At wbtoto, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a Member on our platform.
These six principles summarize our commitment to your privacy. They complement — but do not replace — the full legal text below. Please read all clauses carefully.
Every data transfer between your device and wbtoto's servers is protected by industry-standard 256-bit SSL/TLS encryption. Your personal and financial information is never transmitted in plain text.
wbtoto collects only the personal data that is strictly necessary to operate our platform, verify your identity, process transactions, and fulfill our legal obligations. We do not collect data speculatively or for purposes we cannot justify.
wbtoto does not sell, rent, or trade your personal data to third parties for marketing purposes. Data sharing with service providers is strictly limited to what is necessary for platform operations and is governed by binding data-processing agreements.
Personal data is stored on access-controlled servers with role-based permission systems, regular security audits, and automated intrusion-detection protocols. Physical and digital access is limited to authorized personnel only.
As a wbtoto Member, you have the right to access, correct, port, restrict, and request deletion of your personal data, subject to our legal retention obligations. Submit any data-rights request to our support team and we will respond within 30 days.
wbtoto uses strictly necessary cookies to keep your session secure and functional analytics cookies to improve platform performance. We do not use third-party advertising cookies or behavioral tracking networks on our platform.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, date of birth, national ID number, email address, phone number, IP address, bank account details, and betting history. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, restriction, erasure, and destruction. |
| "Data Controller" | The entity that determines the purposes and means of Processing. For the wbtoto Platform, the Data Controller is the Company operating wbtoto as identified in Clause 2. |
| "Data Processor" | A third party that Processes Personal Data on behalf of the Data Controller under a binding data-processing agreement — for example, a payment gateway or cloud hosting provider. |
| "Member" / "you" / "your" | Any individual who has registered or is in the process of registering a wbtoto account, or who uses the wbtoto Platform in any capacity. |
| "Platform" | The wbtoto website at https://wbtoto.cam, including all subdomains, mobile-optimized versions, and associated applications. |
| "KYC" | Know Your Customer — the identity and document-verification process used to confirm a Member's identity, age, and eligibility to use the Platform. |
| "Cookie" | A small data file stored on your device by your web browser at the request of a website, used to maintain session state and collect analytics data. |
2.1 The Data Controller responsible for your Personal Data is the operator of the wbtoto Platform, accessible at https://wbtoto.cam. All data-related inquiries, access requests, and complaints should be directed to our support team as set out in Clause 14.
2.2 wbtoto operates as a licensed and regulated international betting brand under internationally recognized gaming standards. Our data-handling practices are designed to meet the requirements of applicable international data protection frameworks, including principles consistent with the General Data Protection Regulation (GDPR) as a globally recognized benchmark for data privacy.
2.3 wbtoto serves Members primarily located in Indonesia. Where Indonesian data-protection legislation applies to the Processing of your Personal Data — including the Indonesian Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi) — wbtoto complies with its obligations under that legislation to the extent applicable to our operations.
3.1 wbtoto collects the following categories of Personal Data in the course of operating the Platform:
4.1 Directly from You. The majority of your Personal Data is collected directly from you at the point of registration, during the KYC verification process, when you submit a deposit or withdrawal request, and when you place bets or claim bonuses on the Platform.
4.2 Automatically via Technology. Some data — specifically technical and device data — is collected automatically as you interact with the Platform. This includes IP address, browser type, device identifiers, and session analytics collected via cookies and server logs.
4.3 From Third-Party Payment Providers. When you make a deposit or request a withdrawal, our payment-processing partners (banks and e-wallet operators) provide us with transaction confirmation data, timestamps, and payment reference numbers. We do not receive your full card numbers or online banking credentials from these third parties.
4.4 From Public and Compliance Databases. In limited circumstances, wbtoto may verify information you have provided by cross-referencing it against publicly available sources or compliance databases (such as sanctions lists or identity verification bureaus) as part of our KYC and AML obligations.
5.1 wbtoto Processes your Personal Data for the following purposes, each supported by a legitimate legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and ongoing account management | Performance of contract — we cannot provide our services without verifying your identity and maintaining your account. |
| KYC and age verification (21+ requirement) | Legal obligation — we are required to verify the identity and age of all Members to comply with gaming regulations and responsible gaming laws. |
| Processing deposits, withdrawals, and bet settlements | Performance of contract — these are core contractual services. |
| Anti-money laundering (AML) and fraud prevention | Legal obligation and legitimate interests — preventing financial crime protects both wbtoto and our Members. |
| Customer support and dispute resolution | Performance of contract and legitimate interests — we need to communicate with you to resolve issues. |
| Promotional communications (bonus offers, platform updates) | Legitimate interests — provided you have the right to opt out at any time via account settings. |
| Platform analytics and performance optimization | Legitimate interests — improving user experience and maintaining platform stability. |
| Enforcing Terms & Conditions and investigating suspected abuse | Performance of contract and legitimate interests — protecting platform integrity. |
| Compliance with court orders, regulatory requests, or legal investigations | Legal obligation. |
5.2 Where we rely on legitimate interests as our legal basis, we balance our interest against your data protection rights to ensure no undue prejudice. You may object to Processing on this basis by contacting us as set out in Clause 14.
6.1 General Policy. wbtoto does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Data sharing is strictly limited to the categories described in this Clause and is governed by binding data-processing agreements that require recipients to maintain equivalent data-protection standards.
6.2 Service Providers. We share Personal Data with trusted third-party service providers who perform essential functions on our behalf, including:
6.3 Game Suppliers and Odds Providers. wbtoto partners with licensed game studios and sports-data providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe for casino and slots; sports odds feeds for football, badminton, MotoGP, e-sports markets). These partners may receive anonymized or pseudonymized betting data for game-result verification and platform-integration purposes, but they do not receive your full identity data.
6.4 Legal and Regulatory Authorities. wbtoto may disclose Personal Data to law enforcement agencies, courts, tax authorities, or regulatory bodies where required by applicable law, court order, or regulatory investigation. We will notify you of such disclosures where legally permitted.
6.5 Business Transfers. In the event of a merger, acquisition, corporate restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity, provided the recipient continues to honor the commitments set out in this Privacy Policy.
7.1 wbtoto operates as an international platform and may transfer Personal Data to service providers and data centers located outside Indonesia. When such transfers occur, wbtoto ensures that appropriate safeguards are in place to protect your data, including:
7.2 By using the wbtoto Platform, you acknowledge and consent to such international transfers subject to the safeguards described above.
8.1 wbtoto retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, tax, accounting, or reporting obligations.
8.2 Active Accounts. While your account remains active, we retain all data necessary to operate your account, process transactions, and provide customer support.
8.3 Closed Accounts. When you close your account, we retain identity data, financial-transaction records, and betting history for a minimum of five years from the date of account closure to comply with AML record-keeping obligations and to resolve any subsequent disputes or investigations. After this period, data is securely deleted unless a longer retention period is required by a specific legal obligation.
8.4 Marketing Data. If you opt out of promotional communications, we retain a suppression record of your email address or phone number indefinitely to ensure we do not inadvertently re-contact you.
9.1 As a wbtoto Member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team as set out in Clause 14. We will respond to all valid requests within 30 days.
You may request a copy of all Personal Data we hold about you, including identity data, transaction history, and betting records.
You may request correction of any inaccurate or incomplete Personal Data. You can update most account details directly via your account settings.
You may request deletion of your Personal Data, subject to our legal retention obligations (e.g., 5-year AML record-keeping).
You may request that we limit Processing of your data while a dispute or verification is being resolved.
You may request a machine-readable copy of your Personal Data for transfer to another service (where technically feasible).
You may object to Processing based on legitimate interests or direct marketing. We will honor all opt-out requests.
10.1 wbtoto uses cookies and similar tracking technologies to maintain session state, analyze platform performance, and improve user experience. Cookies are small data files stored on your device by your web browser.
10.2 Third-Party Cookies. wbtoto does not permit third-party advertising networks or behavioral-tracking services to place cookies on our Platform. The only third-party cookies present are those set by our payment and game-integration partners when you interact with their embedded checkout or gaming interfaces, and these are strictly functional in nature.
10.3 Managing Cookie Preferences. You may configure your browser to refuse all cookies or to alert you when a cookie is being set. However, disabling strictly necessary cookies will prevent you from using essential Platform features, including login and transaction processing.
11.1 wbtoto enforces a strict 21+ age policy on all accounts. Our Platform is not directed at, and we do not knowingly collect Personal Data from, individuals under the age of 21.
11.2 If we become aware that we have inadvertently collected Personal Data from a person under 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage individual will be returned to the payment source, minus any bonus amounts or winnings derived from wagering.
11.3 Parents or guardians who believe their child has provided Personal Data to wbtoto should contact us immediately at [email protected] (plain text — not a link).
12.1 wbtoto implements industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or damage. These measures include:
12.2 While wbtoto takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.
13.1 wbtoto reserves the right to amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or platform features. Where amendments are material, we will notify you by posting a prominent notice on the Platform and, where reasonably practicable, by sending an in-Platform notification or email.
13.2 Your continued use of the wbtoto Platform following the posting of an amended Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
13.3 The date of the most recent revision is displayed at the top of this page. We recommend that Members review this Privacy Policy periodically to remain informed of how we protect their data.
14.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or our data-processing practices, please contact our support team:
14.2 Data Rights Requests. To exercise any of the rights described in Clause 9 (access, rectification, erasure, restriction, portability, objection), please submit a written request to the email address above. Include your full name, registered email address, and a detailed description of your request. We will verify your identity before processing the request.
14.3 Complaints to Supervisory Authorities. If you believe wbtoto has not handled your Personal Data in accordance with applicable law, you have the right to lodge a complaint with the data-protection supervisory authority in your jurisdiction. In Indonesia, this would be the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika) or any successor authority responsible for enforcing the Indonesian Personal Data Protection Law.
Our support team is here to help with any data-related inquiries. You can also read our FAQ or review our full Terms & Conditions for more information about account security and platform policies.
Adults only (21+). Please gamble responsibly. For entertainment purposes only.