bukatoto Privacy Policy

This page describes what we collect when you use bukatoto and how we keep that data protected. We at bukatoto take your privacy seriously; we collect personal information only to operate your account, process payments, comply with local law, and prevent fraud. We do not sell your data to marketers, and we restrict access to authorized staff only.

When you register on bukatoto, you provide your email, phone number, and identity details. When you deposit or withdraw, your payment method details are transmitted securely to your chosen payment processor (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet). When you place stakes on football, live dealer games, slots, or esports markets, we log your gameplay and bet history so we can settle outcomes correctly and calculate your tier progression and promotion eligibility.

Our privacy practices are transparent: we describe what data we collect, why we collect it, who can access it, how long we keep it, and what rights you have over your information. If you have questions about your data or wish to exercise your privacy rights, contact our support team.

What Data We Collect on bukatoto

We collect personal data in three categories: registration data, transaction data, and gameplay data. Registration data includes your full name, email address, phone number, date of birth, and address. We collect this when you create your bukatoto account and verify your identity. We require registration data to comply with anti-money-laundering regulations and to prevent duplicate accounts and fraud.

Gameplay data includes every bet you place, every game session, every withdrawal attempt, and every promotion you claim on bukatoto. We log which football markets you stake on during Liga 1 or Piala AFF, which live blackjack or baccarat tables you join, which slot titles or esports markets you play, and how much you wagered and won on each. This data is essential for calculating settlement, tracking tier progression, and determining promotion eligibility.

We also collect device and network data automatically: your browser type, IP address, device operating system (Android or iOS), and cookies. We use this data to detect fraud, prevent account takeover, and optimize bukatoto's platform performance across different devices and networks.

Data We Do Not Collect

We do not collect health or biometric data, religious or political beliefs, or criminal history unless you voluntarily provide it (e.g., in a support chat). We do not use facial recognition or behaviour profiling to track your real-world movements. We do not scan your contacts or location data. We do not record your microphone or camera unless you explicitly grant permission during live support calls.

How We Use Your Data on bukatoto

We use your data for four main purposes: account management, payment processing, regulatory compliance, and fraud prevention. Account management includes storing your login credentials securely, calculating your tier rank, tracking your promotion eligibility, and processing your withdrawal requests. Payment processing involves sending your deposit and withdrawal instructions to your payment provider and confirming receipt of funds in your bukatoto balance.

Regulatory compliance requires us to verify your identity, confirm you are using bukatoto from a jurisdiction where our services are legal, and report suspicious transactions to financial authorities if required. Fraud prevention involves analyzing your account for duplicate logins, unusual payment patterns, bonus abuse, or collusion with other users. If we detect suspicious activity, we may freeze your account pending investigation or close it permanently if violations are confirmed.

We use your gameplay and transaction data to settle bets accurately and calculate your tier progression. We do not use your data for marketing or profiling you for third-party advertisers. We do not sell your email to mailing lists or your phone number to telemarketing services. If you opt in to promotional emails, we send information only about bukatoto promotions, seasonal campaigns around Liga 1 or Piala Indonesia, or Idul Fitri or Idul Adha bonuses—not about unrelated products.

Account management

Login, tier tracking, promotion eligibility, withdrawal processing tied to your registered payment methods.

Payment processing

Transmission of deposit and withdrawal instructions to mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and Indonesian banks.

Regulatory compliance

Identity verification, jurisdiction check, suspicious activity reporting to financial authorities.

Fraud prevention

Detection of duplicate accounts, payment fraud, bonus abuse, and account takeover attempts.

Where We Store Your Data

We store your personal data on secure servers operated by our cloud infrastructure provider. Our servers are located outside Indonesia; specifically, in data centres that comply with international security standards. We encrypt your data both in transit (when you send information to bukatoto) and at rest (when data sits on our servers). Encryption uses TLS 1.3 for transmission and AES-256 for storage, which are industry-standard security protocols.

Your data is accessible only to bukatoto staff with a legitimate business need—for example, our support team accesses your account details when you contact us with a question, and our compliance team reviews transaction data to detect fraud. We do not grant access to third-party marketers, data brokers, or external advertisers. We maintain access logs and audit trails so we can detect unauthorized access attempts.

Third Parties and Data Sharing

We share your data with third parties only when necessary for payment processing and regulatory compliance. Your payment processor (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receives your transaction data to process your deposit or withdrawal. These payment providers have their own privacy policies; we recommend reviewing them to understand how they handle your banking information.

We may be required to share your data with local financial authorities, anti-money-laundering agencies, or law enforcement if we receive a lawful legal request (subpoena, court order, or regulatory inquiry). In such cases, we will provide only the minimum data required to satisfy the request unless we are legally prohibited from notifying you.

We do not share your data with advertisers, data aggregators, or marketing platforms. We do not use your email or phone number for third-party promotions. We do not combine your bukatoto data with external datasets for profiling.

We at bukatoto protect your personal data with encryption, access controls, and strict limits on sharing—your privacy is not a marketing asset.

Data Retention and Deletion

We retain your personal data as long as your bukatoto account is active, plus a retention period after closure for regulatory and dispute-resolution purposes. Typically, we keep account registration data (name, email, phone) for seven years after account closure to comply with anti-money-laundering regulations and to respond to potential regulatory inquiries about historical transactions. We retain gameplay and transaction logs indefinitely so you can access your account history and dispute outcomes if needed.

If you request deletion of your account on bukatoto, we will close your account immediately, refund any remaining balance to your registered payment method, and mark your personal data as deleted in our primary systems. However, we retain backup copies of historical transaction data (in encrypted form) for compliance purposes and will not use that data for any new purpose. You can request a copy of all your personal data before deletion by contacting support.

Cookies and Tracking

We use cookies on bukatoto to maintain your login session, remember your preferences, and detect fraud. Session cookies expire when you log out; persistent cookies last up to one year and help us recognize you on your next visit. We do not use cookies to track your behaviour outside bukatoto or to build advertising profiles. Third-party analytics tools (if present) may set their own cookies subject to their privacy policies; you can disable these via your browser settings.

Your Privacy Rights

You have the right to request a copy of all personal data we hold about you on bukatoto. You have the right to request correction of inaccurate data (e.g., if your registered address is outdated). You have the right to request deletion of your data (subject to compliance retention requirements). You have the right to opt out of promotional emails—you can do this via your account settings or by contacting support. To exercise any of these rights, contact our support team with your full name, account email, and specific request. We will respond within 14 days.

Contact and Updates

If you have questions about this privacy policy, wish to exercise your privacy rights, or suspect your data has been compromised, contact bukatoto support via live chat, email, or in-app messaging. We maintain response standards during extended hours. If our privacy practices change, we will notify you via email and your account dashboard. Continued use of bukatoto after notification of changes constitutes acceptance of the updated policy.

We at bukatoto are committed to transparent, secure data handling. We collect only what is necessary, protect it with industry-standard encryption, and share it only when required by law or essential for service delivery. We do not treat your data as a commodity for sale or profiling.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their jurisdiction's law. We do not offer our services in jurisdictions where online wagering is prohibited.