papatoto Casino & Sportsbook Data Care

This page describes what we collect when you use papatoto and how we keep that data protected. We gather information to verify your identity, process your deposits and withdrawals, and operate our sportsbook (Liga 1, Piala AFF, Champions League), live-dealer tables, slots, and esports markets. Our commitment is transparency: we explain what we collect, how long we store it, who can access it, and what rights you have over your information.

We at papatoto do not sell your personal data to third parties. We do not share your email, national ID, or payment details with marketing companies or data brokers. We use your information only to run our service, comply with law, and respond to legitimate requests from authorities in jurisdictions where we operate. If you have concerns about how we handle your data, this policy explains your options for requesting access, correction, or deletion.

Our servers and payment processors operate globally; your data may be stored or processed outside Indonesia. We apply the same security standards worldwide. If you reside in Jakarta, Surabaya, Bandung, Medan, or another region where papatoto operates, this policy applies to your account. Users are responsible for understanding and complying with their own jurisdiction's data protection law.

What we collect when you join papatoto

We collect several categories of information. First, account basics: email address, password (encrypted), full name, date of birth, and nationality. Second, identity documents: a photo or scan of your national ID, passport, or driver's license. We use this to verify your identity and comply with anti-money-laundering (AML) regulations. Third, contact information: phone number (optional) if you provide it during registration or customer support interaction.

Fourth, financial information: bank account number or e-wallet handle (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). We need this to process your deposits and withdrawals. Fifth, transaction history: a record of every deposit, withdrawal, bet, spin, and game session on papatoto. This data is tied to your account and helps us prevent fraud, respond to disputes, and generate your account statement.

Sixth, usage data: which games you play, how long you play, your device type (mobile or desktop), your browser, and your IP address. We collect this to improve our service, debug technical issues, and detect unusual account activity (e.g., login from a new geographic location). We do not use this data to build marketing profiles or sell to advertisers.

Account basics

Email, password, name, date of birth, nationality. Required for account creation.

Identity documents

National ID, passport, or driver's license (scanned). Required for account verification and AML compliance.

Financial information

Bank account, e-wallet handle, payment history. Used to process deposits and withdrawals.

Usage data

Games played, session duration, device type, IP address. Used to improve service and detect fraud.

How we use your data on papatoto

We use your information for six main purposes. First, account management: we verify your identity, maintain your account, send you login confirmations, and process password resets. Second, payments: we route your deposits to our payment processors and your withdrawals to your registered bank or e-wallet. We retain transaction records for accounting and dispute resolution.

Third, legal compliance: we report suspicious activity to authorities if required by law, and we respond to court orders or government requests for user data. Fourth, fraud prevention: we monitor for unusual patterns (e.g., rapid withdrawals, login from multiple countries), and we block or flag accounts we suspect of abuse. Fifth, customer support: if you contact us about a game issue, payment problem, or account question, we use your data to investigate and respond.

Sixth, service improvement: we analyze aggregated (anonymized) usage patterns to improve our Liga 1 sportsbook, live-dealer tables, slots, and esports markets. We do not use your individual data for marketing, nor do we sell lists of users to third parties. If we ever change how we use your data, we notify you in writing via email.

Third parties and data processors on papatoto

We share your data with specific third parties only when necessary. Payment processors (e.g., the banks and e-wallet operators behind mobile banking, local payment, and online payment) see your payment details to complete transactions. They are bound by contract to keep your data confidential and use it only to process your transfers. Identity verification vendors may scan your national ID to confirm it is valid — we use reputable third-party services for this task.

We may also disclose your data to law enforcement if we receive a valid legal request (subpoena, warrant, or court order). We do not voluntarily report users to authorities without legal grounds; however, if we detect clear signs of fraud or money laundering, we are obligated to report to relevant regulators in jurisdictions where papatoto operates.

We do not share your data with advertising networks, data brokers, or marketing platforms. We do not sell email lists or user profiles. If a government authority requests your data, we may be required to comply; we will not notify you of such requests if legal restrictions prevent us from doing so. Our standard practice is transparency with users unless law forbids it.

How long we store your data on papatoto

We keep your account data (name, email, identity documents) for as long as your account is active. If you close your account, we retain a subset of information (transaction history, compliance records) for five to seven years to meet tax and AML requirements. After that retention period, we delete or anonymize the records.

Transaction records (deposits, withdrawals, bets) are kept for at least five years. Payment processors (banks, e-wallet operators) also store copies per their own policies; we do not control their retention timelines. If you request deletion of your account, we remove your account login and personal profile, but we cannot delete transaction history stored by our payment partners or regulatory authorities.

Cookies and website analytics data are retained for up to one year. If you disable cookies in your browser, some features on papatoto (like remembering your login session) may not work properly.

Your rights on papatoto

You have the right to access your personal data. Request a copy of your account details, transaction history, and any other information we hold about you. We will provide this within ten business days. You also have the right to correct inaccurate data — if your name is misspelled or your email is wrong, contact us and we will update it.

You have the right to request deletion of your data, subject to legal limits. If you close your account, we remove your login credentials and personal profile. However, we cannot delete transaction history or information we are required by law to retain (tax records, AML compliance data, fraud investigations). You have the right to withdraw consent for non-essential uses of your data — for example, you can ask us to stop analyzing your game preferences for service improvement.

If you believe we mishandled your data or violated your privacy rights, you can lodge a complaint with us in writing via our support team. Contact papatoto support during business hours. You also have the right to appeal to your local data protection authority if one exists in your jurisdiction. Our commitment is to respond to all data access, correction, and deletion requests within the legally required timeframe.

Cookies and website tracking on papatoto

We use cookies (small text files stored on your device) to recognize you when you log in, remember your language preference, and track your session. Essential cookies are required for papatoto to function — without them, you cannot stay logged in. Optional cookies help us understand which games are most popular and which features users find confusing.

You can disable cookies in your browser settings. If you do, you will need to log in each time you visit papatoto, and some features may not work properly. We do not use cookies to track your behavior across other websites — we only track your activity within papatoto. Third-party analytics services (if we use them) see only aggregated data, not individual user identities.

Security and data breach procedures on papatoto

We encrypt your personal data in transit (when transmitted between your device and our servers) and at rest (when stored on our servers). We use industry-standard encryption protocols (HTTPS, TLS) and secure password hashing. We do not store plain-text passwords; we store only encrypted hashes that cannot be reversed.

If we detect a data breach — unauthorized access to user information — we will investigate immediately, contain the breach, and notify affected users within a reasonable timeframe (typically within 10 days). We will also notify relevant authorities if required by law. Our security team regularly tests our systems for vulnerabilities and updates our defenses to address emerging threats.

International data transfers and jurisdiction

Our servers and payment processors are located globally, including outside Indonesia. When you use papatoto, your data may be stored or processed in the United States, Europe, Singapore, or other countries. We apply the same security standards and confidentiality rules everywhere we operate, but data protection laws vary by jurisdiction. Users understand that by using papatoto, their data will be transferred internationally.

We comply with law in each jurisdiction where we operate. If we receive a legal request from Indonesian authorities, a court in Jakarta, or similar bodies, we respond according to Indonesian law. If we receive a request from authorities in another jurisdiction, we respond according to that jurisdiction's law — provided the request is valid and lawful.

Policy changes and contact

We may update this privacy policy from time to time. If we make material changes (e.g., we start sharing data with a new partner, or we extend our retention period), we will notify you via email at least 30 days before the change takes effect. Your continued use of papatoto after the notice period means you accept the updated policy.

If you have questions about how we handle your data, want to request access to your information, or wish to lodge a complaint, contact our support team. We maintain a dedicated privacy contact available during business hours. Requests for data access or deletion will be processed within the legally required timeframe. Our commitment is to respect your privacy rights and to operate papatoto with transparency about how we collect, use, and protect your information.