alototo Platform Privacy Notice

This page describes what we collect when you use alototo and how we keep that data protected. We take your privacy seriously. When you open an account, deposit via DANA, e-wallet, mobile banking, local payment, or bank transfer, or place a wager on football, live-dealer tables, or slots, we collect information necessary to verify your identity, process your payments, and deliver our service fairly.

We do not sell your data to third parties. We do not use your information for marketing without your consent. We encrypt your personal details and store them securely. Our servers may sit outside your jurisdiction, but we comply with data-protection principles and handle your information with care.

This notice explains what data we collect, how we use it, who we share it with, and what rights you have. If you have questions about your privacy at alototo, contact our support team via email, live chat, or phone.

What Data We Collect at alototo

We collect information in several categories. First, identity information: your name, email address, phone number, date of birth, and identity document (KTP, passport, or driver's license). We collect this during account opening and verification. Second, payment information: the payment methods you register (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details). We do not store full card numbers or bank credentials; we store only the last four digits and payment method type.

Third, account activity: your login history, wagers placed, game outcomes, deposits, withdrawals, and account balance. Fourth, device and usage information: your IP address, browser type, device type, and pages visited on alototo. Fifth, communication data: emails and chat messages you send to our support team. We collect this data to operate alototo, verify your identity, process payments, detect fraud, and improve our service.

Identity verification: We collect identity documents to comply with anti-money-laundering regulations and to prevent fraud. This is a legal requirement, not optional.

How We Use Your Data

We use your data to deliver alototo's services. We verify your identity to ensure you are eligible to use our platform and to prevent account takeover. We process your payments using your registered payment methods. We calculate your tier status, cashback, and referral rewards based on your account activity. We monitor for fraudulent activity and suspicious patterns. We respond to your support requests and resolve disputes.

We use your data to improve alototo. We analyze usage patterns to understand which games are popular, which payment methods work best, and where we can improve our service. We may send you service announcements—maintenance windows, policy changes, security alerts—via email or SMS. We do not send marketing emails without your consent.

  • We use your email to send account notifications, password resets, and service updates.
  • We use your phone number for SMS-based password resets and two-factor authentication if you enable it.
  • We use your payment information to process deposits and withdrawals.
  • We use your account activity to calculate tier status and loyalty rewards.
  • We use your device and IP information to detect fraud and unauthorized access.

Third-Party Processors and Data Sharing

We share your data with third parties only when necessary to deliver alototo's services. Our payment processors—the companies that handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment transfers—receive your payment information to process deposits and withdrawals. These processors are bound by confidentiality agreements and data-protection standards.

We may share your data with law enforcement or regulatory authorities if required by law. We may share anonymized or aggregated data (data that does not identify you personally) with analytics partners to understand market trends. We do not sell your personal data to advertisers or data brokers.

At alototo, your data is yours. We protect it, we do not sell it, and we use it only to serve you better.

alototo Editorial Team

How Long We Keep Your Data

We retain your data for as long as your account is active. If you close your account, we retain your data for 12 months to comply with anti-money-laundering regulations and to resolve any outstanding disputes. After 12 months, we delete or anonymize your personal data, except where we are required by law to retain it longer.

Your transaction history is retained for at least 12 months; older records are archived but available upon request. Your identity documents are retained for the duration of your account plus 12 months after closure.

Your Rights Regarding Your Data

You have the right to access your personal data. You can view your profile, account activity, and transaction history in your Account Settings at any time. You have the right to correct inaccurate data. If your name, email, or phone number changes, you can update it in Account Settings.

You have the right to request deletion of your data, subject to legal and regulatory requirements. You have the right to opt out of marketing communications. You can disable email or SMS notifications in your Account Settings. You have the right to data portability—we can provide your data in a portable format if you request it.

Data deletion limits: We cannot delete your data if you have an outstanding withdrawal request or an active dispute. We must retain transaction records for regulatory compliance.

Cookies and Tracking Technologies

We use cookies to remember your login session, your preferences, and your activity on alototo. Cookies are small files stored on your device. We use session cookies (deleted when you log out) and persistent cookies (retained for future visits). We do not use cookies to track you across other websites.

You can disable cookies in your browser settings, but this may affect your ability to use alototo. We do not use third-party tracking pixels or analytics cookies that identify you personally.

How We Protect Your Data

We use encryption to protect your data in transit and at rest. Your password is hashed and salted; we do not store it in plain text. Your payment information is encrypted and stored separately from your account profile. We use firewalls, intrusion detection, and regular security audits to protect our servers.

We limit access to your data to employees and contractors who need it to deliver alototo's services. All staff sign confidentiality agreements. We conduct background checks on employees with access to sensitive data. If we discover a data breach, we notify affected users within 72 hours.

International Data Transfer

Our servers may be located outside Indonesia. When you use alototo, your data may be transferred to and stored in other countries. We ensure that any international transfer complies with data-protection principles and that your data receives the same level of protection as it would in Indonesia.

Contact Us About Privacy

If you have questions about our privacy practices, want to access your data, or want to exercise your rights, contact our support team. We are available via email, live chat, or phone during standard business hours (9 AM to 9 PM Jakarta time, Monday to Sunday). We respond to privacy requests within 14 days.

Service Availability and Jurisdiction

Our services at alototo are available only where local law permits. We do not offer our services in jurisdictions where online wagering is prohibited. Users are responsible for confirming that their access and use of alototo comply with their own jurisdiction's laws and regulations.

This privacy notice applies to all users of alototo, regardless of location. If you are in Jakarta, Surabaya, Bandung, Medan, or Semarang, or any other supported jurisdiction, we apply the same privacy standards and protections.

Your Privacy Matters at alototo

We collect your data to deliver alototo's services fairly and securely. We protect it with encryption, access controls, and regular security audits. We do not sell it, we do not share it without your consent, and we delete it when you no longer need us to keep it. Your rights—to access, correct, and delete your data—are respected and enforced.

If you have concerns about your privacy or want to exercise your rights, our support team is here to help. We are committed to transparency and to earning your trust every day.