How to228 collects, uses, and protects your personal information
Last Updated: January 2026Your personal information is encrypted with 256-bit SSL security and stored on protected servers with restricted access controls.
We clearly explain what data we collect, why we collect it, how we use it, and with whom we share it.
You have the right to access, correct, delete, or request a copy of your personal data stored on our platform.
to228 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online betting platform at to228.cam and any associated mobile applications or services (collectively, the "Platform").
This Privacy Policy applies to all users of the to228 Platform, including residents of Indonesia and other jurisdictions from which we accept players. By creating an account or using our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.
We encourage you to read this Privacy Policy carefully. If you have questions or concerns about our privacy practices or this Privacy Policy, please contact our Data Protection Officer using the contact details provided at the end of this document.
to228 acts as the data controller for personal information collected through the Platform. We are responsible for ensuring that your personal data is processed in accordance with applicable data protection laws and the commitments outlined in this Privacy Policy.
As a data controller, we determine the purposes and means of processing your personal information and are accountable for compliance with data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
to228 collects several types of information to provide, maintain, and improve our services, comply with legal obligations, and protect the security and integrity of our Platform.
When you register for an account with to228, we collect the following personal information:
When you access and use the to228 Platform, we automatically collect certain information about your device and usage patterns:
We maintain comprehensive records of your betting and gaming activity on the Platform, including:
In certain circumstances, we may receive information about you from third-party sources:
to228 uses the collected information for the following purposes:
With your consent (where required by law), we may use your information to:
You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in our emails. Note that opting out of marketing does not affect transactional communications necessary for account operation.
to228 processes your personal information based on the following legal grounds:
to228 does not sell your personal information to third parties. We share your information only in the following limited circumstances:
We share information with trusted third-party service providers who perform services on our behalf, including:
All service providers are bound by strict confidentiality obligations and data processing agreements requiring them to handle your information securely and only for specified purposes.
We may disclose your information to law enforcement, regulatory bodies, and government authorities when:
In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the business transaction. We will notify you of any such transfer and any choices you may have regarding your information.
We may share information with fraud prevention services, industry watchdog organizations, and other operators to detect and prevent fraudulent activity, collusion, match-fixing, and other forms of abuse across the gaming industry.
to228 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Encryption: All sensitive data is encrypted in transit using 256-bit SSL/TLS encryption and at rest using industry-standard encryption algorithms. Your KTP documents, selfie verification photos, and financial information are stored in encrypted form.
Our security measures include:
While we employ industry-leading security practices, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect any unauthorized access to your account.
to228 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | Account lifetime + 7 years after closure | Legal, regulatory, and tax obligations |
| KYC Documents | 7 years after account closure | AML/CTF compliance requirements |
| Transaction Records | 7 years after transaction | Financial record-keeping laws |
| Betting History | 7 years after bet settlement | Gaming license obligations |
| Marketing Consents | Until withdrawn + 1 year | Consent record maintenance |
| Support Communications | 3 years after resolution | Quality assurance and dispute resolution |
| Technical Logs | 90 days to 1 year | Security monitoring and troubleshooting |
After the applicable retention period expires, personal information is securely deleted or anonymized. Information required for legal proceedings, investigations, or disputes may be retained until the matter is fully resolved.
Subject to applicable data protection laws, you have the following rights regarding your personal information:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of your data. You can access most of your account information directly through your account dashboard. For additional information, contact our Data Protection Officer.
You have the right to request correction of inaccurate personal data. You can update most account information through your account settings. For changes to verified information (name, date of birth, address), you may need to provide supporting documentation.
You may request deletion of your personal data in certain circumstances. Note that we may be legally required to retain certain information for regulatory compliance (typically 7 years for financial and gaming records). We will delete or anonymize all non-essential data upon request.
You may request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
You may object to processing of your personal data based on legitimate interests. You can opt out of marketing communications at any time.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact our Data Protection Officer at [email protected] (display only) or through your account dashboard. We will respond to your request within 30 days and may need to verify your identity before processing the request.
to228 uses cookies, web beacons, and similar technologies to enhance your experience on our Platform, analyze usage patterns, and deliver personalized content.
You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain Platform features. Most browsers allow you to refuse cookies or delete existing cookies.
to228 operates internationally, and your personal information may be transferred to, stored in, and processed in countries other than Indonesia, including countries that may have different data protection standards.
When transferring data internationally, we implement appropriate safeguards including:
All international transfers are conducted in accordance with applicable data protection laws and with appropriate security measures in place.
Age Restriction: to228 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21.
Our KYC verification process includes mandatory age verification through Indonesian National ID (KTP) to ensure compliance with this requirement. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the account.
Parents and guardians who believe their child may have provided information to to228 should contact us immediately at [email protected] (display only).
to228 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Platform features. Material changes will be communicated through:
The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
We aim to respond to all privacy inquiries within 2-5 minutes during peak hours and within 2 hours during off-peak periods. For formal data subject access requests, we will provide a complete response within 30 days as required by applicable data protection laws.
You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately or in compliance with applicable laws.
Our Data Protection Officer and customer support team are available to answer questions about how we handle your personal information.
View FAQ Terms & Conditions Return to Home