gtatoto Platform Privacy Notice

This page describes what we collect when you use gtatoto and how we keep that data protected. We at gtatoto collect personal information only to verify your identity, process your deposits and withdrawals, investigate fraud, and communicate account updates. We do not sell your data to third parties, and we do not use it for marketing purposes beyond account servicing.

Our gtatoto privacy approach is simple: collect only what we need, store it securely, and delete it when we no longer have a legal reason to hold it. Your account data—name, date of birth, identity document, email, phone, transaction history—is encrypted and accessible only to authorized staff. We share your information with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet providers and mobile banking, local payment, online payment, e-wallet banks) only to the extent necessary to process your requests. We do not disclose your gaming history or account balance to anyone outside gtatoto unless legally compelled.

Our data centres may sit outside your jurisdiction; however, we apply the same encryption and access controls regardless of server location. If you have questions about how we handle your information, contact our Live Chat support team. This notice applies to all gtatoto accounts, whether accessed via Android app, iOS browser, or desktop.

What we collect through gtatoto and why

We at gtatoto collect the following information when you register and use our platform:

Identity data: Legal name, date of birth, national ID number, passport number, or driver's licence number. We collect this to verify you are of legal age and to prevent fraud and money-laundering.
Contact information: Email address and phone number. We use these to send account notifications, password reset links, withdrawal confirmations, and policy updates.
Payment data: Bank account numbers, e-wallet identifiers, and transaction history. We collect this to process deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet and to process withdrawals.
Gaming activity: Your game history (which games you played, when, how much you wagered, wins and losses). We collect this to settle bets, detect fraud patterns, and comply with tax and regulatory requirements.
Device information: Your phone model, operating system, app version, IP address, and browser type. We collect this to detect fraud, troubleshoot technical issues, and prevent unauthorized access.
Cookies and tracking: We use cookies to keep you logged in and to remember your preferences (e.g., language setting, notification opt-ins). We do not use cookies for advertising or third-party tracking.

We do not collect optional information such as your address, employer, or income unless you volunteer it during account verification. If your local regulator requires additional data for compliance, we request it explicitly and explain why.

How we use your gtatoto data

We use your information for the following purposes:

Account verification and KYC: We cross-check your identity against government records and fraud databases to confirm you are eligible to open an account.
Processing transactions: We use your payment details to process deposits and withdrawals via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers.
Fraud detection: We analyse your gaming patterns, IP address, and device information to detect suspicious activity (e.g., account takeover, money-laundering, collusion).
Game settlement: We use your gaming history to settle bets correctly and resolve disputes about game outcomes.
Account support: We use your contact information to respond to your Live Chat inquiries and send account notifications (e.g., withdrawal approved, verification pending).
Legal compliance: We use your data to comply with tax, anti-money-laundering, and gambling regulations in the jurisdictions where we operate.

We do not use your data for marketing emails, advertisements, or targeting. If you enable push notifications on the gtatoto app, we may send you alerts about Liga 1 matches, Piala AFF tournaments, or new game releases, but only if you opted in. You can disable notifications anytime in your account settings or app settings.

Note: We never ask you for your password via email, phone, or chat. If someone claiming to represent gtatoto asks for your password, do not provide it—contact our support team to report the incident.

Third parties and data sharing under gtatoto policy

We share your data with third parties only when necessary to process your requests or comply with law. These third parties include:

Payment processors: online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet providers receive your account details and transaction amounts when you deposit. mobile banking, local payment, online payment, and e-wallet receive your details to generate Virtual Accounts for bank transfers. These providers have their own privacy policies; review them if you use their services outside gtatoto.
Fraud and identity verification services: We use third-party databases to cross-check your identity during KYC verification. These services do not store your information permanently.
Hosting and data storage providers: Our servers may be hosted by cloud providers outside your jurisdiction. These providers are contractually bound to protect your data and are not permitted to use it for their own purposes.
Regulatory authorities: If a court order, tax authority, or anti-money-laundering regulator requests your information, we comply. We may not notify you of these requests if we are legally prohibited from doing so.

We do not sell your data to advertisers, brokers, or analytics companies. We do not allow third parties to profile you or target you with marketing based on your gtatoto activity.

Data retention and deletion on gtatoto

We retain your gtatoto account data for as long as your account is active, plus a retention period set by law. Typically, we keep account data for 30 days to seven years after account closure, depending on data type and jurisdiction. For example, transaction history is retained for tax purposes (usually five to seven years); temporary device logs are deleted after 90 days.

You can request deletion of your account anytime via Live ChatOnce you submit a deletion request, we anonymize your personal data (name, email, phone, ID number) so it cannot be linked back to you. Your gaming history and transaction records are retained in anonymized form for regulatory compliance but cannot identify you personally. If you are under legal investigation or a withdrawal is pending, we may retain data longer until the matter is resolved.

gtatoto data practices summary

We collect only identity, contact, payment, and gaming data necessary for account operation
We encrypt data in transit and at rest; access is limited to authorized staff
We share data with payment processors and regulators only; we do not sell to third parties
We retain data according to legal requirements; you can request deletion anytime
We use cookies for login and preference storage, not for advertising or third-party tracking

Your rights and choices under gtatoto

You have the right to access your gtatoto account data anytime. Log in to your account and review your personal information, deposit history, and gaming activity. If you spot an error (wrong name, incorrect phone number), contact Live Chat to request a correction.

You have the right to request deletion of your account and associated data. Submit a deletion request via Live Chatand we process it within seven business days. Once deleted, your account cannot be recovered.

You have the right to opt out of optional communications. You can disable push notifications in your app settings, and you can unsubscribe from email alerts by clicking the unsubscribe link in any email we send. However, we will still send critical account notifications (e.g., withdrawal approved, account suspended) even if you opt out, because these are necessary for account security.

You have the right to lodge a complaint if you believe we mishandled your data. Contact our support team via Live Chat with details of the issue. If you are not satisfied with our response, you may contact your local data protection authority or regulatory body (in Jakarta, Surabaya, Bandung, Medan, or elsewhere in your jurisdiction).

Cookies and tracking technology on gtatoto

We use cookies to improve your gtatoto experience. Essential cookies keep you logged in and secure your session. Preference cookies remember your language setting and notification choices. We do not use advertising cookies or allow third parties to track your activity on gtatoto for marketing purposes.

You can disable cookies in your browser settings, but doing so may prevent gtatoto from working properly (you may be logged out frequently). The gtatoto Android app does not use cookies; instead, it uses secure tokens to manage your login session.

We do not track you across other websites or apps. Your gtatoto activity stays within gtatoto and is not shared with Facebook, Google, or other tracking networks.

International data transfers and gtatoto

Our data centres may be located outside your country. When you use gtatoto from Indonesia (Jakarta, Surabaya, Bandung, Medan, or elsewhere) and your data is processed or stored on servers outside Indonesia, we apply the same encryption and security controls as if the servers were domestic. We comply with data protection standards required by Indonesian law and other jurisdictions where we operate.

Contact and amendments to gtatoto privacy policy

If you have questions about this privacy notice, contact us via Live Chat or email. We respond to privacy inquiries within seven business days. We may amend this notice to reflect changes in our practices or legal requirements. If we make material changes, we notify you via email at least 30 days before the change takes effect. Continued use of your gtatoto account after the notification period means you accept the updated notice.

We at gtatoto take your privacy seriously. Your data is protected, limited to necessary purposes, and never sold. If you have concerns, we are here to address them.