Privacy Policy

1 Definitions

The following defined terms apply throughout this Privacy Policy:

• "Platform" — The wototo website at https://wototo.cam, all associated subdomains, mobile-optimized pages, and any software applications operated by wototo.
• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identification number, residential address, email address, phone number, financial data, and device identifiers.
• "Player" / "You" / "Your" — Any individual who visits, registers on, or uses the Platform.
• "Data Controller" — wototo, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — Any third-party service provider that processes Personal Data on behalf of wototo, subject to written data processing agreements.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "KYC" — Know Your Customer; the identity and age verification process required of all Players prior to withdrawal of funds.
• "Cookies" — Small text files placed on your device by the Platform to enable certain functions and to collect usage data.

2 Scope & Application

2.1 This Privacy Policy applies to all Personal Data collected by wototo in connection with the operation of the Platform and the provision of online betting and gaming services to Players, including Players who are residents of Indonesia.

2.2 This Policy covers data collected through the following channels:

• Registration and account management forms on the Platform.
• KYC document submissions and identity verification processes.
• Deposit and withdrawal transactions via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Live chat, email, and telephone communications with our support team.
• Automated data collected via cookies, log files, and analytics tools during your use of the Platform.
• Promotional activities, competitions, surveys, and feedback submissions.

2.3 This Policy does not apply to third-party websites, applications, or services that may be linked from the Platform. wototo does not control the privacy practices of third parties and encourages Players to review the privacy policies of any external services they use.

3 Data We Collect

3.1 wototo collects the following categories of Personal Data:

3.2 wototo does not collect sensitive Personal Data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond liveness checks required for KYC), or health data, except where explicitly required by applicable laws or with your express written consent.

4 How We Collect Data

4.1 Directly from You: The majority of Personal Data we hold is provided by you directly when you register an account, complete the KYC process, make financial transactions, contact our support team, or participate in promotions.

4.2 Automatically: When you access or use the Platform, we automatically collect Technical Data through cookies, web beacons, pixel tags, server log files, and similar tracking technologies. This data is collected to ensure the Platform functions correctly and to improve your user experience.

4.3 From Third Parties: We may receive Personal Data about you from the following third-party sources:

• Payment Providers: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other approved payment partners may share transaction confirmation data with us.
• Identity Verification Services: Third-party KYC and anti-fraud services may provide verification status and risk-assessment data.
• Fraud Prevention Services: We may cross-reference your data with fraud databases and sanctions lists to comply with anti-money-laundering obligations.
• Analytics Providers: Aggregated, anonymized usage data may be received from analytics service providers to help us understand Platform performance.

5 Purposes of Processing

5.1 wototo processes your Personal Data for the following specific purposes:

1. Account Creation and Management: To register your account, verify your identity and age (21+), and maintain your account in good standing.
2. Service Delivery: To provide you with access to betting markets, casino games, live dealer tables, and all other features of the Platform.
3. Payment Processing: To process deposits and withdrawals through your chosen Indonesian bank or e-wallet, and to maintain accurate financial records.
4. KYC and Compliance: To fulfill our legal obligations regarding identity verification, anti-money-laundering (AML) checks, and responsible gaming requirements.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other prohibited conduct as defined in our Terms & Conditions.
6. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 support channels.
7. Marketing and Promotions: Subject to your preferences and applicable opt-in requirements, to send you information about bonuses, promotions, new game launches, and seasonal offers relevant to the Indonesian market.
8. Platform Improvement: To analyze usage patterns, identify technical issues, and improve the features, performance, and security of the Platform.
9. Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and to enforce self-exclusion, deposit limit, and session limit tools.
10. Legal Obligations: To comply with any applicable legal, regulatory, or governmental requirements, including cooperation with law enforcement where legally required.

6 Legal Basis for Processing

6.1 wototo processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform our contract with you (the Terms & Conditions), including account registration, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering regulations, age verification obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time by adjusting your account notification settings or by contacting our support team.

7 Data Sharing & Disclosure

7.1 wototo does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below:

• Payment Service Providers: We share financial data with Indonesian banks and e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) strictly to process your deposit and withdrawal transactions.
• Identity Verification Partners: We share identity documents and personal details with licensed KYC and AML service providers solely for the purpose of verifying your identity and age, and for conducting fraud and sanctions screening.
• Game Studios and Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive your account identifier and session data to facilitate gameplay and resolve game disputes.
• Analytics and Technology Providers: Anonymized or pseudonymized Technical Data may be shared with analytics partners to help us understand Platform performance and user behavior.
• Legal and Regulatory Authorities: We may disclose your Personal Data to law enforcement agencies, regulatory bodies, or governmental authorities where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of wototo, our Players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of wototo's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7.2 All third-party Data Processors engaged by wototo are bound by written data processing agreements that require them to process your Personal Data only on our documented instructions, to implement appropriate technical and organizational security measures, and to refrain from using your data for any purpose beyond those specified by wototo.

8 Data Retention

8.1 wototo retains your Personal Data for as long as your account remains active and for a period thereafter as required to fulfill the purposes described in this Policy and to comply with our legal obligations.

8.2 The following retention periods apply as general guidelines:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to meet our AML and KYC record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• Gameplay Records: Retained for a minimum of 3 years from the date of each gaming session or bet placement.
• Customer Support Communications: Retained for a minimum of 2 years from the date of the last communication in each support thread.
• Marketing Preferences: Retained until you withdraw consent or close your account, plus 1 year for audit purposes.
• Technical and Log Data: Retained for up to 12 months from the date of collection, unless a longer retention period is required for an active investigation or legal proceeding.

8.3 Upon expiry of the applicable retention period, wototo will securely delete or permanently anonymize your Personal Data so that it can no longer be associated with you as an individual. Where complete deletion is not immediately technically feasible (e.g., data stored in encrypted backup archives), your data will be isolated from further active processing and deleted at the earliest practicable opportunity during the next scheduled backup cycle.

9 Data Security

9.1 wototo takes the security of your Personal Data seriously. We implement a comprehensive set of technical and organizational measures designed to protect your data against unauthorized access, disclosure, alteration, or destruction.

9.2 Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the wototo Platform is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encryption at Rest: Personal Data and financial records stored on wototo servers are encrypted at rest. Sensitive fields such as bank account numbers and national identification numbers are tokenized and never stored in plain text.
• Access Controls: Access to Personal Data is restricted to authorized wototo personnel and service providers on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication (MFA): Internal systems containing Personal Data are protected by multi-factor authentication requirements for all authorized staff.
• Intrusion Detection and Monitoring: Our infrastructure is monitored 24/7 for suspicious activity, unauthorized access attempts, and potential security incidents.
• Regular Security Audits: wototo conducts periodic penetration testing and independent security audits to identify and remediate vulnerabilities in our systems and processes.
• Data Breach Response: We maintain an internal data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Players without undue delay and take all reasonable steps to contain and remediate the incident.

9.3 While wototo employs robust security measures, no online platform can guarantee absolute security. You also play an important role in keeping your account secure by choosing a strong, unique password, enabling any available two-step verification options, and never sharing your login credentials with third parties.

10 Cookies & Tracking Technologies

10.1 wototo uses cookies and similar tracking technologies to operate the Platform effectively, to remember your preferences, to analyze usage patterns, and to support fraud detection and responsible gaming monitoring.

10.2 We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as session management, secure login, and payment processing. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and Analytics Cookies: These cookies collect anonymized information about how Players use the Platform, such as which pages are visited most frequently and where errors occur. This data helps us improve Platform performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember choices you have made — such as your preferred language, display settings, and notification preferences — to provide a more personalized experience.
• Targeting and Marketing Cookies: Subject to your consent, these cookies track your browsing activity to allow us to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. You may opt out of these cookies at any time via your account settings.

10.3 You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note, however, that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10.4 In addition to cookies, wototo may use web beacons, pixel tags, and similar technologies in our marketing emails to track whether those emails have been opened and whether any links within them have been clicked. This data helps us measure the effectiveness of our communications and tailor future messages to your interests.

11 Your Data Rights

11.1 Subject to applicable laws and our legitimate operational and legal obligations, you have the following rights in respect of your Personal Data held by wototo:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is processed. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete Personal Data held about you. You may update certain data directly through your Account settings; other corrections may require verification.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations such as AML record-keeping requirements.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data where we rely on legitimate interests as our legal basis, and to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.2 To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and fulfill it within 30 calendar days, or notify you if an extension is required. We may need to verify your identity before processing your request.

12 Children & Minors

12.1 The wototo Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

12.2 During the registration and KYC process, all Players are required to confirm their date of birth and to submit valid government-issued identity documentation confirming that they meet the minimum age requirement. Any account found to belong to an individual under 21 years of age will be immediately suspended, all associated funds will be refunded to the verified payment source, and all data collected in connection with that account will be securely deleted.

12.3 If you are a parent or guardian and you have reason to believe that a minor in your care has registered on the wototo Platform or has been exposed to our services, please contact us immediately at [email protected]. We will investigate and take prompt remedial action.

12.4 We also recommend that parents and guardians use parental control software to prevent minors from accessing online gambling platforms. Information on parental control tools is available on our Responsible Gaming page.

13 International Data Transfers

13.1 wototo operates as an internationally licensed online betting platform. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside of Indonesia, including countries where data protection laws may differ from those applicable in your jurisdiction.

13.2 Where such transfers occur, wototo ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Transfer only to countries or territories that provide an adequate level of data protection as recognized by relevant international standards.
• Implementation of contractual safeguards — such as standard data protection clauses — with all recipients of your Personal Data in third countries.
• Ensuring that all third-party Data Processors located outside Indonesia are contractually bound to the same data security and confidentiality obligations as those applied within Indonesia.

13.3 By using the wototo Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the safeguards outlined above.

14 Changes to This Policy

14.1 wototo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to Players by email to the address registered on their account, or via a prominent notice on the Platform, at least 7 calendar days before the updated Policy takes effect.

14.2 The "Last Updated" date displayed at the top of this page reflects the date on which the most recent revision to this Privacy Policy was made. We encourage you to review this Policy periodically to remain informed about how wototo protects your Personal Data.

14.3 Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended terms, you must stop using the Platform and may request account closure in accordance with the provisions of our Terms & Conditions.

15 Contact & Data Enquiries

15.1 If you have any questions, concerns, or complaints about this Privacy Policy or the way in which wototo processes your Personal Data, please contact us through the following channel:

15.2 When contacting us regarding a privacy matter, please include your registered account username, the email address associated with your wototo account, and a clear description of your query or concern. This will allow us to locate your records efficiently and respond as accurately and promptly as possible.

15.3 wototo is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to your complaint, you may have the right to escalate your concern to a relevant data protection authority or regulatory body in your jurisdiction.