istanbul toto Platform Privacy Notice
This page describes what we collect when you use istanbul toto and how we keep that data protected. We gather information when you register an account, deposit funds, place bets on Liga 1 or Piala AFF fixtures, join our live-dealer tables for blackjack or Dragon Tiger, or withdraw winnings via DANA, e-wallet, mobile banking, or bank transfer. Our data practices are built around transparency, security, and compliance with global privacy standards.
We recognize that your account details, transaction history, and gaming activity are sensitive. We encrypt communications between your device and our servers, limit staff access to personal data, and retain information only as long as legally required. We do not sell your data to third parties. We do share certain details with payment processors and anti-fraud partners — but only to the extent necessary to complete your transactions and protect our platform.
Our servers may sit outside your jurisdiction. Your data may be processed or stored in countries with different privacy laws than your own. By using istanbul toto, you consent to this cross-border data flow, subject to the protections described in this notice.
What we collect on istanbul toto
We collect your data in several categories. When you register, we request your email address, chosen username, phone number, and password. We also collect your legal name, date of birth, national ID number or passport details, and residential address during account verification (required before your first withdrawal). We may ask for a photo of your ID and a utility bill showing your address — this is standard anti-money-laundering compliance.
When you deposit or withdraw on istanbul toto, we record the payment method, amount, date, and time. If you use DANA, e-wallet, mobile banking, or local payment, we receive confirmation from those wallet providers. If you transfer via online payment, e-wallet, mobile banking, or local payment, we see your bank account holder name and the account number you used. We store this data to match deposits with withdrawals, prevent fraud, and comply with banking regulations in supported jurisdictions like Jakarta, Surabaya, Bandung, Medan, and Semarang.
When you place bets on our sportsbook, join live-dealer tables, or spin slot games, we record:
- What game or market you accessed (e.g., Liga 1 match, Dragon Tiger table, Aviator slot)
- Your bet amount, outcome, and winnings or loss
- The date, time, and duration of your session
- Your IP address and device type (phone, tablet, desktop)
We also collect cookies and similar tracking technology. Cookies store your session token (so you stay logged in), language preference, and odds-viewing history. Analytics cookies help us track page performance and user behavior patterns — we use this to improve our platform, not to profile you for marketing.
How we use your data on istanbul toto
We use your email and phone number to contact you about account activity, verify your identity during registration, and send support responses if you reach out via live chat. We use your payment details to process deposits and withdrawals — your bank account or wallet information goes directly to the payment processor, not stored in readable form on our servers.
We use your betting history to calculate your account balance, settle bets, and detect unusual activity (e.g., rapid large deposits followed by immediate withdrawals, which may indicate money laundering). We share this activity with our compliance team and external anti-fraud providers if warranted. We do not use your data to build marketing profiles or sell behavioral data to advertisers.
During holidays like Idul Fitri, Idul Adha, Imlek, or Nyepi, we may temporarily restrict account access for regulatory maintenance. We notify you via email if this affects your account. We do not use your data to make automated decisions about your account — all account restrictions, closures, or limits are reviewed by our compliance team before implementation.
Third-party processors and your data
We share your data with external partners only to operate istanbul toto. Our payment processors (integrators of online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfer channels) receive your payment method and transaction amount. They do not see your account balance, betting history, or personal documents. We have data-processing agreements with all payment partners requiring them to protect your information and use it only for payment purposes.
We use external anti-fraud services to screen deposits and withdrawals for money laundering risk. These services receive your name, ID number, transaction amount, and destination account. They do not receive your betting details or account activity. If the anti-fraud service flags your transaction, we may ask you for additional information to confirm legitimacy. We do not proceed with your withdrawal until we are satisfied that it complies with regulations.
Our live-dealer studio may use third-party hosting providers to store video feeds of your gaming sessions. These providers are contractually bound to delete footage after 90 days. Your face or personal information is not captured in dealer-stream recordings — only the table gameplay and dealer actions are recorded.
Your rights and choices on istanbul toto
You have the right to access your personal data held by istanbul toto. Contact our support team via live chat or email, and we will provide a copy of your account details, transaction history, and betting records within 30 days. You may request that we delete or anonymize data no longer needed for account operation — with exceptions for information we are legally required to retain (e.g., transaction records for seven years under anti-money-laundering law).
You can update your email, phone number, and residential address at any time from your account settings. You can disable cookies in your browser, though this may affect your experience on istanbul toto (e.g., you may lose your session and be forced to log in repeatedly). You can request that we not use your data for analytics — contact support and we will flag your account to exclude it from anonymized performance reports.
We do not process your data based on your consent alone. When you create an account on istanbul toto, you agree to our terms of service, which include this privacy notice. Processing your data is necessary to fulfill our contract with you (providing platform access, accepting deposits, settling bets, managing withdrawals). You cannot use istanbul toto without consenting to this data processing.
Data security and jurisdiction on istanbul toto
We encrypt all data in transit (between your device and our servers) using TLS 1.2 or higher. We encrypt sensitive data at rest (stored on our systems) using AES-256 encryption. Our servers are located in data centers with 24-hour physical security, redundant power supplies, and automated backup systems. We conduct annual security audits by external firms and patch all known vulnerabilities within 30 days of discovery.
However, no security system is perfect. If we discover a data breach affecting istanbul toto account holders, we will notify all affected users via email within 72 hours of discovery, and we will cooperate with relevant regulators and law enforcement as required.
Our servers may be located outside your country of residence. Data processed in other jurisdictions may be subject to access requests from those countries' governments. By using istanbul toto, you acknowledge this risk and consent to cross-border data transfer. We operate only in supported jurisdictions where online gaming is legally permitted — we do not knowingly serve users in regions where our platform is prohibited.
We at istanbul toto believe data privacy and security are fundamental to trust. This notice reflects our commitment to transparency in how we collect, use, and protect your information.
Contact and changes to this notice
If you have questions about our privacy practices or wish to exercise your rights, contact our support team via live chat (available in English and Indonesian) or email. We will respond to all privacy inquiries within 15 business days. If you believe we have mishandled your data or violated this notice, you may lodge a complaint with your country's data-protection authority (if one exists in your jurisdiction).
We may update this privacy notice to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by posting a notice on the istanbul toto platform. Your continued use of the platform after such changes constitutes acceptance of the updated notice. This notice was last updated in the current month and may be revised periodically.
Our services are available only where local law permits. We do not offer istanbul toto in jurisdictions where online wagering is prohibited or where data-protection law conflicts with our operational model. Users are responsible for verifying that their use of the platform complies with their own jurisdiction's regulations.