hia toto Platform Privacy Notice

This page describes what we collect when you use hia toto and how we keep that data protected. We take your privacy seriously and comply with data protection standards in all jurisdictions where we operate. When you create an account, deposit funds, or play on our platform, we collect personal information necessary to verify your identity, process payments, and deliver our service securely.

We do not sell your data to third parties. We use your information only to operate hia toto, prevent fraud, comply with legal obligations, and improve your experience. Our servers may sit outside your jurisdiction, but all data is encrypted in transit and at rest. You have the right to access, correct, or request deletion of your personal data subject to legal retention requirements.

If you have questions about how we handle your information, contact our support team via email or in-app chat.

Data we collect on hia toto

We collect your email address, phone number, and a secure password when you register. Before your first withdrawal, we require identity verification—your full name, date of birth, government ID number, and a photo of your ID document. We also collect proof of address such as a utility bill or bank statement. This information is mandatory under anti-money-laundering regulations and protects your account from unauthorized access.

When you use hia toto, we log your login times, IP address, device type, and browser information. We record all deposits, withdrawals, and gameplay activity. We collect payment information from your chosen method—DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank account details. We do not store full credit card numbers; payment processors handle that data directly.

How we use your data on hia toto

We use your personal data to verify your identity, process deposits and withdrawals, and prevent fraud. We analyze gameplay patterns to detect suspicious activity and protect your account. We may contact you via email or SMS to confirm large withdrawals, notify you of account changes, or alert you to unauthorized login attempts. We use your data to comply with legal and regulatory requirements in your jurisdiction and ours.

We do not use your data for marketing unless you opt in. We do not share your information with third parties except payment processors, identity verification services, and legal authorities when required by law. Our payment partners (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive only the information necessary to process your transaction.

Your rights on hia toto

You have the right to access all personal data we hold about you. You can request a copy of your account information, transaction history, and gameplay data by contacting our support team. We will provide this information within 10 business days. You also have the right to correct any inaccurate information in your account.

You may request deletion of your account and associated data, subject to legal retention requirements. We must retain transaction records for anti-money-laundering compliance, typically for 5–7 years. You can update your contact preferences at any time—opt out of email notifications, disable SMS alerts, or request that we do not use your data for analytics. To exercise any of these rights, contact our support team with your account details.

1. Request your data

   Email our support team to receive a copy of all personal information we hold.

2. Correct inaccuracies

   Update your name, address, or contact details in your account settings.

3. Opt out of communications

   Disable email and SMS notifications in your account preferences.

4. Request account deletion

   Close your account; we retain transaction records as required by law.

Data security and retention on hia toto

We encrypt all personal data using industry-standard TLS encryption in transit and AES-256 encryption at rest. Our servers are protected by firewalls, intrusion detection, and regular security audits. We limit access to your data to authorized staff only. We do not store passwords in plain text; we use salted hashing to protect them. If we detect a data breach, we notify affected users and relevant authorities within the timeframe required by law.

We retain your personal data for as long as your account is active. After you close your account, we retain transaction records for 5–7 years to comply with anti-money-laundering regulations. We delete other personal data within 90 days unless we are required by law to retain it longer. Your gameplay data and account history remain accessible in our Result Archive for your reference.

Third-party processors and hia toto

We work with payment processors, identity verification services, and hosting providers to operate hia toto. These third parties process your data only on our behalf and are bound by confidentiality agreements. Payment processors in Jakarta, Surabaya, Bandung, Medan, and Semarang handle your DANA, e-wallet, mobile banking, local payment, online payment, and e-wallet transactions. Identity verification services confirm your government ID and proof of address. Our hosting provider stores encrypted backups of your account data.

We do not control how these third parties handle your data beyond our contractual requirements. We recommend reviewing their privacy policies if you want to understand their practices. We are responsible for ensuring they meet our security standards.

Jurisdiction and contact on hia toto

We operate hia toto in supported jurisdictions only. Our services are available only where local law permits. Users are responsible for verifying that access complies with their own jurisdiction's regulations. Our data handling practices comply with applicable data protection laws in the jurisdictions where we operate.

If you have questions about this privacy notice or how we handle your data, contact our support team via email or in-app chat. We respond to privacy inquiries within 5 business days. For formal data subject requests, include "Data Request" in your subject line and provide your account details.