Privacy Policy

Baduitoto Privacy Policy – Indonesia User Data Protection

At baduitoto, privacy is not merely a legal obligation — it is a responsibility we take seriously. This page transparently explains how we handle your personal data from start to finish.

Last updated: June 1, 2026
SSL 256-bit
Encrypted Data
Never Sold to Third Parties
User Access Rights
PCI-DSS Standard
Right to Erasure
Our Privacy Principles

Six Pillars of Data Protection at Baduitoto

Every decision involving your data is based on the following six core principles

Multi-Layer Security

All data is stored in SSL 256-bit encrypted infrastructure. Access to user data is strictly limited to authorized personnel who require it to operate the service.

Never Sold to Third Parties

Baduitoto never sells, rents, or trades your personal data to third parties for any marketing or commercial purpose. Your data is yours — full stop.

Control Is in Your Hands

You have the right to access, update, download, and request deletion of the personal data we hold about you at any time through your account panel or by contacting our Support team.

Minimum Collection

We only collect data that is strictly necessary to operate the service. No excessive or irrelevant data collection takes place beyond what is needed for your experience on the platform.

Full Transparency

This page fully and honestly explains what we collect, why we collect it, and how we use it. Nothing is hidden.

Global Standard Compliance

Our data handling practices comply with international data protection standards and applicable regulations, including PCI-DSS payment security standards for financial data.

Table of Contents
  1. Data We Collect
  2. Data Collection Methods
  3. Data Usage Purpose
  4. Storage & Security
  5. Data Sharing with Third Parties
  6. Cookie & Tracking Technologies
  7. User Rights
  8. Data Retention
  9. Minor Privacy Protection
  10. Policy Changes
  11. Contact Us

Baduitoto ("we", "Platform", or "service") operates as an online betting and gaming platform provider for users in Indonesia. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide when using baduitoto services.

By registering and using baduitoto services, you acknowledge and agree to the practices described in this policy. If you do not agree, please discontinue use of this platform. We encourage you to read this page thoroughly — not as a formality, but because you have the right to know how your data is handled.

Data We Collect

Baduitoto collects two types of data: data you actively provide, and data collected automatically when you use the platform.

Data You Actively Provide
Data Category Example When Collected
Identity Full name, date of birth, gender Account Registration & KYC
Contact Email address, phone number Account registration
Official Identity National ID / passport number, document photo, selfie KYC Verification
Payment Account name, bank account number / e-wallet number Deposit & withdrawal
Preferences Language, notifications, preferred payment methods Account settings
Automatically Collected Data
  • Device data: device type, operating system, browser version, screen resolution
  • Network data: IP address, internet service provider, general geographic location (city/province level)
  • Activity data: pages visited, session duration, features used, bets placed
  • Cookie and local storage data to maintain login sessions and display preferences

How We Collect Data

Data collection at baduitoto is carried out through several channels, all of which are transparent and within your control:

  • Registration form and account profile — data you enter directly when creating or updating your account.
  • Financial transactions — information required to process deposits, withdrawals, and financial identity verification.
  • Support Communications — live chat conversations, emails, or support tickets submitted to the baduitoto Support team.
  • Platform activity — data automatically collected while you use the baduitoto website or app.
  • Cookies and similar technologies — used to maintain session security and enhance the platform experience.

Baduitoto has never purchased user data from external sources or collected data from your social media without explicit consent.

Data Usage Purpose

Baduitoto uses collected data solely for legitimate purposes directly relevant to platform operations. The primary purposes for using your data are as follows:

  • Managing and operating your account — including the login process, account security, and user preferences.
  • Processing financial transactions — secure and accurate deposits, withdrawals, and payment verification.
  • Fulfilling KYC and AML obligations — identity verification in accordance with regulatory requirements to prevent fraud and money laundering.
  • Improving platform services — analyzing usage patterns to identify areas for improvement.
  • Service communications — transaction notifications, system updates, and important information related to your account.
  • Security and fraud prevention — detecting and preventing unauthorized activity, account misuse, or fraud attempts.
  • Limited personalization — customizing the display and recommendations based on your own preferences.

Baduitoto does not use your data for excessive profiling, third-party ad targeting, or any purpose unrelated to the services you use.

Data Storage and Security

All baduitoto user data is stored on servers located in high-security data centers with multiple layers of physical and digital protection.

Security Layers in Place
  • Data encryption in transit: SSL/TLS 256-bit encryption for all communication between your device and our servers.
  • Data encryption at rest: Sensitive data stored in the database is encrypted using AES-256 standards.
  • Role-based access control: Only authorized personnel with a legitimate business need can access user data.
  • Audit log: Every access to sensitive data is automatically logged for security audit purposes.
  • Real-time threat monitoring: An active intrusion detection system monitors for unauthorized access attempts 24 hours a day.
  • Regular security testing: Penetration testing and security audits are conducted regularly by independent third parties.

Debit card details and sensitive financial information are never stored on baduitoto servers — they are processed directly by PCI-DSS-compliant payment gateways.

Data Sharing with Third Parties

Baduitoto never sells, rents, or exchanges your personal data to third parties for commercial purposes. However, in operating our services, we work with a number of trusted partners who require limited access to certain data:

  • Payment gateway providers — to process deposit and withdrawal transactions securely. They receive only the minimum data required to complete the transaction.
  • Identity verification service providers — to process KYC in accordance with regulatory requirements. Your identity document data is encrypted before transmission.
  • Cloud infrastructure providers — hosting and data processing services bound by a strict non-disclosure agreement (NDA) with baduitoto.
  • Legal and regulatory authorities — only when legally required by a court order or official request from a competent authority.

All third-party partners working with baduitoto are bound by contracts that prohibit them from using your data for any purpose other than what has been agreed upon. They are not permitted to sell or share your data with any other party.

Cookies and Tracking Technologies

Baduitoto uses cookies and similar local storage technologies to enhance your experience on the platform. The following types of cookies are used:

  • Essential cookies (required): Required for core platform functions such as maintaining login sessions, account security, and language preferences. These cookies cannot be disabled.
  • Performance cookies: Collecting anonymous information about how users interact with the platform to help us identify and resolve technical issues.
  • Functional cookies: Saving your preferences such as your preferred deposit method and display settings so you do not need to re-enter them every time you log in.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the security features and overall functionality of the baduitoto platform.

Baduitoto does not use cookies to track your activity outside our platform or to display third-party advertisements.

Your Rights Over Personal Data

As a baduitoto user, you have a number of rights you can exercise at any time regarding your personal data. Baduitoto is committed to processing all legitimate requests within a reasonable timeframe.

1
Right to Access

You have the right to request a copy of the personal data we hold about you at any time through your account panel or our Support team.

2
Right to Rectification

If any data is inaccurate or incomplete, you have the right to request an immediate correction through your account settings.

3
Right to Deletion

You can request the deletion of personal data that is no longer needed, except for data that must be retained to meet legal or regulatory obligations.

4
Right to Restriction

You can request that we restrict the processing of your data in certain situations, such as when you are disputing the accuracy of the data.

5
Right to Portability

You have the right to receive the data you provided to us in a structured, machine-readable format for transfer to another service.

6
Right to Object

You have the right to object to the processing of your data for specific purposes, including processing for internal product development.

To exercise the above rights, contact the baduitoto Support team via live chat within the platform or via the email address listed on the About Us. We will respond within 7 business days.

Data Retention

Baduitoto retains your personal data for as long as necessary to deliver our services and meet applicable legal obligations. In general, our data retention policy is as follows:

  • Active account data — retained for as long as your account is active and has not been closed.
  • Closed account data — retained for 5 years after account closure for audit purposes, dispute resolution, and anti-money laundering (AML) obligations.
  • Financial transaction records — retained for a minimum of 7 years in accordance with applicable financial regulatory requirements.
  • KYC data and identity documents — retained in accordance with regulatory requirements, generally 5 years after the business relationship ends.
  • Support communication logs — retained for 2 years for service quality assurance purposes.

Once the retention period ends, data is permanently deleted using secure, non-recoverable deletion methods.

Minor Privacy Protection

Baduitoto services are intended exclusively for users aged 18 and above. baduitoto actively takes steps to prevent minors from registering and using the platform.

If we find that personal data belonging to someone under 18 has been collected without valid parental or guardian consent, we will promptly delete that data and close the account in question. If you know or suspect that a minor is using the baduitoto platform, please report it to our Support team immediately.

Privacy Policy Changes

Baduitoto may update this Privacy Policy from time to time to reflect operational changes, legal requirements, or improved security standards. Any significant changes will be communicated to users via:

  • In-platform notifications (banners or pop-ups) when you log in
  • Email to the address registered on your account (for material changes that affect your rights)
  • Updates to the "Last Updated" date at the top of this page

Continued use of baduitoto services after a policy update is published constitutes acceptance of the changes. We recommend checking this page periodically.

Privacy Questions and Complaints

If you have any questions, concerns, or complaints about how baduitoto handles your personal data, our team is available 24 hours a day, 7 days a week.

You can reach us via live chat available within the platform after login, or by support email listed on the About Us. All privacy-related communications are handled in English by a team specially trained in user data protection matters.

We are committed to responding to every privacy request or complaint within a maximum of 7 business days from receipt.

Privacy FAQ

Frequently Asked Questions about Data Privacy at baduitoto

No. Baduitoto never sells, rents, or exchanges your personal data with any third party for commercial purposes. The data you provide to us is used solely to deliver the services you use. This is not merely a statement — it is a binding business commitment for our entire team and partners.

You can submit a data deletion request via live chat within the platform or through our support email. Please include identity verification to ensure the security of the process. Note that some data may need to be retained to fulfil legal and financial regulatory obligations, and we will communicate this transparently in our response.

Yes. Your identity document photos are encrypted before being transmitted from your device to our servers over an SSL 256-bit connection. On the storage side, documents are encrypted with AES-256 and can only be accessed by authorized verification personnel through a system with strict audit logs. Once the KYC process is complete, documents are retained in accordance with applicable retention requirements and are not shared with any party unless required by law.

Not in the sense of real-time GPS tracking. We only record general geographic location (at the city or province level) based on your internet connection's IP address. This is used for security purposes — such as detecting logins from unusual locations — not to monitor your specific movements or track you continuously.

After your account is closed, most data will be gradually deleted. However, certain data — particularly financial transaction records and KYC documents — must be retained for a period required by applicable financial and anti-money laundering regulations (generally 5–7 years). Once that period ends, all data is permanently deleted. We will provide a full explanation of this when you submit an account closure request.

Your Privacy Is Protected — Play with Complete Peace of Mind

With transparent privacy policies and multi-layered security, you can enjoy all baduitoto services without worrying about your data. Register now and join hundreds of thousands of Indonesian players who already trust us.

Register Free Login
Bahasa Indonesia