Your privacy is a priority at rgtoto. This Privacy Policy explains exactly what personal information we collect, how we use it, who we share it with, how we protect it, and what rights you have over your own data.
At rgtoto, data privacy is not an afterthought — it is a foundational commitment. Here is a plain-English overview of the principles that guide how we handle your information.
We collect only the personal data that is strictly necessary to operate your account, process transactions, and comply with regulatory requirements. We do not harvest data beyond what each specific purpose requires.
All data transmitted between your device and rgtoto's servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major Indonesian banks including BCA, BRI, and Mandiri. Your data is stored in secured, access-controlled environments.
rgtoto does not sell, rent, or trade your personal data to marketing companies or unrelated third parties. Data is shared only with service providers essential to platform operations and where legally required.
Registered Players have the right to access, correct, export, and request deletion of their personal data at any time. Submit a data request through our support team and we will respond within 30 days.
We use cookies strictly for session management, platform performance optimization, and fraud prevention analytics. We do not use cookies for cross-site tracking or behavioral advertising profiling outside the rgtoto platform.
rgtoto does not knowingly collect personal data from individuals under 21 years of age. Any account found to belong to a minor will be immediately closed and all associated data will be securely deleted from our systems.
rgtoto is committed to protecting the privacy and security of every player who uses our platform. We recognize that Indonesian players — whether in Jakarta, Surabaya, Bandung, Bali, Medan, or anywhere across the archipelago — entrust us with sensitive personal and financial information. We take that responsibility seriously.
This Privacy Policy has been written in clear, accessible English so that all players can understand exactly how their data is handled. It covers all data processing activities associated with the rgtoto website, mobile-optimized interfaces, customer support channels, and any promotional communications you may receive from us.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which collectively govern your use of the rgtoto platform.
For the purposes of applicable data protection law, rgtoto acts as the Data Controller in respect of all personal data processed in connection with the operation of the platform and the delivery of gaming services to players. As Data Controller, rgtoto determines the purposes for which personal data is collected and the means by which it is processed.
If you have any questions, concerns, or requests relating to your personal data, you may contact our Data Protection team directly at the email address provided in Section 16 of this Policy.
The categories of personal data we collect from players vary depending on the nature of your interaction with the platform. The following table provides a comprehensive overview.
| Category | Examples of Data Collected | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government-issued ID number (KTP, passport, or SIM) | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, phone number, residential address (city, province) | Account communication, support, withdrawal confirmation |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Processing deposits and withdrawals, fraud prevention |
| Technical Data | IP address, browser type and version, device type, operating system, session duration, page interaction logs | Platform security, fraud detection, performance optimization |
| Usage Data | Games played, bet amounts and outcomes, wagering patterns, login timestamps, features accessed | Responsible gaming monitoring, product improvement, bonus eligibility |
| KYC Documents | Scanned copies of government-issued ID, proof of address documents, bank statement screenshots | Identity verification, anti-money-laundering compliance |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer service quality, dispute resolution, compliance records |
The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our customer support team, or participate in promotional activities. You are in control of what you share with us at each of these touchpoints.
When you access and use the rgtoto platform, certain technical and usage data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser fingerprinting data, and a record of your in-session activity. This automatic collection is necessary for platform security and fraud prevention.
In limited circumstances, we may receive data about you from trusted third-party sources, including identity verification partners (for KYC processing), payment processors and banking partners (for transaction authentication), and fraud prevention databases (to verify that your account and payment methods are not associated with known fraudulent activity). All third-party data sources are contractually bound to handle data in compliance with applicable privacy standards.
rgtoto uses the personal data we collect for the following specific, documented purposes:
rgtoto processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
We share personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors, identity verification partners, cloud infrastructure providers, live chat platform operators, and fraud analytics providers. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they are contracted to provide.
Certain game data (such as bet amounts and game session identifiers) may be transmitted to third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe — solely for the purpose of facilitating gameplay and computing results. These providers do not receive your full identity or financial data.
rgtoto may disclose personal data to law enforcement agencies, regulatory bodies, or courts of law when we are legally compelled to do so, or when we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of rgtoto, its players, or the public.
In the event of a merger, acquisition, or sale of all or part of rgtoto's business assets, your personal data may be transferred to the acquiring entity. We will notify affected players via email or a prominent platform notice before any such transfer takes effect, and the acquiring entity will be required to honor the terms of this Privacy Policy.
We retain personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account + 5 years after account closure (AML compliance) |
| Financial transaction records | 7 years from the date of transaction (regulatory requirement) |
| KYC documents | 5 years after account closure or last transaction |
| Customer support records | 3 years from the date of the interaction |
| Technical and usage logs | 13 months from collection date (rolling) |
| Marketing consent records | Until consent is withdrawn, then deleted within 30 days |
Once the applicable retention period has elapsed, personal data is securely deleted or permanently anonymized in accordance with our internal data disposal procedures.
rgtoto applies a layered approach to data security, combining technical, organizational, and procedural controls to protect your personal information against unauthorized access, loss, alteration, and destruction.
Our security measures include, but are not limited to:
Cookies are small text files placed on your device by our web server when you visit the rgtoto platform. They allow the platform to remember certain information about your session and preferences, making your experience more seamless and secure.
You may control and delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
As a registered player on rgtoto, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our Data Protection team at the email address listed in Section 16. We will respond to verified requests within 30 calendar days.
rgtoto strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect personal data from anyone who is not at least 21 years old. All new accounts are subject to age verification as part of the registration process and, where required, formal KYC documentation review.
If we become aware — through any means — that a player account belongs to someone under 21 years of age, we will immediately suspend the account, initiate deletion of all associated personal data, and report the matter to our compliance team for review. Any funds in such an account may be withheld in accordance with our Terms & Conditions.
rgtoto operates as an internationally licensed platform, which means that certain data processing activities — such as cloud hosting, identity verification, and game server operations — may involve the transfer of your personal data to servers or processors located outside Indonesia. In all such cases, we ensure that appropriate safeguards are in place, including:
By registering an account with rgtoto, you acknowledge and consent to the transfer of your personal data internationally as described in this section.
The rgtoto platform may contain references to third-party game studios, payment providers, or other services. While we take care to work only with reputable partners, rgtoto has no control over the privacy practices of external organizations and accepts no responsibility for how they handle your data. We encourage you to review the privacy policies of any third-party service you interact with independently of the rgtoto platform.
rgtoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes, we will notify registered players by email and post a prominent notice on the platform at least 7 days before the revised policy takes effect.
The date of the most recent revision is always displayed in the "Last Updated" notice at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the rgtoto platform following the effective date of any revision constitutes your acceptance of the updated terms.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please reach out to our Data Protection team. Our support agents are available 24/7 via live chat on the platform. For formal written data requests, please use the email address below. Note that this address is displayed as plain text and is not a clickable link.
Our dedicated support team is ready to answer any questions about how rgtoto handles your personal data. You can also review our full Terms & Conditions or visit our FAQ for quick answers to common questions.