h8toto Privacy Policy
This page describes what we collect when you use h8toto and how we keep that data protected. We gather information to operate our platform, process your payments, comply with regulations, and improve your experience. We do not sell your data to marketers. We do not share account details with external parties without your consent. Our servers may sit outside your jurisdiction, but we encrypt all sensitive information and restrict access to authorized staff only.
h8toto serves players across Indonesia—Jakarta, Surabaya, Bandung, Medan, and Semarang—using payment methods including DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet. Each payment processor handles your financial data according to their own privacy standards, which we detail below. You retain the right to access, correct, or delete your personal data subject to regulatory holds for settlement disputes or withdrawal reversal documentation.
We update this policy periodically to reflect operational changes or legal requirements. Material changes are announced via email at least thirty days before they take effect.
What Data We Collect and Why
When you open an h8toto account, we collect your email address, phone number, full name, and date of birth for identity verification. We also request a national ID photo and proof of address (utility bill or government-issued document) to comply with anti-money-laundering regulations. We store these documents securely and retain them for seven years per financial compliance standards, then delete them automatically unless a dispute requires longer retention.
h8toto records every transaction: bets placed, settlements, deposits, withdrawals, and balance changes. This data allows us to generate your account statement, process refunds, investigate disputes, and detect fraudulent activity. Transaction records are retained for ten years to satisfy regulatory audit requirements. We also log your login times, device type, and IP address to protect your account against unauthorized access and to track suspicious patterns (e.g., multiple logins from distant geographies in seconds).
h8toto Data Collection Summary
- Identity: name, email, phone, date of birth, government ID, proof of address.
- Financial: payment method, deposit and withdrawal history, account balance.
- Behavioral: login times, device type, IP address, pages visited, time spent on h8toto features.
- Communication: support tickets, email correspondence, chat logs if you contact our team.
- Retention: identity documents (7 years), transactions (10 years), activity logs (2 years).
How We Use Your Data
h8toto uses your data for five primary purposes. First, account administration: we verify your identity, manage your balance, process deposits and withdrawals, and generate statements. Second, legal compliance: we submit transaction records to financial authorities, detect money-laundering patterns, and respond to regulatory inquiries. Third, fraud prevention: we scan for suspicious betting patterns, account-takeover attempts, and collusion between accounts. Fourth, customer support: we review your account history when you contact us about disputed settlements or payment issues. Fifth, platform improvement: we analyze aggregate, anonymized usage data to optimize our live-dealer studios, sportsbook markets, and payment integration.
We do not use your data to build marketing profiles or sell contact lists to third parties. We do not track you across other websites. We do not use your data for algorithmic targeting unrelated to h8toto's core service. If you opt into promotional emails, we send only h8toto-related announcements (tournament calendars, maintenance notices, policy updates), and you can unsubscribe at any time via a link in each email.
Payment Processors and Third-Party Services
When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, those payment processors collect and store your card or account details. h8toto receives only transaction confirmation (amount, timestamp, success/failure status) but never sees your full payment card number. Each payment processor maintains their own privacy policy, and we recommend reviewing those policies before depositing.
h8toto also contracts with specialized vendors for anti-fraud screening, identity verification, and data encryption. These vendors process your data only as instructed by h8toto and are contractually obligated to maintain confidentiality. We do not permit vendors to use your data for their own marketing purposes.
Your Rights and Data Access on h8toto
You have the right to access all personal data we hold about you. Submit a request to h8toto support with the subject "Data Access Request," and we will compile your information within fourteen business days. You can also request correction of inaccurate data (e.g., if your address is outdated) or deletion of non-essential information. We will honor deletion requests except where retention is legally required—e.g., identity documents retained for anti-money-laundering compliance, or transaction records needed for dispute resolution.
If you request account closure, we delete all non-regulatory data within thirty days. Identity documents and transaction records are retained per our compliance schedule, then destroyed. Closed accounts cannot be reopened; you must create a new account if you wish to return to h8toto.
Cookies and Device Tracking on h8toto
h8toto uses cookies and similar tracking technology to maintain your login session, remember your preferences (e.g., dark mode), and measure page load times for performance optimization. These cookies are strictly necessary for h8toto to function—without them, you would need to log in each time you visit. We do not use cookies to track you across unrelated third-party websites or to build advertising profiles.
You can disable cookies in your browser settings, but this may prevent h8toto from functioning properly (e.g., you may be logged out unexpectedly or unable to complete deposits). We do not offer a cookie consent banner because all h8toto cookies serve a functional purpose tied to your account security and platform usability, not marketing.
Data Security and Encryption
h8toto encrypts all sensitive data in transit using TLS 1.2 or higher. Payment card information is encrypted at rest on secured servers. Identity documents are stored on restricted-access databases with role-based permissions—only compliance staff can access identity data, and only support staff can access account history. We do not log passwords; we store hashed password digests that cannot be reversed.
Our servers are hosted on cloud infrastructure with automatic backups and disaster-recovery protocols. If a data breach occurs, we notify affected users within forty-eight hours and cooperate with relevant authorities. We maintain cyber insurance to cover breach-related costs and customer notification expenses.
International Data Transfers and Jurisdiction
h8toto's servers may be located outside Indonesia. When you provide data to h8toto, you understand that your information may be transferred to, and stored in, countries with different data-protection laws. We apply equivalent safeguards (encryption, access controls, audit trails) to protect your data regardless of server location. If you do not consent to international transfer, you should not use h8toto.
h8toto is not subject to Indonesian data-protection law but follows industry-standard security practices. Disputes about data handling are resolved per our Terms and Conditionswhich may involve dispute resolution outside Indonesia. By using h8toto, you accept these terms.
Children and Underage Users
h8toto does not knowingly collect data from users under the age of legal gambling eligibility in their jurisdiction. If we become aware that a minor has opened an account, we will close it immediately and delete all associated data except transaction records retained for compliance. We recommend that parents monitor their children's online activity to prevent unauthorized access to h8toto.
Contact Us and Policy Updates
If you have questions about h8toto's privacy practices or wish to exercise your data rights, contact our support team via email or in-app support chat. We respond to privacy requests within fourteen business days. For data-access requests, we may ask for identity verification to ensure we release information only to the account holder.
h8toto reviews this privacy policy annually and updates it as necessary to reflect changes in our service, legal requirements, or security practices. We announce major changes via email at least thirty days before they take effect. Continued use of h8toto after a policy update constitutes your acceptance of the new terms. If you disagree with policy changes, you may request account closure per the procedure outlined above.
This privacy policy is effective as of the last update date shown on the h8toto website. Earlier versions are available upon request. We also maintain a Terms and Conditions page that covers account rules, settlement disputes, and user obligations. Together, these documents form the complete legal agreement between you and h8toto. If any conflict arises between this privacy policy and the terms, the terms take precedence regarding account conduct, while this policy governs data handling specifically.