k1toto is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains in clear terms what data we collect, why we collect it, how we use it, and the rights you hold as a data subject. Last updated: 1 January 2026.
The following terms, when used in this Privacy Policy, carry the meanings defined below:
k1toto collects personal data in two primary categories: information you provide directly and information collected automatically through your use of the platform.
When you register an account, undergo KYC verification, contact customer support, or interact with the platform, you may provide:
When you access the k1toto platform, the following data is collected automatically through cookies, server logs, and analytics tools:
k1toto collects personal data through the following channels:
k1toto uses your personal data only for lawful, specific, and disclosed purposes. We will never use your data in any manner inconsistent with the purposes stated in this policy.
| Purpose | Data Used |
|---|---|
| Account Registration & Management | Identity data, contact data, account data |
| KYC Identity Verification | Identity data, verification documents, financial data |
| Processing Deposits & Withdrawals | Financial data, transaction data |
| Fraud Prevention & AML Compliance | All data categories, transaction patterns |
| Customer Support | Identity data, contact data, support communications |
| Platform Security & Integrity | Technical data, usage data, location data |
| Responsible Gaming Monitoring | Transaction data, usage data, betting patterns |
| Marketing & Promotions (with consent) | Contact data, usage data, account preferences |
| Analytics & Product Improvement | Usage data, technical data, cookie data |
| Legal & Regulatory Compliance | All data categories as required by law |
k1toto processes your personal data on one or more of the following legal grounds:
k1toto does not sell your personal data to third parties. We share personal data only in the following limited, controlled circumstances:
We share financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly for the purpose of processing your deposits and withdrawals in Indonesian Rupiah (IDR).
We share identity document data with certified KYC and age-verification service providers for the sole purpose of verifying that you are who you claim to be and that you meet our minimum age requirement of 21 years. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification.
We share session identifiers and game activity data with our certified game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) for the purposes of game delivery, result verification, and fair-play auditing. No sensitive personal data is shared with game studios beyond what is technically necessary.
We may disclose your personal data to relevant regulatory bodies, law enforcement agencies, or government authorities if required to do so by applicable law, court order, or official regulatory directive — including in connection with anti-money laundering investigations or fraud reporting.
We may share data with specialist fraud prevention and cybersecurity service providers for the purpose of protecting k1toto and its players from fraud, co llusion, and unauthorized account access. These providers operate under strict data processing agreements and may not use your data for any other purpose.
In the event of a merger, acquisition, restructuring, or sale of all or part of k1toto's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you via email or on-site notice before your data becomes subject to a materially different privacy policy.
k1toto retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.
When your data is no longer required for any legitimate purpose, k1toto will securely delete or anonymize it so that it can no longer be associated with you as an individual.
k1toto employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure.
k1toto uses cookies and similar tracking technologies to deliver a functional, personalized, and secure platform experience. A cookie is a small text file placed on your device when you visit our platform.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functions: login sessions, security tokens, bet slip management | Session / 1 day |
| Functional | Remember your language preference, display settings, and notification choices | Up to 1 year |
| Analytics | Measure page visits, feature usage, and navigation paths to improve the platform | Up to 2 years |
| Security | Detect and prevent fraudulent logins, bot activity, and suspicious session patterns | Session / 30 days |
You may control cookie settings through your browser preferences. Most modern browsers allow you to block, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will impair core platform functionality, including your ability to log in and place bets. Disabling analytics or functional cookies will not prevent you from using the platform but may affect your personalized experience.
As a data subject, you hold the following rights with respect to your personal data held by k1toto. You may exercise these rights free of charge by contacting our Data Protection team at [email protected].
You have the right to request a copy of all personal data k1toto holds about you. We will provide this in a structured, machine-readable format within 30 days of a valid request.
If any personal data k1toto holds about you is inaccurate or incomplete, you have the right to request correction. Updates can also be made directly through your account settings for most contact and preference data.
You may request deletion of your personal data where it is no longer needed for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that legal and regulatory obligations (e.g., AML record-keeping) may prevent immediate deletion of certain data categories.
You may request that k1toto restrict processing of your data while a rectification request is being assessed, or while you have objected to processing based on legitimate interests.
You may request a copy of the data you provided to k1toto in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for the purpose of transferring it to another service provider.
You have the right to object to processing based on k1toto's legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease all such communications immediately.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of the above rights, email [email protected] with the subject line "Data Rights Request" and your full account username. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.
k1toto's services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account, void all associated transactions, and delete the minor's personal data from our systems.
Parents and guardians who believe their child may have accessed k1toto are encouraged to contact us immediately at [email protected] so that we can take prompt action. We also encourage the use of parental control software to prevent underage access to gambling platforms.
k1toto operates as an internationally licensed platform. Your personal data may be processed by servers and personnel located outside of Indonesia, including in jurisdictions where data protection laws may differ from those in your home country.
In all cases where data is transferred internationally, k1toto implements appropriate safeguards to ensure your data receives a level of protection consistent with the standards described in this Privacy Policy. These safeguards include contractual data processing agreements with all overseas processors that incorporate binding data protection obligations equivalent to international best practice.
The k1toto platform integrates with third-party services — including game studios, payment processors, and analytics tools — whose own privacy practices may differ from those described in this policy. k1toto is not responsible for the privacy practices of third-party service providers beyond the scope of our data processing agreements with them.
We do not include links to external websites on the k1toto platform. If you access any external service independently in connection with your k1toto use (for example, your bank's online portal when making a deposit), that service's own privacy policy governs the collection and use of your data within their environment.
k1toto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will notify registered players via email at least 14 days before the revised policy takes effect. The updated policy will also be published on this page with a revised "Last Updated" date.
Your continued use of the k1toto platform after the effective date of any revised policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your data.
For all privacy-related inquiries, data subject rights requests, or concerns about how k1toto handles your personal data, please contact our Data Protection team:
Every data exchange between your device and our platform is secured with industry-standard 256-bit SSL/TLS encryption — the same technology used by international banks and financial institutions.
k1toto does not sell, rent, or trade your personal data to third-party marketing agencies or data brokers under any circumstances. Your data is used only for the purposes stated in this policy.
We collect only the data necessary for each specific purpose — account management, payment processing, KYC verification, and platform security. We do not collect data speculatively or beyond what is required.
You hold full rights over your personal data — including access, correction, deletion, portability, and objection to marketing. Exercise any right at any time by contacting our Data Protection team.
Financial data shared with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) is transmitted exclusively over encrypted, authenticated channels.
k1toto maintains a documented data breach response plan. In the unlikely event of a security incident affecting your data, we will notify you and relevant authorities promptly in accordance with applicable law.
If you have questions about how k1toto handles your personal data, would like to exercise your data rights, or want to review our related policies, our team is ready to assist around the clock.
Play responsibly | 21+ only | Review our Responsible Gaming resources