🔒 Privacy Policy

For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:

• "sntoto" / "we" / "us" / "our" — The sntoto online betting and gaming platform, operated at https://sntoto.cam, including all associated sub-domains and interfaces.
• "Member" / "User" / "you" / "your" — Any individual who has registered an account on sntoto or who interacts with the Platform in any capacity, whether as a registered Member or an anonymous visitor.
• "Personal Data" — Any information that identifies or can reasonably be used to identify a living natural person, either directly or in combination with other data.
• "Processing" — Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transfer, deletion, or destruction.
• "Data Controller" — The entity that determines the purposes and means of Processing Personal Data. sntoto is the Data Controller for Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of sntoto, under contractual obligation and in accordance with this Policy.
• "Cookies" — Small text files placed on your device by the Platform to enable core functionality, analytics, and personalization features.
• "KYC" — Know Your Customer; the identity and age verification process conducted by sntoto before authorizing withdrawals and other account functions.

sntoto acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, sntoto is responsible for determining the lawful purposes for which your Personal Data is processed and for ensuring that all processing activities comply with applicable international data protection standards.

For all data protection enquiries, subject access requests, or complaints, please contact our Data Protection team via email at [email protected], marking your correspondence with the subject line "Data Protection Request". We aim to acknowledge all data-related correspondence within 2 business days (WIB).

sntoto collects Personal Data across several categories depending on how you interact with the Platform. The table below provides a comprehensive overview:

sntoto collects Personal Data through the following channels:

• Directly from you: Information you provide during account registration, KYC document submission, deposit and withdrawal requests, customer support interactions, and when updating your account profile.
• Automatically: Technical and usage data collected passively when you access and interact with the Platform, including via cookies, web server logs, and session-tracking technologies. See Section 9 for full cookie details.
• From third-party data processors: Identity verification services used in the KYC process may cross-reference your submitted documents against public records or third-party databases to confirm authenticity.
• From payment processors: Transaction confirmation data received from Indonesian bank net works (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm the status and origin of deposits and withdrawals linked to your account.

sntoto processes your Personal Data for the purposes listed below, each grounded in a lawful basis under internationally recognized data protection principles:

1. Account Creation & Management — To register and maintain your sntoto account, authenticate login sessions, and provide core platform functionality. Legal basis: Contractual Necessity.
2. Identity Verification (KYC) — To verify that you are at least 21 years of age, a resident of Indonesia, and the legitimate holder of the payment methods registered to your account. Legal basis: Legal Obligation and Contractual Necessity.
3. Transaction Processing — To process deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, and to execute withdrawal requests. Legal basis: Contractual Necessity.
4. Fraud Prevention & Security — To detect and prevent fraudulent activity, bonus abuse, money laundering, collusion, and other prohibited conduct outlined in our Terms & Conditions. Legal basis: Legitimate Interest in protecting platform integrity and Legal Obligation.
5. Customer Support — To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and phone. Legal basis: Contractual Necessity and Legitimate Interest in customer satisfaction.
6. Platform Improvement & Analytics — To analyze usage patterns, identify technical issues, optimize game selection (including togel, slot gacor, and sabung ayam streams), and enhance user experience. Legal basis: Legitimate Interest in service improvement.
7. Marketing Communications — To send you promotional offers, bonus announcements, and platform updates relevant to your activity, subject to your consent. Legal basis: Consent. You may withdraw consent at any time via account settings or by clicking unsubscribe on any email.
8. Legal Compliance — To comply with applicable laws and regulations, respond to lawful requests from government authorities, and maintain records as required by licensing authorities. Legal basis: Legal Obligation.
9. Responsible Gaming — To enforce deposit limits, self-exclusion periods, cooling-off intervals, and other Responsible Gaming protections. Legal basis: Legal Obligation and Contractual Necessity.

sntoto does not sell, rent, or trade your Personal Data to any third party for commercial purposes. However, we may share your data in the following strictly limited circumstances:

• Payment Processors: Your bank account or e-wallet identifier and transaction details are shared with the relevant financial institution (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to facilitate deposits and withdrawals. These processors act as independent Data Controllers under their own privacy policies.
• KYC Verification Providers: Identity documents and selfie images may be processed by specialized third-party KYC service providers that verify the authenticity of documents against public records. These providers act as Data Processors under strict contractual terms aligned with this Policy.
• Fraud Prevention & Risk Management: Anonymous or pseudonymized usage data may be shared with third-party fraud detection services to identify patterns of suspicious behavior across the online betting industry. No personally identifiable information is shared without legal compulsion.
• Game & Platform Suppliers: Session data for specific games (sports betting, live casino, togel, slot gacor, sabung ayam streams) may be shared with the game studio or content provider for the purposes of game operation, fairness auditing, and dispute resolution. Studios include Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft.
• Legal Authorities: We may disclose your Personal Data if required to do so by law, court order, subpoena, or lawful request from a government authority, regulatory body, or law enforcement agency investigating fraud, money laundering, or other criminal conduct.
• Corporate Transactions: In the event of a merger, acquisition, asset sale, or bankruptcy proceeding involving sntoto, your Personal Data may be transferred to the successor entity, subject to that entity honoring this Privacy Policy or providing you with notice and choice.

All third-party Data Processors are contractually bound to process your data only for the specific purposes outlined above, to implement appropriate security measures, and to delete or return data upon termination of the processing agreement.

sntoto retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Accounts: Personal Data is retained for the duration of your active sntoto account and for 7 years following account closure to comply with financial record-keeping obligations under Indonesian and international anti-money laundering (AML) regulations.
• KYC Documents: Identity documents (KTP scans, proof of address, selfie images) are retained for 7 years following the last transaction or account closure, whichever is later, in line with regulatory retention requirements.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for 7 years following the transaction date for tax, auditing, and dispute resolution purposes.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as consent remains active, plus an additional 2 years following withdrawal of consent to evidence compliance with data protection laws.
• Communications Data: Live chat transcripts and email support exchanges are retained for 3 years following the last interaction for quality assurance, training, and dispute resolution purposes.
• Technical & Usage Data: Server logs, IP addresses, and anonymized usage analytics are retained for a maximum of 24 months, after which they are permanently deleted or fully anonymized such that they can no longer identify you.

Upon expiry of the applicable retention period, Personal Data is securely deleted from active databases and backup systems in accordance with our data destruction protocols. You may request earlier deletion subject to the exceptions outlined in Section 11.

sntoto implements industry-leading technical and organizational security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and sntoto's servers is encrypted using SSL/TLS protocols. This ensures that login credentials, payment details, and personal information cannot be intercepted by malicious third parties.
• Data Encryption at Rest: All Personal Data stored on sntoto servers is encrypted using AES-256 encryption algorithms. Database access is restricted to authorized personnel only and is logged for audit purposes.
• Multi-Factor Authentication: sntoto employs multi-factor authentication (MFA) for internal access to Member data by support staff and administrators, ensuring that no single credential compromise can result in data breach.
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation solutions to repel external attacks.
• Regular Security Audits: sntoto's data security practices are audited on a quarterly basis by independent third-party security firms. Penetration testing and vulnerability assessments are conducted to identify and remediate potential weaknesses.
• Staff Training: All sntoto employees with access to Member data undergo mandatory data protection and information security training annually, including phishing awareness and secure coding practices.
• Incident Response Plan: In the event of a data breach affecting your Personal Data, sntoto will notify affected Members within 72 hours of discovery and will provide guidance on protective measures. We will also notify relevant supervisory authorities where legally required.

sntoto uses cookies and similar tracking technologies to enable core platform functionality, analyze usage patterns, and personalize your experience. A cookie is a small text file placed on your device by your web browser at the instruction of the website you are visiting.

The cookies used on sntoto fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They enable you to log in, navigate between pages, and access secure areas. Without these cookies, core services like deposits, withdrawals, and game sessions cannot function. These cookies do not collect personally identifiable information and cannot be disabled via browser settings without breaking the Platform.
• Performance & Analytics Cookies: These cookies collect anonymized information about how Members interact with the Platform, including pages visited, time on site, and click patterns. This data is used to improve site performance, identify usability issues, and optimize content layout. We may use third-party analytics providers such as Google Analytics for this purpose.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preference, time-zone (WIB / WITA / WIT), currency display format (Rp), and layout preferences. They improve your experience but are not essential for the Platform to function.
• Marketing & Targeting Cookies: Where you have provided consent, these cookies track your activity across sessions to deliver personalized promotional offers, bonus recommendations, and relevant game suggestions (e.g., promoting BRI Liga 1 betting markets to football enthusiasts). You may opt out of marketing cookies at any time via your account settings.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain categories, or receive alerts when cookies are being set. However, disabling strictly necessary cookies will prevent you from using key features of the Platform, including placing bets and managing your account balance.

sntoto's primary data storage infrastructure is located in secure data centers that comply with internationally recognized security standards. Some of the third-party service providers we engage (payment processors, KYC verification services, game studios, analytics providers) may be based in jurisdictions outside Indonesia.

Where Personal Data is transferred to a third country, sntoto ensures that appropriate safeguards are in place to protect your data in accordance with international data protection standards. These safeguards include:

• Entering into Standard Contractual Clauses (SCCs) with third-party processors, ensuring they are bound by equivalent data protection obligations.
• Verifying that the recipient jurisdiction has been recognized as providing an adequate level of data protection by relevant supervisory authorities.
• Requiring third-party processors to implement technical and organizational measures equivalent to those deployed by sntoto.

You have the right to request details of the specific safeguards applied to any international transfer of your Personal Data. Please contact our Data Protection team at [email protected] for further information.

As a sntoto Member, you hold the following rights in relation to your Personal Data. These rights are exercisable by contacting our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt.

Where a request cannot be fulfilled due to legal retention obligations (e.g., 7-year transaction record retention for AML compliance), we will explain the specific legal basis preventing full compliance and offer alternative remedies where possible, such as restriction of processing or anonymization.

sntoto enforces a strict 21+ age policy. The Platform is not intended for use by individuals under the age of 21, and we do not knowingly collect Personal Data from minors. All new accounts are subject to age verification through the KYC process.

If we become aware that a Member is under 21 years of age, we will immediately suspend the account, refund any deposited funds to the payment source, and permanently delete the account and all associated Personal Data. Any winnings generated by an underage Member are forfeited in accordance with our Terms & Conditions.

Parents or guardians who believe their child has registered a sntoto account should contact us immediately at [email protected] with the subject line "Underage Account". We will investigate and take appropriate action within 24 hours.

The sntoto Platform may contain links to third-party websites, payment gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja), or game studio platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). sntoto is not responsible for the privacy practices or content of these third-party sites.

Each third-party service operates under its own privacy policy, which may differ from this Policy. We strongly encourage you to review the privacy policy of any third-party service before providing Personal Data to that service. sntoto does not control and is not liable for the data handling practices of third parties.

When you click a payment link or game launch button on sntoto, you may be redirected to the third party's domain. Your interaction with that domain is governed by the third party's terms and privacy policy, not by this Policy.

sntoto reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or technological capabilities. Where a material change is made that affects how we use your Personal Data or expands the categories of data we collect, we will provide at least 7 days' advance notice via:

• Email to your registered email address
• A prominent banner notification displayed on the sntoto Platform upon login
• An in-platform message accessible via your account dashboard

Your continued use of the Platform following the effective date of the updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you must stop using the Platform and may request account closure and data deletion in accordance with Section 11.

The current effective date of this Privacy Policy is stated at the top of this page. Previous versions of this Policy are available upon request by contacting [email protected] with the subject line "Policy Version History".

If you have any questions, concerns, or complaints regarding this Privacy Policy or sntoto's data processing practices, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Subject Line for Data Requests: Use "Data Protection Request", "Data Rights Request", or "Privacy Inquiry" to ensure your message is routed to the correct team.
• Response Time: We aim to acknowledge all data protection enquiries within 2 business days (WIB) and provide a substantive response within 30 days.

If you are not satisfied with our response to a data protection complaint, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction. We will cooperate fully with any formal investigation conducted by a supervisory authority.

For general customer support enquiries unrelated to data protection (account issues, deposits, withdrawals, bonus queries), please use our 24/7 live chat feature or email [email protected] without a specialized subject line.