hstoto is committed to protecting the privacy and security of every player's personal data. This policy explains exactly what we collect, why we collect it, and how we keep it safe.
Every piece of data you transmit to hstoto travels through bank-grade SSL encryption. Your personal and financial information is never exposed in transit.
hstoto does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is used solely to operate and improve our services.
Player data is stored on encrypted servers with restricted access. Regular security audits and penetration testing are conducted to maintain infrastructure integrity.
We collect only the data that is strictly necessary for account operation, regulatory compliance, and service improvement — nothing more.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days.
Personal data is retained only for as long as necessary for legal, regulatory, and operational purposes. Closed accounts are purged in accordance with applicable retention schedules.
hstoto ("we", "us", "the Platform") operates the online gambling platform accessible at https://hstoto.cam. This Privacy Policy describes how hstoto collects, processes, stores, shares, and protects personal data provided by players ("you", "the Player") who register and use our services.
By creating an account on hstoto, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not register an account or continue using the Platform.
This Policy should be read alongside the hstoto Terms & Conditions, which govern the overall relationship between the Platform and Players. In matters relating to data protection, this Privacy Policy takes precedence.
This Privacy Policy applies to all Indonesian residents who hold or apply for a player account on hstoto. We are committed to handling your data in a manner consistent with internationally recognised data protection principles, including those reflected in Indonesia's Personal Data Protection Law (UU PDP).
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can identify you as an individual, including your name, identity number, contact details, financial data, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion. |
| "Data Controller" | hstoto, acting as the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of hstoto under contractual obligation, such as KYC verification providers and payment processors. |
| "Sensitive Data" | A subset of Personal Data that warrants heightened protection, including government-issued identity numbers, financial account details, and biometric identifiers. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
hstoto collects the following categories of Personal Data in the course of providing its services:
hstoto collects Personal Data through the following channels:
hstoto processes your Personal Data for the purposes set out below, each supported by a corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (the Terms & Conditions you accepted at registration). |
| Identity verification (KYC) and age checks | Legal obligation (regulatory compliance) and legitimate interest (fraud prevention). |
| Processing deposits and withdrawals | Performance of contract and compliance with payment processing obligations. |
| Fraud detection and security monitoring | Legitimate interest in protecting the Platform and its players from financial crime. |
| Responsible gaming enforcement | Legal obligation and legitimate interest in player welfare. |
| Customer support and dispute resolution | Performance of contract and legitimate interest. |
| Personalised promotions and bonus targeting | Consent (you may opt out at any time via account settings or by contacting support). |
| Platform analytics and product improvement | Legitimate interest in improving our services, using anonymised or aggregated data where possible. |
| Legal and regulatory reporting | Legal obligation under applicable laws and licensing requirements. |
hstoto does not sell, rent, or exchange your Personal Data with third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients in limited and controlled circumstances:
We engage third-party service providers who process data strictly on our behalf and under our instruction, including: KYC and identity verification platforms; payment processing partners (banks and e-wallet operators); cloud hosting and infrastructure providers; fraud prevention and risk management services; and customer support platform operators.
When you play games supplied by third-party providers (such as Pragmatic Play, Evolution Gaming, Microgaming, or NetEnt), limited technical data — such as a session token and game transaction records — is exchanged with those providers solely to facilitate gameplay and resolve disputes. These providers are contractually bound to handle such data confidentially.
hstoto may disclose Personal Data to governmental, regulatory, or law enforcement bodies where required by law, court order, or where disclosure is necessary to protect the rights, safety, or property of hstoto or its players. We will notify you of any such disclosure to the extent permitted by applicable law.
In the event of a merger, acquisition, or sale of all or a substantial portion of hstoto's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.
No Data Sales. hstoto has never sold and will never sell player Personal Data to advertisers, data brokers, or any third party for commercial exploitation. All data sharing described above is limited to operational necessity.
hstoto operates internationally, and some of your Personal Data may be processed by our service providers in jurisdictions outside Indonesia. Where such transfers occur, hstoto ensures that appropriate safeguards are in place, including:
By using the Platform, you consent to the transfer of your Personal Data to these jurisdictions for the purposes described in this Policy.
hstoto retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. Our general retention principles are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure, to satisfy anti-money laundering (AML) obligations. |
| KYC / identity documents | 5 years from account closure or last transaction date, whichever is later. |
| Transaction and financial records | 7 years from the date of the transaction, in line with standard financial record-keeping requirements. |
| Gaming activity logs | 3 years from the date of activity, used for dispute resolution and responsible gaming monitoring. |
| Customer support records | 3 years from the date of the interaction or case closure. |
| Marketing preference data | Until you withdraw consent or close your account, whichever occurs first. |
| Technical / device logs | 13 months on a rolling basis, used for security monitoring and fraud detection. |
Once the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be linked to you as an individual.
hstoto implements a comprehensive, layered security framework to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our key technical and organisational measures include:
While hstoto takes every reasonable precaution, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for logging out of your session when using shared or public devices.
hstoto uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies we use are described below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — session management, login state, security tokens. | Session / up to 24 hours |
| Functional | Remembers your preferences such as language, currency display, and responsible gaming settings. | Up to 12 months |
| Analytical | Collects anonymised data on how Players navigate the Platform, helping us improve features and performance. | Up to 13 months |
| Security & Fraud | Identifies suspicious behaviour patterns and helps prevent account takeover and payment fraud. | Up to 12 months |
Strictly necessary cookies cannot be disabled as they are required for the Platform to operate. You may manage or disable other cookie categories through your browser settings at any time; however, doing so may affect the functionality of certain Platform features.
hstoto does not use third-party advertising cookies or pass cookie data to ad networks for retargeting purposes.
As an individual whose Personal Data is processed by hstoto, you hold a set of data subject rights. These rights are described below, along with guidance on how to exercise them.
You may request a copy of the Personal Data hstoto holds about you. We will provide a response within 30 days of a verified request.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request a correction. Most profile data can be updated directly in your account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may ask us to restrict processing of your data while a dispute about its accuracy or lawfulness is resolved.
Where processing is based on your consent or contract performance, you may request your data in a structured, machine-readable format for transfer to another controller.
You may object to processing based on legitimate interests at any time. You may also withdraw consent for marketing communications without affecting other processing activities.
To exercise any of the above rights, contact hstoto's support team at [email protected]. We will verify your identity before actioning any request to protect against unauthorised access to your data. We will respond within 30 days; in complex cases, this may be extended to 60 days with prior notice to you.
hstoto's services are strictly intended for individuals aged 21 and above. We do not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step in the KYC process, and any account found to belong to a person under 21 will be immediately suspended.
If you are a parent or guardian and believe that a minor has provided Personal Data to hstoto without your consent, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete the data and close the account.
21+ Only. hstoto applies technical, procedural, and manual controls to prevent underage registration. These include document-based age verification and ongoing monitoring of account activity. We take our responsibility to protect minors from gambling harm extremely seriously.
The hstoto Platform integrates services from third-party providers to deliver core functionality. These include game studios (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft), payment gateways, and identity verification services. When you interact with these third-party components, those providers may process limited data in accordance with their own privacy policies.
hstoto is not responsible for the privacy practices of third-party providers beyond the contractual obligations we impose on them as Data Processors. We encourage you to review the privacy documentation of any third-party service you interact with independently of the hstoto Platform.
The Platform does not contain links to external websites. Any navigation on hstoto remains within the domain https://hstoto.cam.
hstoto reserves the right to update this Privacy Policy at any time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes, we will notify registered Players by email and display a prominent notice on the Platform at least seven days before the updated Policy takes effect.
The "Last Updated" date at the top of this page indicates the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Platform and contact support to close your account.
We recommend reviewing this page periodically. Archived versions of previous Privacy Policy iterations are available upon written request to our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact hstoto's dedicated data protection team using the details below.
Email: [email protected] | Live Chat: Available 24/7 via the Platform | Response Time: Email within 30 days; live chat under 2 minutes on average
If you are not satisfied with hstoto's response to a data protection request or complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, the applicable authority is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital) or such successor regulatory body as may be designated under Indonesia's Personal Data Protection Law.
hstoto is committed to resolving all privacy-related complaints fairly and promptly. We treat every data subject request as a priority and will always provide a substantive written response within the applicable statutory timeframe.
Review our Terms & Conditions for full platform rules, visit our FAQ for quick answers, or contact our support team directly to exercise your data rights.