dvtoto is committed to handling your personal data with transparency, integrity, and the highest security standards. This Privacy Policy explains precisely what data we collect, why we collect it, how we use it, and the rights you hold as a Member.
We collect only the personal data necessary for account registration, KYC verification, payment processing, and service improvement.
All data is encrypted in transit and at rest. Access is restricted on a strict need-to-know basis and reviewed regularly by our security team.
We never sell your data. Sharing is limited to licensed payment partners (BCA, OVO, DANA, etc.) and regulatory bodies where required by law.
You have the right to access, correct, restrict, and request deletion of your personal data at any time by contacting our support team.
dvtoto ("we", "us", "our") operates the online betting platform accessible at https://dvtoto.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses, registers with, or uses our Platform (collectively referred to as "you" or "the Member").
This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed. It applies to all Members and visitors regardless of the device or method used to access the Platform, and it supplements rather than replaces the Terms & Conditions governing your use of dvtoto.
dvtoto primarily serves users located in Indonesia. We recognise and respect the sensitivity of personal data in the context of online gambling, and we have designed our data practices accordingly — collecting only what is necessary, retaining it only for as long as required, and protecting it at every stage of its lifecycle.
Your Consent: By creating an account on dvtoto or by continuing to use the Platform after this Privacy Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person — including name, email address, date of birth, national identification number, financial details, and IP address. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction. |
| "Data Controller" | dvtoto, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third-party service provider that processes personal data on behalf of dvtoto — including payment processors, KYC verification providers, and infrastructure providers. |
| "Cookies" | Small text files placed on your device by the Platform to store session information, preferences, and usage analytics. |
| "KYC Data" | Identity and address verification documents submitted as part of the Know Your Customer process, including national ID (KTP), passport, and bank account confirmation. |
| "Special Category Data" | Sensitive personal data such as health information, religious affiliation, or biometric data — dvtoto does not intentionally collect special category data unless strictly required by law. |
dvtoto collects personal data in the following categories. We collect only the minimum data necessary to deliver the services described in our Terms & Conditions:
What We Do Not Collect: dvtoto does not intentionally collect special category data such as religious affiliation, political opinions, or health information. We do not collect payment card numbers directly — all card transactions (Visa, Mastercard) are processed by certified payment gateway partners who are PCI-DSS compliant, meaning full card data never passes through dvtoto's systems.
dvtoto collects personal data through the following channels:
dvtoto processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection principles:
| Purpose | Legal Basis |
|---|---|
| Account registration and maintenance | Performance of contract — your account is necessary to use the Platform |
| KYC verification and anti-money-laundering (AML) compliance | Legal obligation — we are required to verify identity under international AML standards |
| Processing deposits, withdrawals, and refunds | Performance of contract and legitimate interest in maintaining accurate financial records |
| Delivering betting markets, casino games, and promotional offers | Performance of contract — these are the core services you registered for |
| Providing customer support | Performance of contract and legitimate interest in resolving queries efficiently |
| Enforcing responsible gaming limits and self-exclusion | Legal obligation and legitimate interest in protecting player welfare |
| Fraud prevention and security monitoring | Legitimate interest in protecting our systems and Members from fraudulent activity |
| Analytics and platform improvement | Legitimate interest in optimising user experience and service quality |
| Sending promotional communications (where opted-in) | Consent — you may opt out at any time via account settings or email unsubscribe links |
| Compliance with regulatory requests and legal proceedings | Legal obligation |
dvtoto uses cookies and similar tracking technologies to enhance user experience, maintain session continuity, and collect anonymised analytics. Cookies are categorised as follows:
Most modern browsers allow you to block or delete cookies via settings. However, blocking strictly necessary cookies may prevent you from accessing certain Platform features. For guidance on managing cookies, consult your browser's help documentation (Chrome, Firefox, Safari, Edge all provide granular cookie controls).
dvtoto does not sell, rent, or trade your personal data to third parties. We share data only where strictly necessary for the purposes set out in Section 5, and only with trusted partners who are contractually obligated to handle data securely. Data may be shared with:
No Marketing Data Sales: dvtoto will never sell or share your email address, phone number, or betting history with advertising networks, data brokers, or unrelated third parties for marketing purposes.
dvtoto's servers and primary data processing infrastructure are located in secure, internationally certified data centres. Some of our third-party service providers (including game studios and analytics platforms) may be located outside Indonesia. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:
By using the Platform, you acknowledge and consent to the international transfer of your personal data under these safeguards. If you have concerns about specific data transfers, you may contact our data protection team at the email address provided in Section 15.
dvtoto retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Registration data (name, email, DOB, address) | Duration of Account + 7 years following Account closure (AML compliance requirement) |
| KYC documents | Duration of Account + 7 years (regulatory obligation) |
| Transaction history and bet records | 7 years following the date of the last transaction (financial record-keeping requirement) |
| Support tickets and chat transcripts | 3 years from ticket closure date |
| Marketing consent records | Until consent is withdrawn + 1 year for audit trail purposes |
| Technical logs (IP address, session data) | 90 days (anonymised aggregates may be retained indefinitely for analytics) |
| Self-exclusion records | Permanent retention to prevent future re-registration during exclusion periods |
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Backups containing personal data are also purged in accordance with our data lifecycle policy.
As a Member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]:
We will respond to all rights requests within 30 days. Where requests are manifestly unfounded or excessive, we may charge a reasonable administrative fee or refuse the request, providing clear justification for doing so.
dvtoto strictly prohibits use of the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from minors. Our registration form requires explicit date-of-birth disclosure, and age verification is performed during the KYC process.
If we discover that personal data has been inadvertently collected from a minor, we will delete that data immediately and permanently close the associated Account. If you believe a minor has accessed dvtoto, please contact us immediately at [email protected].
Parental Responsibility: Parents and guardians are reminded that it is their responsibility to monitor and restrict their children's internet usage. We recommend enabling parental control software and device-level restrictions to prevent minors from accessing gambling websites.
dvtoto employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. Our security framework includes:
While we take every reasonable precaution, no system is entirely immune to attack. You can protect your account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with third parties.
The dvtoto Platform may contain links to third-party websites — including payment processor login pages, game studio information pages, and responsible gaming resources. This Privacy Policy applies only to data collected by dvtoto. We are not responsible for the privacy practices or content of third-party websites.
When you follow a link to a third-party site, you are subject to that site's own privacy policy. We recommend reviewing the privacy policy of any external site before providing personal information. dvtoto does not endorse or assume liability for third-party sites linked from the Platform.
dvtoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will notify Members by:
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated terms, you must cease using the Platform and may request Account closure and data deletion by contacting support.
We encourage Members to review this page periodically to stay informed about how we are protecting your personal data. The current version is always available at dvtoto.cam/privacy-policy.
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact dvtoto's data protection team:
Email: support@dvtoto.cam
Subject Line: "Privacy Inquiry — [Your Account Username]"
Our team responds to all data protection enquiries within 48 hours during normal business days (Monday to Friday, excluding Indonesian public holidays including Idul Fitri, Idul Adha, and Nyepi). For urgent account security matters, live chat support is available 24/7 directly on the Platform.
You may also refer to our FAQ page for answers to common questions about account security, KYC verification, and data retention policies. For matters specifically relating to your Terms & Conditions or Responsible Gaming tools, please visit those dedicated pages.
Beyond the legal framework, here is how our engineering and compliance teams deliver privacy protection every single day.
We collect only what we need to operate the Platform legally and securely. No excessive profiling, no behavioural advertising beyond dvtoto's own promotional campaigns, and no sharing with data brokers.
From the moment you enter your password to the storage of your KYC documents, every byte of sensitive data is encrypted with 256-bit AES. Even our own database administrators cannot view plaintext passwords or card details.
Our systems automatically flag and purge expired data in accordance with the retention schedule in Section 9. No manual intervention required — privacy by design, built into every data pipeline.
Promotional emails include a one-click unsubscribe link. Account-level marketing preferences can be toggled off instantly via your settings dashboard. No waiting periods, no retention of opted-out data for "soft marketing".
dvtoto engages independent security researchers quarterly to conduct penetration tests on our infrastructure, APIs, and application logic. All identified vulnerabilities are patched within 48 hours of discovery.
Exercise your right to data portability with a single click. Request a machine-readable export of all your registration data, transaction history, and communications logs — delivered to your registered email within 7 business days.
If you have specific questions about how dvtoto handles your personal information, our FAQ covers data-related topics in plain English. You can also review our full Terms & Conditions or reach out directly to our support team.