At sstoto, protecting your personal information is a core operational responsibility — not a regulatory formality. This Privacy Policy explains in clear, precise terms what data we collect, why we collect it, how it is used, who may access it, and what rights you hold as a player registered on our platform. Please read this document carefully before creating an account.
Last updated: 1 January 2026
256-Bit SSL Encryption Active
Before diving into the full legal text, here is a plain-English summary of the six privacy commitments that underpin everything sstoto does with your data.
sstoto collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and fulfil our compliance obligations. We do not gather data speculatively or for purposes beyond those stated in this policy.
All data transmitted to and from the sstoto platform is encrypted using 256-bit SSL/TLS protocols. Data at rest is stored on access-controlled servers with multi-layered authentication. Security infrastructure is reviewed and independently audited on a regular basis.
sstoto will never sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes. Your data is not an asset we monetise — it is information we hold in trust for the sole purpose of operating your account securely.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data rights request to our support team and we will respond within 30 days. Where deletion is constrained by legal obligations, we will clearly explain the reason.
We will always tell you what data we hold, why we hold it, and how long we retain it. If this Privacy Policy changes materially, we will notify you by email at least 7 days before the changes take effect, giving you the opportunity to review and, if necessary, close your account.
sstoto's data practices are aligned with internationally recognised privacy standards applicable under our international gaming licence. KYC documentation and transaction records are retained for the minimum period required by applicable anti-money laundering regulations.
Important Notice: This Privacy Policy ("Policy") describes how sstoto, accessible at sstoto.cam, collects, uses, stores, and protects the personal information of players and website visitors. By registering an account or using the sstoto platform, you consent to the data practices described in this Policy. If you do not agree, you must not create an account or use the platform.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
2.1 The Data Controller for all Personal Data collected through the sstoto platform is the internationally registered operating entity behind sstoto.cam. For all data protection matters, including subject access requests and deletion requests, the point of contact is:
2.2 Where third-party service providers process Personal Data on our behalf (see Section 7), those providers act as Data Processors under binding contractual data processing agreements and may not use your data for any purpose other than delivering the contracted service.
3.1 sstoto collects the following categories of Personal Data from players:
| Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Mandatory |
| Contact Data | Email address, mobile number, residential address | Mandatory |
| KYC Documents | Scanned copies of KTP/E-KTP, passport, or SIM | Mandatory (for withdrawals) |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records | Mandatory |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automatic |
| Usage Data | Pages visited, games played, bet history, session duration, platform interactions | Automatic |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Where applicable |
3.2 sstoto does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by applicable law or regulation in the context of responsible gaming interventions.
4.1 Directly from you: When you complete the registration form, submit KYC documents, add a payment method, contact support, or respond to a survey or promotion.
4.2 Automatically: When you access or interact with the sstoto platform, our systems automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies as described in Section 8.
4.3 From third parties: sstoto may receive identity verification data from accredited KYC service providers, fraud risk scores from payment processors, and device fingerprint data from our fraud prevention partners, solely for the purposes of identity verification and platform security.
5.1 sstoto processes your Personal Data on one or more of the following legal bases:
6.1 sstoto uses your Personal Data for the following specific purposes:
6.2 sstoto will not use your Personal Data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a new legal basis for the processing.
7.1 sstoto does not sell, rent, or trade your Personal Data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
7.2 Payment Processors: Your financial data (bank account details, e-wallet identifiers, transaction amounts) is shared with authorised payment processing partners solely to execute deposit and withdrawal transactions. These partners are bound by contractual data processing agreements and applicable financial regulations.
7.3 KYC & Identity Verification Providers: Your identity documents and personal details may be shared with accredited third-party KYC verification services to authenticate your identity and confirm your age. These providers process data exclusively for verification purposes under strict confidentiality obligations.
7.4 Fraud Prevention & Security Partners: Technical Data including IP addresses, device identifiers, and session data may be shared with fraud detection and cybersecurity partners to identify and prevent unauthorised access, account takeovers, and other security threats.
7.5 Game Studio Providers: When you play a game powered by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited session and bet data is transmitted to that studio's servers to enable gameplay and settle results. These studios are contractually prohibited from using your data for any purpose other than game delivery.
7.6 Legal & Regulatory Authorities: sstoto may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, by court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or serious harm.
7.7 Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of sstoto's assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and the successor entity's privacy practices before the transfer takes effect.
8.1 sstoto uses cookies and similar tracking technologies to maintain session integrity, personalise your experience, and collect analytical data that helps us improve the platform. The categories of cookies we use are as follows:
8.2 sstoto does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. We do not serve behavioural advertising or share browsing data with ad networks.
8.3 Essential and security cookies are deployed on a legitimate interests basis and cannot be disabled. Analytical and functional cookies are deployed with your consent. You may manage your cookie preferences through your browser settings; however, disabling certain cookies may affect platform functionality.
9.1 sstoto retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, to maintain your player account, and to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML/CTF regulatory obligation |
| KYC documents | 5 years from date of verification | AML/CTF regulatory obligation |
| Transaction records | 5 years from transaction date | Financial regulation compliance |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical & usage data | 13 months from collection | Platform security and analytics |
| Self-exclusion records | Duration of exclusion + 10 years | Responsible gaming obligation |
9.2 Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, data will be securely destroyed.
9.3 Where you request deletion of your Personal Data before the end of the applicable retention period, sstoto will delete all data that is not subject to a mandatory retention obligation, and will clearly communicate which categories of data must be retained and for how long.
10.1 sstoto implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our current security infrastructure includes:
10.2 In the event of a data breach that is likely to result in a risk to your rights and interests, sstoto will notify affected players without undue delay and will take all reasonable steps to contain the breach, mitigate its impact, and prevent recurrence.
10.3 While sstoto takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.
11.1 As a player registered on the sstoto platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address for verification purposes.
11.2 sstoto will respond to all verifiable data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you of the extension and the reason for it within the initial 30-day window.
11.3 sstoto will not charge a fee for processing data rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. We will notify you of any applicable fee before proceeding.
12.1 The sstoto platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not attempt to register an account or use the platform in any capacity.
12.2 If sstoto discovers or is notified that Personal Data has been collected from a person under 21 years of age, we will immediately close the relevant account, delete all associated Personal Data (subject to any mandatory regulatory retention obligations), and forfeit any balances held in that account in accordance with our Terms & Conditions.
12.3 Parents and guardians who believe a minor in their care has registered on the sstoto platform should contact us immediately at [email protected]. We will investigate and act within 48 hours of receiving a verified notification.
13.1 sstoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — meaning they affect the types of data collected, the purposes of processing, or your rights as a data subject — we will provide at least 7 days' advance notice by email to all registered players before the revised Policy takes effect.
13.2 The current version of this Privacy Policy, together with its effective date, is always available at sstoto.cam/privacy-policy. We recommend that you review this page periodically. Your continued use of the platform after the effective date of any revision constitutes acceptance of the updated Policy.
13.3 If you do not accept a revised Privacy Policy, you must cease using the platform and request account closure before the effective date of the changes. Upon closure, sstoto will process any eligible Real Money Balance refund in accordance with the Terms & Conditions.
14.1 For all privacy-related inquiries, data rights requests, or concerns regarding this Privacy Policy, please contact the sstoto data protection team using the details below. All communications must be sent in writing to ensure a clear and auditable record.
14.2 To help us process your request efficiently and securely, please include your registered account email address and a clear description of the data right you wish to exercise. We may need to ask for additional information to verify your identity before processing any request — this is a security measure to protect your data from unauthorised access.
14.3 If you feel that your privacy rights have not been adequately addressed through our internal process, you may escalate your concern to the relevant data protection authority or regulatory body under the terms of our international gaming licence jurisdiction.
Acknowledgement: By using the sstoto platform, you acknowledge that you have read this Privacy Policy in full, that you understand how your Personal Data is collected and processed, and that you consent to those practices as described herein. This Privacy Policy was last updated on 1 January 2026.
Our FAQ answers the most common questions about account security, KYC verification, and data handling. For anything not covered, our support team is available around the clock.