vitatotoPrivacy Policy

This page describes what we collect when you use vitatoto and how we keep that data protected. We gather personal information only to provide our platform—sportsbook markets covering Liga 1, Piala Indonesia, Piala AFF, and Champions League; live-dealer tables; slot games; and esports coverage. We do not sell your data to advertisers, and we limit access to your information to our team and trusted payment partners who process deposits and withdrawals.

Your privacy matters to us. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or our bank partners (e-wallet, mobile banking, local payment, online payment), your payment details go directly to those providers' systems; we do not store full card numbers or banking credentials. Your account email, verified identity documents, account balance, and transaction history stay on our secure servers and are accessed only by you or our support team when investigating disputes.

We update this policy periodically to reflect changes in our data practices or applicable law. Continued use of vitatoto after any update means you accept the new policy. If you have privacy questions, our support team is available during business hours to clarify our practices.

What we collect and how we use your data on vitatoto

Personal information we gather

When you register on vitatoto, we collect your email address, a password (encrypted), full name, date of birth, and national ID or passport number. During verification, we also request proof of residence (utility bill or government-issued letter). We use these details to confirm your identity, prevent fraud, comply with anti-money-laundering regulations, and ensure you are legally permitted to access our services in your jurisdiction.

We store your verified identity information securely and do not share it with third parties unless required by law or to process your transactions. Your email remains your account contact point; we use it only for account notifications, security alerts, and support communication.

Payment and transaction data on vitatoto

When you deposit, we record the deposit amount, payment method, timestamp, and status (successful or failed). When you withdraw, we log the withdrawal amount, destination payment method, and settlement time. We retain this transaction history so you can review your account activity anytime and so our support team can investigate disputes or unauthorized access claims.

Your payment credentials—bank account numbers, wallet app tokens, card details—are processed directly by our payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). We do not store your full banking credentials; instead, we receive transaction confirmations once payment settles. If you withdraw, funds return to your original deposit source; we do not retain your payment details beyond what is necessary to complete the transaction.

We use encryption for sensitive data

All account credentials, identity documents, and payment confirmations are encrypted in transit and at rest. Our servers maintain standard security protocols to prevent unauthorized access or data breaches.

Game activity and account balance

We track your gameplay—every bet placed on football markets (Liga 1, Piala AFF), live-dealer hands, slot spins, and esports wagers. This data includes the game type, amount wagered, outcome, timestamp, and balance change. We retain this history so you can review your session activity, calculate your net position, and so our support team can verify outcomes if you dispute a result.

Your account balance updates in real time and reflects all deposits, withdrawals, winnings, and losses. We never share your balance or game history with other users; your account remains private and visible only to you and authorized members of our support team.

Our vitatoto data protection commitments

How long we keep your data

We retain your account information and transaction history for the duration of your account and for 7 years after account closure to comply with regulatory and tax requirements. Game history, deposits, and withdrawals remain visible in your dashboard as long as your account is active. After you close your account, we archive your data securely and delete it according to our retention schedule.

If you request account deletion before the 7-year period expires, we anonymize your personal details (name, ID number, address) but retain transaction records required by law. You may request a full data export or deletion at any time; contact our support team to initiate this process.

International data transfer and server location

Our servers may be located outside Indonesia. When you use vitatoto, your data may be stored or processed on servers in other countries or jurisdictions. By using our platform, you consent to this international transfer. We maintain the same data protection standards across all server locations and comply with data privacy laws applicable to our operating jurisdictions.

Cookies and tracking

We use cookies to remember your login status, language preference, and account session. These cookies are stored on your device and expire after a period of inactivity. We do not use cookies to track your behaviour across other websites. Our mobile app uses similar session tokens for the same purpose—keeping you logged in during your visit.

You can disable cookies in your browser settings, but doing so may limit your ability to use vitatoto fully. We do not collect or use analytics cookies for marketing purposes.

Data protection practices on vitatoto

  • We encrypt all sensitive data (passwords, identity info, payment confirmations) in transit and at rest
  • We do not store full banking credentials; payment details go directly to payment providers
  • We retain transaction history and account data for 7 years post-closure to meet regulatory requirements
  • We do not share your data with third parties except payment processors or as required by law
  • You can request account deletion or data export by contacting our support team

Your rights and choices on vitatoto

You have the right to access your personal data and correct any inaccuracies. You can update your email, password, and address information directly in your account settings. If you believe any data is incorrect or incomplete, contact our support team and we will investigate and correct it within 5 business days.

You may request a copy of all data we hold about you in a portable format, or request that we delete your account and associated personal information (subject to legal retention obligations). We process these requests within 30 days. During major holidays like Idul FitriIdul Adhaor Imlekprocessing times may extend slightly; we notify you of any delays.

Third-party processors and payment partners

Our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) handle your payment data according to their own privacy policies. We recommend reviewing their policies to understand how they protect your financial information. We do not control their data practices, but we require all partners to maintain standard security and confidentiality obligations.

We may work with support vendors who access your account information only to resolve technical issues or respond to your support request. All vendors sign data protection agreements and must comply with our privacy standards.

Security incident notification

If we discover a data breach or security incident affecting your account or personal data, we will notify you by email within 48 hours. Our notification will include details of the incident, the data affected, and steps we recommend you take to protect yourself (such as changing your password). We will also notify relevant authorities as required by law.

Contact us about your privacy on vitatoto

If you have privacy questions or concerns, or if you wish to exercise your data rights, contact our support team via the contact form on our platform or by email. Include your account email and describe your request clearly. We respond to all privacy requests within 5–10 business days.

For complaints about how we handle your data, you may escalate to our data protection officer or lodge a complaint with the relevant data protection authority in your jurisdiction.