Your privacy matters to us. This policy explains exactly what personal information cto188 collects, how it is used, who it may be shared with, and the rights you hold over your own data.
Six principles that define how cto188 handles your personal information every day
We collect only the personal information strictly necessary to provide our services, complete identity verification, and comply with regulatory requirements. We never gather data for its own sake.
All personal data stored on cto188 servers is encrypted using AES-256 — the same standard used by major international banks. Data in transit is protected by TLS 1.3 with 256-bit SSL certificates.
cto188 does not sell, rent, or trade your personal data to third-party marketers or advertising networks. Data is shared only with regulated service providers under strict contractual data-protection obligations.
You can request a complete copy of the personal data we hold about you at any time. You may also request correction of inaccurate data, or erasure of your data subject to applicable legal retention requirements.
cto188 does not use cross-site tracking technologies to follow your activity on third-party websites. Our analytics tools operate exclusively within the cto188 domain and are configured to anonymize IP addresses.
We retain your personal data only for as long as necessary. Account data is held for the duration of your membership plus 5 years for regulatory compliance. Financial transaction records are kept for 7 years per anti-money laundering requirements.
cto188 ("we," "us," "our," or the "Company") is committed to protecting the privacy and personal data of every individual who interacts with our platform at https://cto188.cam (the "Platform"). This Privacy Policy explains how cto188 collects, uses, stores, discloses, and protects personal information provided by users ("you," "your") in connection with your use of the cto188 betting and casino platform.
This Policy applies to all residents of Indonesia who access the cto188 Platform, including registered account holders, visitors who browse without registering, and individuals who contact our customer support team. By accessing or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to our data practices as described herein.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the cto188 Platform as a whole.
For the purposes of this Privacy Policy, the following definitions apply:
The categories of Personal Data that cto188 collects depend on how you interact with the Platform. The following table summarizes the main data categories:
| Data Category | Specific Data Points | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian national identity card (KTP) number, selfie photograph | Required (KYC) |
| Contact Data | Email address, mobile phone number, residential address (province, city, postal code) | Required (Registration) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, account balance history | Required (Transactions) |
| Account Data | Username, encrypted password hash, account creation date, account status, login history, session timestamps, preferred language | Required (Account) |
| Betting and Gaming Data | Bet history, game activity logs, togel (lottery) ticket records, sports market selections, win/loss records, bonus usage history | Required (Platform Use) |
| Technical Data | IP address (anonymized for analytics), device type, browser type and version, operating system, screen resolution, referring URL | Automatic (Collected) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, WhatsApp message logs (support channel only) | When contacting support |
| Responsible Gaming Data | Self-exclusion periods, deposit limit settings, session time preferences, responsible gaming self-assessment responses | Optional (Player-initiated) |
The majority of Personal Data cto188 holds about you is information you have actively provided. This includes details submitted during account registration, information submitted as part of KYC verification, payment method details entered when making deposits or requesting withdrawals, and messages sent to our customer support team.
When you access the cto188 Platform, our servers automatically record certain technical information about your device and session. This data is collected using server logs, cookies, and similar tracking technologies. It includes your IP address (which is anonymized before use in analytics), browser type, device operating system, session duration, pages viewed, and referring URL. This information helps us maintain Platform security, diagnose technical issues, and understand aggregate usage patterns.
In limited circumstances, cto188 may receive Personal Data about you from third-party sources, including:
cto188 processes your Personal Data for the following specific, legitimate purposes:
You can unsubscribe from promotional emails at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting our support team. Opting out of marketing communications does not affect transactional notifications such as deposit confirmations, withdrawal status updates, or security alerts — these remain active for the safety of your account.
cto188 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely on are:
cto188 engages carefully selected third-party service providers to assist in delivering and operating the Platform. These providers act as Data Processors and are permitted to process your Personal Data only according to cto188's documented instructions, under binding data-processing agreements that include appropriate security and confidentiality obligations. Categories of service providers include payment processors, KYC and identity verification providers, cloud hosting providers, customer support platform operators, and cybersecurity service providers.
cto188 may disclose your Personal Data to competent authorities — including regulators, law enforcement agencies, and courts — where required to do so by applicable law, regulation, legal process, or enforceable governmental request. We will, to the extent permitted by law, notify you of any such request before complying, unless prohibited from doing so.
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of cto188's business, your Personal Data may be transferred to the relevant successor entity. We will provide reasonable notice of any such transfer and ensure that the recipient entity is bound by privacy obligations no less protective than those set out in this Policy.
cto188 does not sell, rent, auction, or otherwise commercially exploit your Personal Data to any third party for their independent marketing or advertising purposes. This commitment applies regardless of any compensation arrangement with marketing or affiliate partners.
cto188 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any legal retention obligations. The following retention periods apply:
cto188 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security infrastructure includes:
In the unlikely event of a data breach that poses a material risk to your rights or freedoms, cto188 will notify affected users without undue delay and will take all reasonable steps to contain the breach, assess its scope, and prevent recurrence. We will provide clear information about what data was affected, the likely consequences, and the measures we have taken or plan to take.
cto188 uses the following categories of cookies on the Platform:
You can control cookie settings through your browser's privacy settings. Most browsers allow you to block or delete cookies, and to receive a notification before any cookie is set. Note that disabling certain cookies may affect the functionality of the cto188 Platform, particularly authentication and session management features.
As a user of the cto188 Platform, you hold the following rights with respect to your Personal Data. Requests to exercise these rights may be submitted to our Data Protection contact listed in Section 14 below.
Request a copy of all Personal Data we hold about you, including the categories of data, purposes of processing, and any third parties it has been shared with.
Request correction of any inaccurate or incomplete Personal Data we hold about you. Some corrections require re-submission of KYC documents.
Request deletion of your Personal Data where it is no longer necessary for the original purpose, subject to our legal retention obligations.
Request that we pause processing of your data in certain circumstances, for example while the accuracy of the data is being contested.
Receive a structured, machine-readable copy of Personal Data you have provided to cto188, for transfer to another service provider.
Withdraw any previously given consent to processing — particularly for marketing communications — at any time, without affecting prior lawful processing.
We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases requiring additional time, we will notify you of the delay and provide an estimated completion date. There is no charge for exercising your data rights, except where requests are manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.
The cto188 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you must not use the cto188 Platform or submit any Personal Data to us.
If cto188 discovers or is notified that Personal Data belonging to a person under 21 has been collected, we will immediately suspend the associated account, delete the data, and void any associated transactions. Parents or guardians who believe their child has created a cto188 account should contact our support team immediately using the contact information in Section 14 below.
cto188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform functionality. When we make material changes, we will notify you by posting a prominent notice on the cto188 Platform and, where we hold a valid email address for you, by sending a notification to that address at least 7 days before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the cto188 Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the Platform and may request account closure by contacting our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the cto188 Data Protection team using the following channels:
To protect your privacy, cto188 will verify your identity before processing any data rights request. You may be asked to confirm your registered email address, answer security questions, or provide a copy of a government-issued identity document. This step ensures that we do not disclose, correct, or delete data in response to requests from unauthorized third parties.
Version 3.2 — Effective January 1, 2026. This Privacy Policy was drafted in plain international English for the benefit of cto188's user base across Indonesia, including players in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and Palembang. cto188 reserves the right to amend this Policy at any time. Material changes will be communicated with at least 7 days' notice prior to the effective date.
Our support team is available around the clock to answer any questions about how cto188 handles your personal data. You can also review our full Terms & Conditions or browse our FAQ for quick answers.
cto188 is committed to transparency. 21+ only. Play responsibly.