dapatotoPrivacy Policy

This page describes what we collect when you use dapatoto and how we keep that data protected. We collect personal information during account creation, verification, deposits, withdrawals, and gameplay to enable our sportsbook, live-dealer, and slot services. We store this data on encrypted servers and share it only with third-party processors and regulators where legally required.

We at dapatoto take your privacy seriously. We do not sell your personal data to marketers or advertisers. We do not share your betting history or payment details with other gaming platforms. Our data retention follows regulatory timelines—most user data is kept for seven years after account closure to comply with anti-money-laundering requirements, then deleted. This policy explains what we collect, why, how long we keep it, and your rights to access or delete it.

If you have questions about this privacy policy or wish to exercise your data rights, contact our data protection team through our support channel listed at the end of this document.

What We Collect and How We Use It

Account Registration and Verification

We collect your email address, password, phone number, full name, and date of birth when you register on dapatoto. We use this information to create your account, verify your identity, send account notifications, and contact you about account security or service updates. During account verification (KYC process), we collect your government-issued ID number, physical address, and banking details. We verify this information against public identity registries to confirm you are who you claim to be and that you meet eligibility requirements under applicable law.

Note: We do not verify age using a third-party service; we rely on the ID number you provide and cross-check it against your stated date of birth. If there is a discrepancy, we may request supplementary documents before approving your account.

Payment and Withdrawal Data

We collect payment information every time you deposit or withdraw from dapatoto. This includes your DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet wallet identifier; your bank account number (if using mobile banking, local payment, online payment, e-wallet transfer); and transaction amounts, timestamps, and outcome (approved or declined). We store this data to process refunds, investigate disputes, and comply with anti-money-laundering regulations. We never store full credit-card numbers or payment credentials on our servers—payment processors handle those directly.

Gameplay and Betting Activity

We collect records of every bet placed, every slot spin, and every live-dealer hand you participate in on dapatoto. This includes match details (Liga 1, Champions League, Piala AFF fixtures), bet types, stake amounts, odds, outcomes, and settlement results. We use this data to calculate your account balance, detect fraud or account abuse, and comply with regulatory audits. Betting records are kept for seven years after account closure to satisfy anti-money-laundering record-keeping requirements.

Technical and Device Data

We collect your IP address, browser type, operating system, device identifiers, and cookie information each time you access dapatoto. We use this data to detect fraud (e.g., multiple accounts from the same IP), enforce account security, and troubleshoot technical issues. We also log login timestamps and locations to flag suspicious access patterns. If you access dapatoto from Jakarta one day and then from Medan the next, our system flags this and may request additional verification.

Communication and Support Data

When you contact our support team—via live chat, email, or phone—we record the conversation, your questions, and our responses. We use these records to resolve disputes, improve customer service, and train support staff. Support conversations may be reviewed by our compliance team if they contain information relevant to account verification, fraud investigation, or regulatory compliance.

Our Data Protection and Third-Party Practices

Data summary

  • We store all data in encrypted databases with access controls
  • Our servers may sit outside your jurisdiction; we comply with applicable data-residency law
  • We share data with payment processors, KYC vendors, and regulators only
  • We do not sell data to third parties or use it for marketing
  • We retain most data for seven years post-closure, then delete

Third-Party Processors

We at dapatoto use third-party services to process payments, verify identities, and detect fraud. These include DANA, e-wallet, mobile banking, local payment, online payment, e-wallet payment networks; KYC vendors; and fraud-detection providers. We share only the minimum data necessary to complete each service. For example, we share your name and ID number with our KYC vendor but do not share your betting history or payment card details. All third-party processors are contractually bound to confidentiality and use data only for the specific service we request.

Regulatory and Law-Enforcement Disclosure

We may disclose your personal data to regulators, law-enforcement agencies, or courts if legally required by subpoena, warrant, court order, or applicable gaming law. This includes disclosures to Indonesian financial authorities, gaming regulators, and anti-money-laundering task forces. We do not have discretion in these disclosures—if served with a legal order, we comply. We will notify you of such a disclosure unless legally prohibited from doing so.

Data Retention and Deletion

We retain account data for the duration of your account. Once you request account closure, we retain most data (name, ID, transactions, betting records) for seven years to satisfy anti-money-laundering compliance and potential dispute resolution. After seven years, we delete or anonymize the data unless law requires longer retention. You can request deletion of specific data (e.g., communications logs) by contacting our data protection team, but we may retain data where legally required. We do not delete betting records or payment history even after account closure, as these are regulatory records.

Cookies and Tracking

We use cookies on dapatoto to remember your login state, store your preferences, and track usage analytics. These are session cookies (deleted when you log out) and persistent cookies (stored on your device for later sessions). We also use pixel trackers to understand how you navigate our platform. You can disable cookies in your browser settings, but this may prevent dapatoto from functioning correctly. We do not use tracking pixels to identify you across other websites—our tracking is limited to dapatoto domain.

Your Rights and Data Access

You have the right to request access to all personal data we hold about you on dapatoto. Submit a data access request via our support channel, and we will provide a copy within 10 business days (or as required by local data-protection law). You can also request correction of inaccurate data or deletion of data where legally permitted. We cannot delete betting records or payment history as these are regulatory requirements, but we can anonymize non-essential personal information. If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data-protection authority.

International Data Transfer

dapatoto servers may be located in jurisdictions outside Indonesia. Your personal data may be transferred to and processed in these jurisdictions. We ensure that all recipient countries provide adequate data protection or that we have contractual safeguards in place. By using dapatoto, you consent to such transfer. If you do not consent to international data transfer, you should not use our platform.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by email or by posting a notice on dapatoto. Continued use of our platform after such notice constitutes acceptance of the updated policy. We will never materially reduce your data protection rights without giving you the option to object or close your account.

Contact dapatoto

If you have questions about this privacy policy, wish to exercise your data rights, or believe we have mishandled your personal information, contact our data protection team through our support channel at dapatoto. You can also reach us via email—see our legal notice page for contact details. We will respond to all data-protection inquiries within 10 business days. If you are unsatisfied with our response, you may lodge a complaint with your local data-protection authority or gaming regulator in your jurisdiction.

↑