kiototo Privacy Policy

This page describes what we collect when you use kiototo and how we keep that data protected. We at kiototo take your privacy seriously. Our platform processes personal information—email addresses, payment details, identity documents, and account activity—only to deliver our service and comply with applicable law. We do not sell your data to third parties, and we limit access to what our team and trusted processors need to operate the platform.

Our kiototo service operates in supported jurisdictions where local law permits. When you open an account, verify your identity, deposit funds via DANA, e-wallet, mobile banking, or local payment, or place a bet on Liga 1 matches or live blackjack tables, we collect and store information tied to that activity. This policy explains what we collect, how long we keep it, who can access it, and what rights you have.

We encourage you to read this policy in full. If you have questions about how we handle your data, our contact details appear at the end of this page.

What we collect on kiototo

We collect information in several categories. When you register, we ask for your email address, a password, and basic profile details. During account verification, we request identity documents—a national ID card, passport, or driver's license—and may ask for a proof of address such as a utility bill or bank statement. We photograph or scan these documents and store them securely.

When you deposit funds, we record the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer via mobile banking, local payment, online payment, or e-wallet), the amount, and the timestamp. We also log your IP address, device type, and browser information each time you log in. If you contact our support team—whether by email, live chat, or phone—we keep a record of that conversation.

Our kiototo platform tracks your betting and gaming activity: which games you play (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways, or live tables), how much you wager, and when you withdraw funds. We use this data to detect fraud, prevent money laundering, and comply with anti-money-laundering regulations in your jurisdiction.

How we use your data

Second, we process your payments. When you deposit via mobile banking or local payment, we share your transaction details with the payment processor to complete the transfer. We do not store your full payment card number; instead, we keep a tokenized reference so you can reuse the method without re-entering it each time.

Third, we monitor account activity to detect fraud and prevent money laundering. If we notice unusual patterns—for example, a large deposit followed immediately by a withdrawal to a different bank account—we may ask you to provide additional information or temporarily hold the transaction pending review.

Fourth, we use your data to improve kiototo. We analyze which games are popular, how long users typically play, and where our support team receives the most questions. This helps us decide which new games to add and where to invest in better infrastructure.

Who has access to your data

Our kiototo team members—support staff, compliance officers, and engineers—have access to your account information only when necessary to help you or investigate a problem. We use role-based access controls so that a support agent cannot see your payment history unless they are handling a withdrawal dispute.

We also work with third-party processors. Payment processors (online payment, e-wallet, mobile banking, local payment, and our banking partners) receive your transaction details to complete deposits and withdrawals. Our hosting provider stores our servers and databases. Our email service provider sends you account notifications. Each of these partners has signed a data-processing agreement with us, meaning they agree to protect your data and use it only for the purpose we specify.

We may disclose your data if required by law—for example, if a court orders us to provide information for a criminal investigation, or if a financial regulator in Jakarta, Surabaya, or Bandung requests it. We will notify you of such requests unless we are legally prohibited from doing so.

Cookies and tracking

Our kiototo website uses cookies to remember your login session and your language preference. These are essential cookies; without them, you would have to log in every time you visit. We also use analytics cookies to count how many visitors we receive and which pages are most popular. These cookies do not identify you personally; they simply help us understand traffic patterns.

You can disable cookies in your browser settings, but doing so may prevent kiototo from functioning properly. We do not use third-party tracking pixels or retargeting ads.

How long we keep your data

We retain your account information for as long as your account is active. If you close your account, we keep your data for seven years to comply with anti-money-laundering regulations. After seven years, we delete or anonymize your personal information unless we are required by law to retain it longer.

Transaction records are kept for at least five years. Identity documents (scans of your ID or passport) are retained for the duration of your account plus seven years.

Your rights on kiototo

Depending on your jurisdiction, you may have the right to request a copy of the personal data we hold about you, to correct inaccurate information, or to request deletion of your data (subject to legal retention requirements). To exercise these rights, contact our support team using the details below. We will respond within thirty days.

You also have the right to object to certain uses of your data—for example, if we use your email for marketing purposes, you can opt out. You can update your communication preferences in your kiototo account settings at any time.

Security and data protection

We at kiototo use industry-standard encryption to protect your data in transit and at rest. Our servers are hosted in secure data centres with physical access controls. We conduct regular security audits and penetration testing to identify and fix vulnerabilities. Our team members sign confidentiality agreements and receive training on data protection.

However, no system is completely secure. If we discover a data breach, we will notify you and relevant authorities as required by law.

Contact kiototo

If you have questions about this privacy policy or how we handle your data, please contact our support team. You can reach us by email at [email protected] or through the live chat on our website. Our support team is available in English and responds within one business day. We also accept requests by post to our registered office address, which is available on our legal notice page.