You also have the right to request that we correct inaccurate information — if your name is misspelled in our records, we will fix it. You may request that we delete your account and associated data, though we will retain transaction records if required by law or to prevent fraud.

If you believe we are mishandling your data, you can lodge a complaint with your local data protection authority or with us directly. We will investigate all complaints and respond within 30 days.

Data Retention on s8toto

We retain your account data for as long as your account is active. If you close your account, we keep your transaction records for at least seven years to comply with anti-money-laundering regulations. We delete your identity verification photos (selfie and ID card) within 30 days after verification is complete. We delete activity logs and technical data after two years unless there is an ongoing fraud investigation or legal dispute.

Contact Our Privacy Team

If you have questions about our privacy policy, want to exercise your rights, or suspect misuse of your data, contact our support team. You can reach us via the in-app support chat or via the email address displayed in your account settings. We respond to all privacy inquiries within 24 hours during business days. During national holidays like Idul Fitri or Idul Adha, responses may take longer.

We may update this privacy policy from time to time. Changes are effective immediately upon publication on this page. We encourage you to review this policy periodically so you stay informed about how we handle your data. Your continued use of s8toto after a policy change constitutes your acceptance of the new policy.

Related pages