At gototo, protecting your privacy and personal data is a core commitment. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights regarding your data. We are transparent about our data practices and comply with applicable privacy and data protection regulations.
All personal and financial data transmitted to and from gototo is encrypted using 256-bit SSL (Secure Sockets Layer) technology — the same security standard used by banks and financial institutions worldwide.
We collect only the personal information necessary to operate your account, process transactions, comply with legal obligations, and deliver the services you request. We do not collect data we do not need.
You have the right to access, correct, or delete your personal data at any time. You can also opt out of marketing communications and request data portability. Your data rights are protected under this policy.
gototo will never sell, rent, or trade your personal data to third parties for marketing purposes. Your data is used solely for platform operations, legal compliance, and service improvement.
All personal data is stored on secure servers with restricted access. We employ firewalls, intrusion detection systems, and regular security audits to protect against unauthorised access, data breaches, and cyber attacks.
This Privacy Policy is regularly reviewed and updated to reflect changes in law, regulation, and industry best practices. We will notify you of any material changes and always maintain full transparency about our data practices.
Your Consent: By registering an account on the gototo platform, accessing any part of the site, or using any of our services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, you must cease using the platform immediately.
1.1 Our Commitment to Privacy. gototo is committed to protecting the privacy and security of all personal data entrusted to us by our members. We recognise that privacy is a fundamental right and that trust is the foundation of our relationship with every user who registers an account on our platform.
1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected by gototo through the website at https://gototo.cam, associated mobile interfaces, customer support channels, and any other service or touchpoint through which gototo interacts with members or prospective members.
1.3 Policy Applicability. This Privacy Policy applies to all users of the gototo platform, including:
1.4 Defined Terms. Any capitalised terms not defined in this Privacy Policy shall have the meanings ascribed to them in the gototo Terms & Conditions.
2.1 Identity of the Data Controller. For the purposes of applicable data protection and privacy laws, the data controller responsible for the collection, processing, and protection of your personal data is gototo, the operator of the platform accessible at https://gototo.cam.
2.2 Contact Details. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact our Data Protection team at:
We aim to respond to all privacy-related enquiries within 7 business days.
3.1 Categories of Personal Data. gototo collects various types of personal data depending on how you interact with the platform. The categories of data we collect are set out in the table below:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian national identity card (KTP) number or passport number, photograph (selfie) | Registration form; KYC verification process |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Registration form; account profile updates |
| Financial Data | Bank account number, bank name (BCA, BRI, BNI, Mandiri, etc.), e-wallet account details (OVO, DANA, GoPay, etc.), deposit amounts, withdrawal amounts, transaction history | Deposit/withdrawal forms; payment processor integrations |
| Account Data | Username, password (hashed), account balance, bonus balance, wagering history, bet slips, game session logs, account preferences, communication preferences | Account creation; platform usage; bet placement; game play |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, language settings, time zone, referral source, clickstream data | Automatic collection via cookies and server logs |
| Usage Data | Pages visited, time spent on pages, features used, search queries, buttons clicked, bet types placed, games played, frequency of login, session duration | Automatic collection via analytics tools and platform monitoring |
| Marketing Data | Email open rates, click-through rates on promotional links, promotion code usage, opt-in/opt-out status for marketing communications | Email marketing platform; promotional campaign tracking |
| Communication Data | Live chat transcripts, email correspondence, customer support tickets, feedback form submissions, complaint records | Customer support interactions; feedback forms |
3.2 Sensitive Personal Data. gototo does not intentionally collect or process sensitive personal data (also known as special categories of personal data) such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (except for identity verification purposes), health data, or data concerning sexual orientation. If you provide such data to us voluntarily (for example, in a customer support message), we will handle it with the highest level of care and confidentiality.
3.3 Children's Data. gototo does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data from our systems. See Section 12 for more details on our age restriction policy.
4.1 Purposes of Processing. gototo processes your personal data for the following purposes:
4.2 Automated Decision-Making. gototo may use automated decision-making processes (including profiling) for the following limited purposes:
You have the right to request human review of any automated decision that significantly affects you. See Section 10 for details on your rights.
5.1 Lawful Grounds. gototo processes your personal data only where we have a lawful basis to do so under applicable data protection law. The legal basis for each processing activity is set out below:
We process your personal data to fulfil our contractual obligations under the Terms & Conditions that govern your use of the gototo platform. This includes account creation, transaction processing, service delivery, and customer support. Without processing this data, we cannot provide the services you have requested.
We process your personal data to comply with legal and regulatory obligations, including KYC/AML requirements, tax reporting, gambling licence conditions, and lawful requests from authorities. Failure to process this data could result in legal penalties for gototo.
We process your personal data based on our legitimate business interests, provided these interests are not overridden by your privacy rights. Our legitimate interests include:
For certain processing activities (such as non-essential cookies, targeted advertising, and some marketing communications), we rely on your explicit consent. You have the right to withdraw consent at any time, and withdrawal will not affect the lawfulness of processing prior to withdrawal.
6.1 Principle of Data Sharing. gototo does not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your data with carefully selected third-party service providers and partners who assist us in operating the platform, processing transactions, and complying with legal obligations.
6.2 Categories of Third-Party Recipients. We may share your personal data with the following categories of third parties:
We share your financial data (bank account details, e-wallet information, transaction amounts) with payment processors and banks to facilitate deposits and withdrawals. These providers are bound by strict confidentiality obligations and process your data only on our instructions.
We share your identity data (name, date of birth, ID document images) with KYC verification providers who perform automated identity checks and fraud screening. These providers are GDPR-compliant and ISO-certified.
We share limited account data (username, session tokens) with third-party game studios (Pragmatic Play, Evolution Gaming, etc.) and sports data providers to deliver live casino games, slots, and real-time sports betting markets. These providers do not have access to your financial data or identity documents.
We share your communication data (live chat messages, support tickets) with third-party customer support software providers to manage and resolve your enquiries. These platforms are hosted on secure servers with access restricted to authorised gototo staff.
We share usage data (page views, session duration, click events) with analytics providers to understand how members use the platform and identify opportunities for improvement. These providers process data in aggregated, anonymised form wherever possible.
We may disclose your personal data to law enforcement agencies, gambling regulators, tax authorities, and courts where required by law, regulation, court order, or to protect our legal rights and the safety of our members.
We may share your data with lawyers, accountants, auditors, and other professional advisors who provide services to gototo, subject to strict confidentiality agreements.
6.3 Data Processing Agreements. All third-party service providers who process personal data on behalf of gototo are required to sign data processing agreements that impose strict obligations regarding data security, confidentiality, and compliance with data protection laws. These agreements ensure that your data is processed only for the purposes we have instructed and is not used for any other purpose.
6.4 No Data Selling. gototo will never sell, rent, lease, or trade your personal data to third parties for their own marketing purposes. Your data is used solely for the purposes set out in this Privacy Policy.
7.1 Retention Principles. gototo retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes. Once data is no longer needed, it is securely deleted or anonymised.
7.2 Retention Periods by Data Type. The retention periods for each category of personal data are as follows:
7.3 Deletion & Anonymisation. At the end of the applicable retention period, your personal data will be securely deleted or anonymised such that it can no longer be linked to you as an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes.
7.4 Exceptions. In certain cases, we may retain data beyond the standard retention periods if required by law, regulation, court order, or to protect our legal rights in ongoing disputes or investigations.
8.1 Technical Security. gototo employs industry-standard technical measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
8.2 Organisational Security. In addition to technical measures, gototo implements organisational security policies including:
8.3 Data Breach Notification. In the unlikely event of a data breach that poses a risk to your rights and freedoms, gototo will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws. The notification will include details of the breach, the data affected, and the steps we are taking to mitigate the impact.
8.4 Member Responsibility. While gototo takes extensive measures to protect your data, you also have a responsibility to maintain the security of your account credentials. You should choose a strong, unique password, enable two-factor authentication if available, and never share your login details with anyone. If you suspect unauthorised access to your account, contact us immediately at [email protected].
9.1 What Are Cookies? Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide a better user experience, and deliver analytics data to site operators.
9.2 Cookies We Use. gototo uses the following categories of cookies:
These cookies are strictly necessary for the platform to function. They enable core functionality such as login authentication, session management, account security, and payment processing. Without these cookies, the platform cannot operate correctly. Essential cookies do not require your consent.
These cookies collect information about how you use the platform — which pages you visit, which links you click, and whether you encounter any errors. This data helps us improve platform performance and user experience. Performance cookies are typically anonymised and do not identify you personally.
These cookies remember your preferences (such as language, currency display, and display settings) so that you do not have to re-enter them each time you visit. Functional cookies enhance your experience but are not essential to the platform's core operation.
These cookies track your activity across the gototo platform to build a profile of your interests and deliver personalised promotional offers. They may also be used to limit the number of times you see an advertisement and measure the effectiveness of campaigns. Marketing cookies require your consent and can be disabled via your browser settings.
9.3 Managing Cookies. You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, although doing so may affect the functionality of the gototo platform. To learn how to manage cookies in your specific browser, visit your browser's help documentation.
9.4 Third-Party Cookies. In addition to our own cookies, third-party service providers (such as analytics platforms and game studios) may place cookies on your device when you use the gototo platform. These third parties have their own privacy policies governing the use of cookies, and we encourage you to review them.
10.1 Rights Under Data Protection Law. Under applicable data protection laws, you have the following rights with respect to your personal data:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "data subject access request." We will provide the data in a structured, commonly used, and machine-readable format (such as PDF or CSV) within 30 days of your request.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly via your account settings, or contact customer support for assistance.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, this right is not absolute — we may be required to retain certain data to comply with legal obligations or defend legal claims.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
You have the right to receive your personal data in a portable format and to transmit it to another service provider. This right applies only to data you have provided to us and where processing is based on consent or contractual necessity.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will immediately cease sending marketing communications to you.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing prior to withdrawal.
If you believe that gototo has violated your privacy rights or failed to comply with data protection laws, you have the right to lodge a complaint with your local data protection supervisory authority.
10.2 Exercising Your Rights. To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request." Please include sufficient detail to allow us to verify your identity and process your request. We will respond within 30 days.
11.1 Consent to Marketing. By registering an account on gototo and opting in to receive promotional communications, you consent to receiving marketing emails, SMS messages, and in-platform notifications about bonuses, promotions, new games, and other offers. You may withdraw this consent at any time.
11.2 Personalisation. We may personalise marketing messages based on your betting activity, game preferences, deposit frequency, and other account data to ensure the offers we send are relevant to your interests. Personalisation helps us provide you with better value and reduces the volume of irrelevant communications.
11.3 Opting Out. You can opt out of marketing communications at any time by:
Please note that opting out of marketing communications does not affect transactional or service-related messages (such as deposit confirmations, withdrawal notifications, and account security alerts), which are essential to the operation of your account.
12.1 Age Requirement. The gototo platform is strictly for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
12.2 Age Verification. All members are required to verify their age as part of the KYC process. If we discover that an individual under the age of 21 has registered an account or provided personal data, we will immediately close the account, delete the data, and take steps to prevent future access.
12.3 Parental Responsibility. If you are a parent or guardian and believe your child has provided personal data to gototo, please contact us immediately at [email protected] so that we can take appropriate action.
13.1 Cross-Border Transfers. gototo operates an international platform, and your personal data may be transferred to and processed in countries outside Indonesia, including countries that may not offer the same level of data protection as Indonesia. However, we ensure that all international data transfers are conducted in accordance with applicable data protection laws and are subject to appropriate safeguards.
13.2 Safeguards for Transfers. Where we transfer personal data to countries outside Indonesia, we rely on one or more of the following legal mechanisms:
13.3 Data Localisation. Where required by Indonesian law or regulation, we will store and process certain categories of personal data on servers located within Indonesia.
14.1 Right to Amend. gototo reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in law, regulation, business practices, or platform functionality. Any changes will be posted on this page with a revised "Last Updated" date.
14.2 Notification of Material Changes. If we make material changes that significantly affect how we collect, use, or share your personal data, we will notify you by email (to the email address registered on your account) and by posting a prominent notice on the platform homepage at least 14 days before the changes take effect.
14.3 Acceptance of Changes. Your continued use of the gototo platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must cease using the platform and close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection team:
For general customer support enquiries, our live chat service is available 24/7 via the platform interface, and email support is available in both English and Indonesian.
Your Privacy Matters: gototo is committed to earning and maintaining your trust by protecting your personal data with the highest standards of security, transparency, and compliance. We believe privacy is not just a legal obligation — it is a fundamental right that we are proud to uphold for every member of our community.
Read our FAQ, review our Terms & Conditions, or contact our support team for personalised assistance. Your data rights are protected.