hstotoPrivacy Policy

This page describes what we collect when you use hstoto and how we keep that data protected. We at hstoto take privacy seriously and are committed to transparency about our data practices. When you register an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or place bets on our live-dealer tables and sportsbook markets, we collect and process personal information.

Our hstoto privacy policy covers the categories of data we collect, how we use it, who we share it with, how long we retain it, and your rights under applicable law. We operate globally but serve users in jurisdictions where our services are legally permitted. Your data is protected by encryption and stored in secure facilities.

Please read this policy carefully. By using hstoto, you consent to the practices described here. If you have questions about how we handle your data, contact us through the channels provided at the end of this document.

What Data We Collect on hstoto

We at hstoto collect data in several categories. During account registration, we collect your full name, email address, date of birth, username, and password. We also collect identity verification documents—government-issued ID, passport, or driving licence—before you can withdraw funds. We store this data securely in encrypted form.

When you deposit funds on hstoto, we collect payment method details (bank account number, card number, e-wallet identifier). We do not store full payment card numbers; instead, we tokenize them through our payment processors. We log every transaction—amount, timestamp, payment method, status—for settlement and dispute purposes. We also collect device information (IP address, browser type, operating system) and geolocation data to verify that you are accessing hstoto from a permitted jurisdiction.

During gameplay on hstoto, we log all bets, results, game type, table or game ID, stake amount, outcome, and settlement timestamp. This data is used to confirm results, calculate your balance, and detect fraud. We also collect support tickets, chat messages, and complaint records if you contact our team.

Data collected for KYC: We collect identity documents and funding source information to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations required in all jurisdictions where we operate.

How We Use Your Data on hstoto

We at hstoto use your data for the following purposes. First, we use it to verify your identity, confirm your age and legal eligibility, and comply with anti-fraud and AML regulations. Second, we use it to process deposits and withdrawals and to manage your account balance. Third, we use it to confirm game outcomes, calculate winnings, and settle disputed results. Fourth, we use it to detect suspicious activity, prevent bonus abuse, and identify duplicate accounts. Fifth, we use it to respond to your support requests and legal inquiries.

We may also use your data for statistical analysis and platform improvement—for example, to understand which games are most popular in Jakarta, Surabaya, Bandung, Medan, or Semarang, or to identify trends in Liga 1, Piala AFF, or other sports markets. In all cases, we de-identify this data before analysis, so individual identity is not preserved.

Our hstoto Data Protection and Third Parties

We at hstoto protect your data using industry-standard encryption (SSL/TLS for transmission, AES-256 for storage), access controls, and secure facilities. Our servers may be located outside your jurisdiction; by using hstoto, you consent to this cross-border data transfer. We retain your data for seven years from the date of last activity, or longer if required by local law. After that period, we delete or de-identify your data unless a legal hold or ongoing dispute requires retention.

We share your data with third parties only as necessary. We share payment information with payment processors (the operators of DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet systems) to process deposits and withdrawals. We may share data with identity verification providers to confirm your identity. We share aggregated, de-identified data with analytics partners to understand platform usage. We do not sell your personal data to marketers or data brokers.

We may disclose your data to law enforcement, regulators, or courts if required by law or legal process. We will notify you of such disclosure unless a law enforcement request prohibits notification. We may also disclose data to prevent fraud or to enforce our terms and conditions

Data retention
We retain account, transaction, and betting data for seven years or as required by local law, whichever is longer.
Encryption
We use SSL/TLS to encrypt data in transit and AES-256 to encrypt data at rest. Payment information is tokenized and not stored in plaintext.
Cross-border transfer
Our servers and data processors are located in multiple countries. By using hstoto, you consent to your data being transferred and processed outside your jurisdiction of residence.
Third-party processors
We use payment processors, identity verification services, and analytics partners. These parties are contractually bound to protect your data under terms at least as strict as this policy.

Your Rights and Cookies on hstoto

We at hstoto recognise your rights to access, correct, delete, and port your personal data. To exercise these rights, contact us via the channels listed in our legal notice page. We will respond within our standard processing window. Note that we may retain some data if required by law or to fulfil legal obligations.

Our hstoto platform uses cookies and similar technologies (local storage, session storage) to remember your login, preferences, and session state. Some cookies are essential for platform function; others are optional and used for analytics or marketing. You can disable cookies in your browser settings, though this may affect hstoto functionality. We do not use cookies to track you across websites outside hstoto.

For questions about our privacy practices, contact our data protection team via the email listed in our legal noticeWe aim to respond to privacy inquiries within ten business days. If you believe we have violated your privacy rights, you may lodge a complaint with your local data protection authority (where applicable). For account-specific inquiries, visit our FAQ page or contact support.

Related pages

Jurisdiction and Eligibility Information

Service availability

We at hstoto offer our platform and services only in jurisdictions where online gaming and sportsbook wagering are legally permitted by applicable law. We do not specify which jurisdictions are considered legal or illegal; that determination is made by each user's local, state, or national law, which may change at any time without notice. Our policy is to restrict access from jurisdictions where we determine our services are prohibited, and to cooperate with any government or regulatory authority that directs us to cease service in a particular region. If you attempt to access hstoto from a jurisdiction where our services are not available or are restricted, your account may be suspended, closed, or terminated, and any associated balance may be forfeited after a review period or returned to your original funding source in accordance with applicable law. We conduct periodic audits of our user base to ensure ongoing compliance with regional restrictions. Users who access hstoto in violation of jurisdictional restrictions do so entirely at their own legal and financial risk. We do not warrant that our services are legal in any particular user's location, and we cannot be held liable for legal consequences arising from a user's violation of local law.

Account eligibility

To open and maintain an account on hstoto, you must be of legal age in your jurisdiction to participate in online gaming and sportsbook wagering. We do not enforce a specific age threshold in our policy because the legal age for gambling varies by location; you are solely responsible for verifying your own eligibility before registering. During account creation, you certify that you meet all applicable legal requirements and that you are not prohibited from accessing online gaming services by any court order, regulatory decision, or other legal restriction. We conduct identity verification before processing large withdrawals and may request additional documentation to confirm your identity and age at any time. If we discover that you do not meet our eligibility requirements, we will close your account and handle any outstanding balance in accordance with applicable law and our internal compliance procedures. We do not offer appeals or exceptions to eligibility requirements. Account access is instantaneous upon basic information submission, but full withdrawal privileges require passing identity verification, which is subject to our standard processing windows and may be extended if additional documentation is required.

Local-law responsibility

Users of hstoto are solely and exclusively responsible for verifying that their access to and use of our platform complies with all applicable laws and regulations in their jurisdiction of residence and any other jurisdiction from which they may access our services. We do not provide legal advice, and we make no representation or warranty that our services are legal in your location. Many jurisdictions restrict or prohibit online gaming, sportsbook wagering, live-dealer games, slots, or esports betting. Some jurisdictions allow such services only under specific licenses, regulated frameworks, or conditions that may be unknown to you. It is your obligation to research and understand your local legal and regulatory framework before registering for a hstoto account or placing any bets. If you are uncertain about your jurisdiction's laws, we strongly recommend consulting a qualified legal professional in your location. By registering and using hstoto, you certify that you have independently verified your eligibility and that you accept full responsibility for any legal, financial, or other consequences arising from your access and use of our services. We will cooperate fully with any regulatory or law-enforcement inquiry or order regarding user activity, and we will not provide legal defence for users in violation of their jurisdiction's laws.

Data and privacy scope

We at hstoto collect personal data during account registration, identity verification, and ongoing use of our platform for the purposes set out in this privacy policy. Data collected includes your full name, email address, date of birth, identity document details (ID number, passport number, etc.), residential address, phone number, payment method information, transaction history, betting activity, device information (IP address, browser, OS), and geolocation data. We use this data to verify your identity and age, comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations, process deposits and withdrawals, settle game outcomes, manage your account balance, detect fraud and abuse, and respond to support requests. Your data is protected by encryption and secure storage according to industry standards. We do not sell your data to third parties. We may share data with payment processors, identity verification services, fraud-prevention partners, and regulatory authorities if required by law. For a full explanation of our data practices, please review this privacy policy and our terms and conditionsBy opening and using a hstoto account, you consent to the collection and processing of your personal data as described here. You have the right to request access to, correction of, or deletion of your data, subject to legal retention requirements. Data access requests can be submitted through the contact channels listed in our legal notice page.

Contact for legal inquiries

If you have legal questions, compliance concerns, data protection inquiries, or wish to lodge a formal complaint regarding your hstoto account, our services, or this privacy policy, you may contact us through the channels listed on our legal notice page. We maintain a dedicated legal and data protection team to handle inquiries of this nature. Typical response time for legal and privacy inquiries is within our standard processing window; complex matters involving investigation or third-party coordination may require additional time. When you submit a legal or privacy inquiry, please include your hstoto account ID (if applicable), a detailed description of your concern, and any supporting documentation (screenshots, transaction records, correspondence, etc.). We will acknowledge receipt of your inquiry and provide a substantive response addressing your concern within the timeframe disclosed at the time of submission. If you are dissatisfied with our response or believe we have violated your privacy rights, you may escalate your complaint to our management team via the legal notice contact form, or lodge a complaint with your local data protection authority (where applicable in your jurisdiction). We do not offer external arbitration or third-party dispute resolution for privacy matters at this time; all privacy complaints and disputes are handled through our internal process with escalation available to management. We recommend keeping records of all communications with hstoto for your own reference and potential future use.