bobatoto vip Casino & Sportsbook Data Care

This page describes what we collect when you use bobatoto vip and how we keep that data protected. We take privacy seriously because your account holds sensitive information: national ID details, payment account numbers, and transaction history. Our approach is straightforward—we collect only what is necessary for account verification, payment processing, and regulatory compliance, and we do not sell your data to marketers or third-party advertisers.

We at bobatoto vip operate across multiple jurisdictions, so our data handling must comply with laws in Indonesia and other supported regions. Our servers may sit outside your jurisdiction, but we apply the same security standards everywhere. This policy explains what data we collect (KYC documents, account activity, payment details), who has access to it (our internal teams, payment processors, regulators), and your rights to request, correct, or delete your information.

If you have questions about how we handle your data, contact our support team via chat or email. Our multilingual team can discuss privacy concerns and help you understand your account settings.

What Data We Collect on bobatoto vip

We collect account registration data: your email address, username, password (encrypted), date of birth, and phone number. During Know Your Customer (KYC) verification, we collect your legal name, national ID number (KTP), a scan or photo of your ID card, and sometimes a proof-of-address document such as a utility bill. This information is mandatory—we cannot open or fund an account without it.

We also record transaction data: every deposit you make, which payment method you used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), the amount, and the timestamp. We log your gameplay—which games you access on bobatoto vip (live-dealer tables, sportsbook, slots), bet amounts, outcomes, and your account balance after each transaction. This data is stored so we can settle disputes, prevent fraud, and comply with anti-money-laundering regulations.

We also track your internet protocol (IP) address, browser type, and operating system. This information helps us detect unusual account activity (such as login from a new city during holidays like Idul Fitri or Idul Adha) and prevent unauthorised access.

Note: We do not collect location data directly from your device unless you grant permission. We infer location from IP address for security purposes only.

Cookies: We use cookies to store your session ID and remember your login preferences. Cookies expire after a set period of inactivity. We do not use cookies for cross-site tracking or advertising.
Live-dealer video: When you watch a live-dealer table on bobatoto vip, we stream video from our studio. We do not record your facial expressions or behaviour—only your account ID and bet history are logged.
Communication records: If you contact our support team via chat or email, we retain your message and our response for dispute resolution and quality assurance.

How We Use and Protect Your Data

We use your data for three primary purposes. First, account administration: we verify your identity, process deposits and withdrawals, and manage your account balance. Second, regulatory compliance: we retain KYC documents and transaction logs to satisfy anti-money-laundering authorities and gambling regulators in supported jurisdictions. Third, fraud prevention: we analyse your account activity to detect suspicious patterns (such as repeated failed deposits from different payment sources) and protect your funds.

We do not use your data to send unsolicited marketing emails or SMS messages. We may contact you about account issues (such as a failed withdrawal or a KYC document expiring) but only via the email address you provided during registration.

Our servers use encryption (TLS 1.2 or higher) for all data in transit. Your password is hashed—we do not store it in plain text, so even our staff cannot see it. Sensitive data such as payment account numbers are masked in most contexts; only authorised payment processors see full bank details. Access to your account data is restricted to staff who need it for their job—our compliance team can access KYC documents, our finance team can access transaction records, but our game developers cannot.

We retain your KYC documents and transaction history for the duration of your account plus a period mandated by local law (typically five years). After this period, we delete or anonymise your data unless we are required to retain it for a legal dispute or regulatory investigation.

Data Protection Measures

Encrypted storage and encrypted transmission
Password hashing and session management
Role-based access control for staff
Regular security audits and penetration tests

Limitations

Servers may be located outside your jurisdiction
Law enforcement may compel data disclosure
No guarantee against all cyber attacks

We share your data with third parties only as necessary. Our payment processors (the banks and e-wallet providers handling DANA, e-wallet, mobile banking, local payment, and similar transfers) receive your full bank account number to complete transactions. Our identity verification partner receives copies of your KYC documents to confirm your identity. Our hosting provider and database administrator have access to encrypted account data to maintain server infrastructure. None of these partners may use your data for their own marketing purposes—our contracts forbid it.

We may disclose your data to law enforcement, gaming regulators, or tax authorities if we receive a valid court order or regulatory demand. We will notify you of such disclosure unless we are legally forbidden to do so. Your rights to access, correct, or delete your data depend on local law. In most jurisdictions, you can request a copy of your personal data or ask us to correct inaccurate information. Deletion requests may be refused if we are required to retain your data for regulatory purposes or to settle an outstanding dispute.

This privacy policy applies to all bobatoto vip services: live-dealer tables, sportsbook (Liga 1, Piala AFF, Champions League coverage), slots, and esports markets. If you believe we have violated your privacy rights, contact our support team. If our response is unsatisfactory, you may lodge a complaint with the data protection authority in your jurisdiction. Our services are available only where local law permits—your use of bobatoto vip confirms that you understand and accept this privacy policy.