At sbtoto, we treat your personal data with the same care and precision we apply to every aspect of our platform. This policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold as a player.
Last Updated: 1 January 2026Six core principles that underpin how sbtoto handles every piece of personal data entrusted to us.
All data transmitted between your device and the sbtoto platform is protected by industry-standard TLS/SSL encryption, ensuring that your personal and financial information cannot be intercepted in transit.
We collect only the personal data strictly necessary to operate your Account, process transactions, and comply with our legal obligations. We do not harvest surplus data for speculative future uses.
sbtoto does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your data belongs to you — we act as its custodian, not its owner.
Personal data is stored on hardened, access-controlled servers. We apply role-based access controls so that only authorised personnel with a genuine business need can access your records.
You have the right to access, correct, and — where applicable — request the deletion of your personal data. We respond to all verified data-subject requests within 30 days of receipt.
Promotional communications are entirely optional. You may withdraw consent for marketing emails or SMS messages at any time by contacting our support team or using the unsubscribe mechanism in each message.
Summary: This Privacy Policy ("Policy") describes how sbtoto ("Company", "we", "us", "our"), operating the platform at https://sbtoto.cam, collects, uses, discloses, and safeguards personal data provided by or collected from players ("you", "your") based primarily in Indonesia. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
sbtoto is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Policy has been written to be clear, comprehensive, and genuinely informative — not merely a legal formality. We encourage all players to read it in full before registering an Account.
This Policy applies to all personal data processed in connection with the sbtoto website, any mobile-optimised version of the site, and any communications (email, live chat, SMS) exchanged between you and our support team. It does not apply to the data practices of third-party websites that may be linked from our platform.
Where this Policy uses the term "personal data", it means any information that identifies or could reasonably be used to identify you as a specific individual — including your name, email address, phone number, Indonesian national ID number, bank account details, and device identifiers.
For the purposes of applicable data-protection law, sbtoto acts as the data controller in respect of the personal data you provide when registering and using our platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is conducted lawfully, fairly, and transparently.
Where we engage third-party service providers to process personal data on our behalf (for example, payment processors and KYC verification services), those parties act as data processors and are bound by contractual obligations that prohibit them from using your data for any purpose beyond the service they provide to us.
You can reach our data-protection contact at: [email protected]
The categories of personal data we collect, and the typical data points within each category, are set out in the table below:
| Category | Data Points Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, Indonesian National ID (KTP) number, passport number or driver's licence number (where provided for KYC). |
| Contact Data | Email address, Indonesian mobile phone number, residential address (city, province, postal code). |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history, Account balance history. |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, bonus usage, preferred game categories. |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, cookies and session tokens, time-zone setting (WIB/WITA/WIT), referring URL. |
| Communications Data | Records of live-chat transcripts, email correspondence with support, and any complaint or feedback submissions. |
| Verification Documents | Scanned or photographed copies of government-issued ID, proof-of-address documents, and payment-method ownership proofs submitted during KYC. |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records, or political opinions. If such data is inadvertently disclosed to us (for example, in a free-text support message), we will delete it promptly and will not process it.
We collect personal data through the following channels:
sbtoto uses your personal d ata for the following purposes:
Under internationally recognised data-protection principles, we must have a lawful basis for processing your personal data. sbtoto relies on the following legal bases:
sbtoto does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We do, however, share your data with carefully selected third-party service providers in the following circumstances:
All third-party processors are bound by data-processing agreements that require them to protect your data to the same standard that we apply, and to process it only for the specified purpose and under our instructions.
The sbtoto platform uses cookies and similar tracking technologies to enhance your experience, maintain session state, and collect analytics data. A cookie is a small text file stored on your device by your web browser.
Types of cookies we use:
You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the Platform from functioning correctly. Most browsers accept cookies by default; consult your browser's help documentation to learn how to block or delete cookies.
sbtoto retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or to comply with legal and regulatory retention obligations.
After the applicable retention period expires, personal data is securely deleted or anonymised such that you can no longer be identified from it.
sbtoto employs a multi-layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
Your role in security: While we take every reasonable precaution to secure your data, you play a critical role by keeping your login credentials confidential, using a strong unique password, and logging out of shared or public devices. Never share your password with anyone, including sbtoto support staff — we will never ask for it.
sbtoto's primary user base is in Indonesia, and we store your data on servers located within secure international data centres that comply with recognised data-protection standards. Some of our third-party service providers (payment processors, KYC services, game studios) may be located outside Indonesia and may process your data in their own jurisdictions.
Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to the same standard required within Indonesia. These safeguards include:
By using the sbtoto platform, you acknowledge and consent to the international transfer of your personal data as described in this section.
Under applicable data-protection principles, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 days of verifying your identity. In complex cases, we may extend this period by a further 30 days and will notify you of the extension.
You also have the right to lodge a complaint with a supervisory data-protection authority if you believe we have processed your personal data unlawfully.
The sbtoto platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from, or market our services to, individuals under the age of 21.
If we become aware that a person under 21 has registered an Account and provided personal data, we will immediately suspend the Account, void any associated bets, and delete the personal data as quickly as possible. If you believe a minor has accessed the Platform, please notify us immediately at [email protected].
The sbtoto platform may contain links to third-party websites, such as payment-provider portals or social-media pages. This Privacy Policy applies only to personal data processed by sbtoto; we are not responsible for the privacy practices or content of external websites.
Before providing personal data to any third-party website, we recommend that you review that site's privacy policy. We make no representations or warranties regarding the data practices of third-party sites.
sbtoto reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or technological capabilities. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, provide notice via email or a prominent Platform announcement.
We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an amended Policy constitutes acceptance of the changes. If you do not agree with any amendment, you must cease using the Platform and may request Account closure.
If you have any questions, concerns, or complaints about this Privacy Policy or our data-protection practices, please contact us at:
If you are dissatisfied with our response or believe we have processed your personal data unlawfully, you have the right to lodge a complaint with your local data-protection supervisory authority. We would, however, appreciate the opportunity to address your concerns directly before you approach a regulatory body.
Review our Terms & Conditions for the full legal framework, check our FAQ for quick answers, or visit the Responsible Gaming page to learn about our player-protection tools.