dwtoto is committed to protecting the privacy and personal data of every Member. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you hold over your own data. Please read this document carefully before registering an account.
Every session on dwtoto — from login through to payment processing — is protected by industry-standard 256-bit SSL encryption. Data transmitted between your device and our servers cannot be intercepted or read by third parties.
dwtoto does not sell, rent, or trade your personal data to external parties for marketing purposes — ever. Any data shared with third-party service providers (payment processors, game studios, KYC verifiers) is governed by strict data-processing agreements that limit use to the specific service in question.
As a dwtoto Member, you have the right to access, correct, restrict processing of, and request deletion of your personal data at any time. Submit a data-rights request via our support team and we will respond within 30 days. Certain retention obligations may apply under compliance law.
dwtoto uses only essential functional cookies required to keep your session active, remember language preferences, and maintain security tokens. We do not deploy third-party advertising cookies or behavioral tracking pixels. You may clear cookies at any time via your browser settings without affecting core Platform functionality.
Member data is stored on access-controlled, encrypted servers hosted in secure data centers. Access to personal data is restricted on a strict need-to-know basis. dwtoto conducts regular internal security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
Members may opt out of promotional communications — including bonus announcements, event alerts, and seasonal offers — at any time by updating notification preferences in the account dashboard or by contacting our support team. Transactional and security notifications (withdrawal confirmations, password resets) cannot be disabled.
Summary Notice: This Privacy Policy governs how dwtoto collects and processes your personal data. By registering an account on dwtoto, you acknowledge that you have read and understood this policy. This policy should be read alongside our Terms & Conditions. If you have any questions, contact our support team at [email protected].
dwtoto ("we", "us", "our", "the Platform") is an internationally operated online betting and gaming platform serving English-preference players across Indonesia. We understand that privacy is a fundamental concern for our Members, and we are committed to handling all personal data responsibly, transparently, and in accordance with internationally recognized data-protection principles.
This Privacy Policy applies to all personal data collected by dwtoto through its website at dwtoto.cam, any associated mobile-optimized pages, and all communication channels including live chat, email, and WhatsApp support. It applies to registered Members, applicants who have commenced but not completed the registration process, and visitors to the Platform who have not registered an account.
dwtoto processes personal data for the purposes of operating the betting platform, verifying Member identities (KYC), processing deposits and withdrawals, preventing fraud and money laundering, delivering customer support, and meeting applicable compliance obligations. Each of these purposes is explained in full in the sections below.
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could be used to identify a living individual, directly or indirectly — including name, date of birth, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, transmission, deletion, or destruction. |
| "Controller" | dwtoto, as the entity that determines the purposes and means of processing Member Personal Data. |
| "Processor" | A third party that processes Personal Data on behalf of dwtoto, such as payment processors (BCA, BRI, OVO, DANA, etc.), KYC verification providers, and cloud infrastructure providers. |
| "Member" | Any individual who has registered and been approved to hold an account on the dwtoto Platform. |
| "KYC" | Know Your Customer — the identity and age verification process dwtoto uses to confirm Member eligibility before permitting withdrawals and certain account features. |
| "Sensitive Data" | A subset of Personal Data warranting heightened protection: government-issued ID numbers, financial account details, biometric data, and health information relating to problem gambling. |
dwtoto collects the minimum Personal Data necessary to operate a safe, compliant, and personalized betting platform. The categories of data we collect are described below:
3.1 Registration Data
3.2 Identity Verification (KYC) Data
3.3 Financial Transaction Data
3.4 Betting & Gaming Activity Data
3.5 Technical & Device Data
3.6 Communications Data
dwtoto collects Personal Data through the following channels and methods:
dwtoto processes your Personal Data only for clearly defined, legitimate purposes. The table below maps each processing activity to its specific purpose and the data categories involved:
| Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Registration Data, Technical & Device Data |
| Age and identity verification (KYC) | Registration Data, KYC Data |
| Processing deposits and withdrawals | Registration Data, KYC Data, Financial Transaction Data |
| Settling wagers and calculating winnings | Betting & Gaming Activity Data, Financial Transaction Data |
| Fraud detection and anti-money-laundering compliance | All categories — assessed by automated risk systems |
| Delivering customer support | Registration Data, Communications Data, Betting & Gaming Activity Data |
| Responsible gaming monitoring and interventions | Betting & Gaming Activity Data, Communications Data, Financial Transaction Data |
| Sending transactional notifications (withdrawal confirmations, security alerts) | Registration Data, Financial Transaction Data |
| Sending promotional communications (opt-in only) | Registration Data, Betting & Gaming Activity Data, Communications Data |
| Platform security, penetration testing, and incident response | Technical & Device Data, Registration Data |
| Internal analytics and product improvement | Technical & Device Data, Betting & Gaming Activity Data (aggregated and anonymized) |
dwtoto does not process Personal Data for any purpose other than those listed above without first obtaining your explicit consent or as otherwise required by applicable law.
dwtoto relies on the following legal bases when processing your Personal Data:
7.1 dwtoto does not sell, rent, or share your Personal Data with third parties for their own marketing purposes. Personal Data is disclosed to third parties only in the following circumstances:
7.2 In the event of a business restructuring, merger, or acquisition of dwtoto, Member Personal Data may be transferred to the successor entity. Members will be notified of any such transfer at least 30 days in advance, and the successor entity will be bound by the same privacy obligations set out in this policy.
8.1 dwtoto retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply as a general guide:
| Data Category | Standard Retention Period |
|---|---|
| Registration & Account Data | Duration of active account plus 5 years after account closure |
| KYC Documents | Duration of active account plus 5 years after account closure (AML compliance requirement) |
| Financial Transaction Records | 7 years from transaction date (financial record-keeping obligation) |
| Betting & Gaming Activity Data | 5 years from the date of activity |
| Support Communications | 3 years from the date of the interaction |
| Technical & Device Logs | 12 months on a rolling basis |
| Marketing Preference Records | Until you opt out, plus 1 year thereafter as evidence of consent history |
8.2 When Personal Data is no longer required for any active purpose and the applicable retention period has expired, dwtoto will securely delete or irreversibly anonymize the data. Anonymized, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and research purposes.
dwtoto implements a layered security architecture to protect Member Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:
While dwtoto takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely immune to risk. Members are strongly encouraged to use a unique, strong password for their dwtoto account and to enable any available two-factor authentication features.
10.1 dwtoto uses a minimal set of cookies and local storage technologies that are strictly necessary for the Platform to function correctly. We do not use third-party advertising cookies, behavioral tracking pixels, or cross-site tracking technologies.
10.2 The cookies currently in use on dwtoto are:
| Cookie Name / Type | Purpose | Duration |
|---|---|---|
| Session Authentication Token | Maintains your logged-in state across page navigations. Required for Platform access. | Session (deleted on browser close) |
| CSRF Protection Token | Prevents cross-site request forgery attacks on account actions. | Session |
| Language/Display Preference | Stores your display preferences so they persist between visits. | 12 months |
| Security Fingerprint | Assists in detecting suspicious login activity from unrecognized devices. | 30 days |
10.3 You may delete all cookies stored by dwtoto at any time via your browser's settings. Deleting the session authentication token will log you out of the Platform. Deleting preference cookies may reset your display settings. No other Platform functionality will be affected.
Exercise Your Rights: To submit a data-rights request of any kind, contact our support team via live chat or at [email protected]. We will acknowledge your request within 5 business days and provide a full response within 30 days.
As a Member of dwtoto, you hold the following rights with respect to your Personal Data. These rights may be subject to certain limitations where dwtoto has a legal obligation to retain or continue processing your data:
12.1 dwtoto strictly prohibits the use of the Platform by anyone under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age. Age verification is a mandatory step at both the registration stage and the first withdrawal request.
12.2 Where dwtoto has reasonable grounds to suspect that a Member may be under 21, the account will be immediately suspended pending age verification. If verification confirms that the Member is underage, the account will be permanently closed, all associated Personal Data will be securely deleted (subject only to any mandatory retention obligations), and any deposited funds will be returned to the payment method of origin.
12.3 If you are a parent or guardian and believe that a minor in your care has registered an account on dwtoto without your knowledge, please contact our support team immediately. We will investigate promptly and take all appropriate steps to close the account and delete the minor's Personal Data.
13.1 dwtoto is an internationally operated platform. Some of the third-party processors we engage — including cloud infrastructure providers and game content studios — may process data in jurisdictions outside Indonesia. Where such transfers occur, dwtoto ensures that appropriate safeguards are in place to protect your Personal Data to a standard at least equivalent to that described in this Privacy Policy.
13.2 Safeguards used for international data transfers may include: contractual data-processing agreements incorporating standard data-protection clauses; transfers to processors located in jurisdictions recognized as providing an adequate level of data protection; and technical encryption measures that protect data in transit regardless of the jurisdiction it passes through.
13.3 You may request details of the safeguards applied to any specific international transfer by contacting our support team.
14.1 dwtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, changes in applicable law, or changes to the Platform's features and services. The "Last Updated" date at the top of this page will be revised whenever a material change is made.
14.2 Where changes are material — meaning they significantly affect how your Personal Data is collected, used, or shared — dwtoto will provide at least 14 days' prior notice by publishing a prominent notice on the Platform homepage. Where practicable, we will also send a notification to your registered email address.
14.3 Your continued use of the dwtoto Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any changes, you must cease using the Platform and may request voluntary account closure in accordance with the Terms & Conditions.
14.4 The current version of this Privacy Policy is always accessible at dwtoto.cam/privacy-policy.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way dwtoto processes your Personal Data, please contact our support team through any of the following channels:
15.2 Data Rights Requests. To exercise any of the rights described in Clause 11, please contact our support team and clearly state the nature of your request. We will acknowledge all data-rights requests within 5 business days and provide a substantive response within 30 days. Where a request is complex or where you have submitted multiple concurrent requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.
15.3 Complaints. If you are not satisfied with the way dwtoto has handled your Personal Data or responded to a data-rights request, you have the right to lodge a complaint. dwtoto takes all privacy complaints seriously and will investigate thoroughly. Please submit complaints in writing to [email protected] with the subject line "Privacy Complaint." We will acknowledge receipt within 2 business days and aim to resolve all complaints within 15 business days.
15.4 For further information about your rights or for guidance on navigating the Platform's features, please visit our FAQ page or review our Terms & Conditions.
Our support team is available 24/7 to handle data-rights requests, privacy concerns, and account queries. You can also review our Terms & Conditions or visit our FAQ for quick answers.