swtoto is committed to protecting your personal data with the same rigour we apply to platform security. This Privacy Policy explains precisely what information we collect, how we use it, who we may share it with, and what rights you hold over your own data as a swtoto member.
Six foundational principles that govern how swtoto handles the personal information of every member on the platform.
Every connection between your device and swtoto's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Indonesia's tier-1 banking institutions including BCA and Mandiri. Your credentials, financial details, and session data are never transmitted in plain text.
swtoto does not sell, rent, or trade your personal information to any unaffiliated third party for their own marketing purposes — ever. Data sharing is strictly limited to regulated service providers (payment processors, KYC verification partners) who operate under binding confidentiality obligations.
As a swtoto member, you retain the right to access, correct, port, and request deletion of your personal data at any time. Requests are processed within 30 days. Where data must be retained for legal or regulatory compliance, we will notify you clearly of that obligation and the expected retention period.
swtoto operates on a data minimization principle — we collect only the personal information that is strictly necessary to provide our services, verify identity, process payments, and meet our regulatory obligations. We do not collect data speculatively or build commercial profiles for sale.
All member data is stored on access-controlled, encrypted servers with strict internal authorization policies. Access to personal data within swtoto is restricted to personnel who require it to perform their specific job function. Audit logs track all data access events.
In the unlikely event of a data security incident that materially affects your personal information, swtoto will notify affected members via their registered email address within 72 hours of becoming aware of the breach, in line with internationally recognized data incident response standards.
Please Read Carefully: This Privacy Policy forms part of the binding agreement between you and swtoto. By registering on or using the swtoto platform, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. This policy should be read in conjunction with our Terms & Conditions.
1.1 — swtoto ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://swtoto.cam. This Privacy Policy describes how swtoto collects, processes, stores, and protects personal data belonging to individuals who visit, register on, or otherwise interact with our platform.
1.2 — swtoto serves members primarily in Indonesia. Our platform is designed for Indonesian players who expect the same level of data protection they would receive from a tier-1 international financial services brand. We apply internationally recognized privacy standards as our baseline, including principles drawn from the General Data Protection Regulation (GDPR) and comparable frameworks, even where such regulations are not directly applicable to Indonesian residents.
1.3 — This policy applies to all personal data processed by swtoto in connection with the provision of our services, including sports betting markets, togel (Indonesia's traditional numbers lottery) products, live casino, slot games, and all associated platform features. It applies whether you access swtoto via a desktop browser, mobile browser, or any future application we may release.
1.4 — swtoto acts as the Data Controller with respect to the personal data of our members. We determine the purposes and means of processing personal data and are responsible for ensuring that processing activities are lawful, fair, and transparent.
The following defined terms are used throughout this Privacy Policy and carry the meanings set out below.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person. This includes but is not limited to names, identity document numbers, email addresses, phone numbers, IP addresses, device identifiers, and financial account details. |
| "Processing" | Any operation or set of operations performed on personal data, whether by automated or manual means — including collection, recording, organization, storage, retrieval, use, disclosure, and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. swtoto is the Data Controller for all member personal data collected through the platform. |
| "Data Processor" | A third party that processes personal data on behalf of swtoto, under written instructions and subject to binding confidentiality and security obligations. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data. Where swtoto relies on consent as a legal basis, you have the right to withdraw it at any time. |
| "KYC Data" | Identity and document verification data collected as part of swtoto's Know Your Customer process, including government-issued ID documents, proof of address, and payment method confirmation. |
| "Cookies" | Small text files stored on your device by the swtoto platform that help us recognize returning visitors, maintain session state, and analyze platform usage patterns. |
When you create a swtoto account, we collect the following information as a mandatory requirement of the registration process:
To comply with our licensing obligations and to prevent fraud and money laundering, swtoto requires identity verification before processing with drawals. KYC data collected includes:
swtoto records all financial transactions conducted on the platform, including:
When you access the swtoto platform, our servers automatically collect certain technical information necessary for platform operation and security monitoring:
When you contact swtoto's support team via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages, timestamps, and any attachments provided. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
Where you voluntarily set responsible gaming limits (deposit caps, loss limits, session time-outs, or self-exclusion), swtoto records those preferences and the dates on which they were applied or modified. This data is used exclusively to enforce your chosen restrictions and to monitor for indicators of harmful gambling patterns.
Data Minimization: swtoto collects only the personal data that is strictly necessary for the specific, legitimate purposes described in this policy. We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) beyond what is incidentally present in KYC documents that you voluntarily submit.
4.1 — swtoto processes personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which we use your data and the corresponding legal basis under applicable data protection law.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC data |
| Identity and age verification (21+ compliance) | KYC data, date of birth |
| Processing deposits and withdrawals | Transaction data, payment method details |
| Fraud prevention and anti-money laundering | Transaction data, KYC data, technical data |
| Platform security and access control | Technical data, device data, IP address |
| Customer support and dispute resolution | Communications data, transaction data |
| Responsible gaming monitoring and enforcement | RG preferences, transaction data, session data |
| Regulatory reporting and licensing compliance | All categories as required by applicable regulation |
| Platform performance analysis and improvement | Technical data, session data (aggregated and anonymized) |
| Promotional communications (where consented) | Email address, betting preferences, promotion history |
4.2 — swtoto will not use your personal data for any purpose that is incompatible with those set out above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.
4.3 — Where we send you marketing communications — such as bonus offers, seasonal promotions related to Indonesian events like Idul Fitri, Ramadhan, or Indonesian Independence Day, or new product announcements — we will only do so where you have provided prior consent to receive such communications. You may withdraw that consent at any time by contacting our support team or using the unsubscribe mechanism included in every marketing email.
5.1 — swtoto relies on one or more of the following legal bases when processing your personal data:
5.2 — Where swtoto processes your personal data on the basis of legitimate interests, you have the right to object to that processing. Any such objection should be submitted in writing to [email protected]. swtoto will assess the objection and respond within 30 days.
6.1 — swtoto does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Data sharing is limited to the following categories of recipients, each of which is bound by strict confidentiality and data security obligations:
To facilitate deposits and withdrawals, swtoto shares necessary transaction and identity data with payment processing partners who support IDR transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors receive only the minimum data required to complete the transaction and are prohibited from using that data for any other purpose.
swtoto engages regulated third-party KYC service providers to assist with identity document verification. These partners process KYC data under binding data processing agreements and are not permitted to retain or use your documents beyond the verification scope.
As a licensed and regulated international gaming operator, swtoto may be required to disclose certain member data and transaction records to our licensing authority or to regulatory bodies upon lawful request. Such disclosures are made only to the extent required by applicable law or regulatory mandate.
swtoto will disclose personal data to law enforcement agencies, courts, or government bodies where required by law, where necessary to protect the safety of individuals, or where required in connection with the prevention or investigation of fraud, money laundering, or other criminal activity.
swtoto's legal counsel, auditors, and professional advisors may access personal data on a need-to-know basis in connection with the provision of their professional services. All such parties are bound by confidentiality obligations.
No Unauthorized Sharing: Any disclosure of your personal data by swtoto that falls outside the categories described in this section would constitute a breach of this Privacy Policy. If you believe your data has been improperly shared, please contact us immediately at [email protected].
7.1 — swtoto uses cookies and similar tracking technologies to operate the platform effectively, maintain session continuity, and improve the member experience. The following cookie categories are used:
7.2 — You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the swtoto platform. Removing analytics cookies will not affect your ability to place bets or manage your account.
7.3 — swtoto does not use advertising tracking cookies or cross-site tracking pixels that profile your behavior across other websites for commercial advertising targeting purposes.
8.1 — swtoto retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to overriding legal and regulatory retention requirements. The following retention periods apply as a general guide:
8.2 — Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where anonymization is used, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregate statistical purposes.
9.1 — swtoto implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
9.2 — While swtoto takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You play an important role in account security by keeping your credentials confidential, using a strong and unique password, and enabling two-factor authentication where offered.
Security Tip: swtoto will never contact you by email, live chat, or phone to ask for your account password, one-time verification codes, or full payment card details. If you receive any such request purportedly from swtoto, treat it as fraudulent and report it to [email protected] immediately.
10.1 — As a swtoto member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 days and may request identity verification before processing your request.
10.2 — Where swtoto is unable to fulfill a data rights request — for example, because the data must be retained to comply with anti-money laundering law — we will explain the reason clearly in writing.
11.1 — The swtoto platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The platform contains content related to gambling, which is not appropriate for minors.
11.2 — If swtoto becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and notify the individual accordingly.
11.3 — If you are a parent or guardian and believe that your child has registered on swtoto or provided us with their personal information without your knowledge, please contact us immediately at [email protected] and we will take prompt action to investigate and address the matter.
21+ Strictly Enforced: swtoto operates mandatory age verification for all members. Age verification documents are reviewed by our KYC team and, where available, by automated verification systems. Any attempt to bypass age verification constitutes a breach of our Terms & Conditions and may result in account closure and reporting to relevant authorities.
12.1 — The swtoto platform integrates with third-party service providers to deliver certain features, including game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft; payment processing partners supporting BCA, BRI, BNI, Mandiri, and major Indonesian e-wallets; and KYC verification providers.
12.2 — Each third-party provider that processes member personal data on swtoto's behalf does so under a written data processing agreement that requires the provider to maintain appropriate technical and organizational security measures and to use personal data only for the purposes specified by swtoto.
12.3 — swtoto is not responsible for the privacy practices of third-party websites or platforms that are not operated by swtoto. This Privacy Policy applies exclusively to the swtoto platform at https://swtoto.cam. We do not include external links to other websites on this platform.
12.4 — Game providers may retain anonymized, non-personally identifiable game interaction data for the purpose of game performance analytics and provably fair auditing. This anonymized data does not constitute personal data for the purposes of this Privacy Policy.
13.1 — swtoto operates internationally and some of our service providers — including game studios, KYC verification platforms, and cloud infrastructure partners — may be located in jurisdictions outside Indonesia. Where personal data is transferred to a jurisdiction that does not have equivalent data protection standards, swtoto takes appropriate safeguards to ensure that your data remains protected to an equivalent standard, including:
13.2 — By using the swtoto platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Indonesia as described in this section. swtoto will always ensure that such transfers are conducted in accordance with applicable data protection requirements and that your rights are maintained throughout.
14.1 — swtoto reserves the right to update or amend this Privacy Policy at any time. The revised policy will be published on this page with an updated "Last Updated" date. Where changes are material — for example, where we introduce a new processing activity or change how we share data with third parties — swtoto will notify affected members via their registered email address with a summary of the key changes and a link to the updated policy.
14.2 — Your continued use of the swtoto platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised policy, you should cease use of the platform and contact support to initiate account closure.
14.3 — The current, authoritative version of this Privacy Policy is always available at https://swtoto.cam/privacy-policy. Previous versions are archived and available upon written request.
15.1 — For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact swtoto's Data Protection team through the following channels:
15.2 — If you believe that swtoto has failed to handle your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a formal complaint. Please submit your complaint in writing to [email protected] with full details of your concern. swtoto will acknowledge the complaint within 48 hours and provide a substantive response within ten (10) business days.
15.3 — If you remain dissatisfied following swtoto's internal complaints process, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.
Document Version: This Privacy Policy was last reviewed and updated on January 1, 2026. It supersedes all previous versions of the swtoto Privacy Policy. The English-language version of this document is the authoritative version and shall prevail in the event of any inconsistency with any translated adaptation.
Our support team is available around the clock to assist with data rights requests, privacy concerns, or any question about how swtoto handles your information. You can also explore our other policy documents below.
21+ only. Please gamble responsibly. Responsible Gaming tools are available free of charge to all swtoto members.