iptoto Privacy Policy

1. Introduction

This Privacy Policy explains how iptoto ("we", "our", "us") collects, uses, stores, protects, and discloses personal information obtained from users ("you", "your", "User") of the iptoto online gaming platform located at https://iptoto.cam. This Privacy Policy applies to all information collected through our website, mobile applications (if applicable), customer support channels, and any other services we provide.

At iptoto, we are committed to protecting your privacy and handling your personal data with transparency, integrity, and in accordance with applicable data protection laws including international standards such as GDPR principles, even though our primary user base is in Indonesia. We recognize that when you provide us with information about yourself, you trust us to act responsibly and to protect your information. This Privacy Policy outlines our practices concerning personal data collection, processing, storage, and your rights regarding your information.

By creating an account with iptoto, using our services, or otherwise providing us with your personal information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you should not access or use our services. We encourage you to read this document carefully and contact our customer support team if you have any questions or concerns.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an iptoto account, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name as it appears on your government-issued identification document, date of birth, gender, nationality, and identification document numbers (Indonesian KTP, passport, or driver's license number).
• Contact Information: Email address, phone number (mobile and/or landline), residential address including street address, city, province, postal code, and country.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers if applicable.
• Financial Information: Bank account details including bank name, account holder name, account number, and branch information; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja; payment card information if applicable (processed securely through our payment processors).
• Verification Documents: Copies of government-issued photo identification documents (KTP, passport, driver's license), proof of address documents (utility bills, bank statements, government correspondence), and selfie photographs or video verification submissions for enhanced KYC procedures.
• Communication Content: Any information you provide when you contact our customer support team via live chat, email, WhatsApp, or other communication channels, including the content of your messages and any attachments.

2.2 Information We Collect Automatically

When you access and use the iptoto platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type (mobile phone, tablet, desktop computer), operating system and version (Android, iOS, Windows, macOS), browser type and version, device identifiers (IMEI, advertising ID), screen resolution, and device settings.
• Connection Information: IP address, internet service provider (ISP), connection type (WiFi, mobile data), approximate geographic location based on IP address (country, city, but not precise GPS coordinates without your permission).
• Usage Data: Pages visited on our website, features accessed, games played, betting history including wagers placed and outcomes, deposit and withdrawal transactions, session duration, clickstream data, timestamps of activities, and interaction patterns with our platform.
• Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior, preferences, and to provide personalized features. You can control cookie settings through your browser preferences, though disabling cookies may limit certain functionality of our platform.
• Performance and Analytics Data: Information about platform performance, loading times, error logs, crash reports, and other technical diagnostic data that helps us improve service quality.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method validation, and fraud prevention data from banks, e-wallet providers, and payment gateways we partner with (BCA, BRI, Mandiri, BNI, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Enhanced due diligence information from third-party KYC/AML service providers that verify identity documents, check sanctions lists, perform fraud screening, and validate provided information against official databases.
• Responsible Gaming Partners: If you participate in self-exclusion programs that operate across multiple platforms, we may receive information about your self-exclusion status from responsible gaming organizations.
• Marketing Partners: If you arrive at iptoto through an affiliate link or marketing campaign, we may receive referral information and campaign performance data, though this does not typically include personal information beyond an anonymous referral identifier.

3. How We Use Your Information

iptoto uses the collected information for various purposes related to providing, maintaining, protecting, and improving our services. Specifically, we use your personal information to:

3.1 Provide and Manage Services

• Create and maintain your iptoto account with secure authentication.
• Process deposits and withdrawals through your chosen payment methods.
• Enable access to games, sports betting markets, lottery draws, and other gaming products.
• Record and maintain accurate gaming history, transaction records, and account balances.
• Process and credit bonuses, promotions, tournament prizes, and loyalty rewards.
• Provide customer support and respond to your inquiries, complaints, or requests.
• Send transactional communications including account notifications, deposit confirmations, withdrawal updates, bonus activations, and security alerts.

3.2 Verification and Compliance

• Verify your identity, age (21+ requirement), and address through our KYC procedures.
• Comply with legal and regulatory obligations including anti-money laundering (AML) requirements, counter-terrorism financing (CTF) regulations, and responsible gaming laws.
• Prevent, detect, and investigate fraud, money laundering, collusion, cheating, unauthorized account access, or other illegal activities.
• Verify ownership of payment methods to prevent third-party fraud and ensure withdrawals are made to legitimate account holders.
• Maintain records as required by our licensing authorities and applicable regulations.

3.3 Security and Risk Management

• Monitor account activity for unusual patterns that may indicate security breaches, fraudulent behavior, or problem gambling.
• Protect against technical issues, security vulnerabilities, system abuse, and cyberattacks.
• Implement responsible gaming monitoring to identify players who may be at risk of developing gambling problems and offer appropriate interventions.
• Enforce our Terms and Conditions, including detecting and preventing bonus abuse, multiple account creation, and other violations.

3.4 Service Improvement and Personalization

• Analyze usage patterns and player preferences to improve user experience, platform performance, and game offerings.
• Develop new features, games, and services based on user behavior and feedback.
• Personalize your experience by recommending games, promotions, or content based on your preferences and playing history.
• Conduct internal research, analytics, and statistical analysis to optimize our platform and business operations.

3.5 Marketing and Communications

• Send promotional communications about new games, bonuses, special offers, and tournaments (only if you have consented to receive marketing communications).
• Conduct surveys and request feedback about our services to improve customer satisfaction.
• Administer contests, prize draws, and promotional campaigns in which you choose to participate.

You have the right to opt out of marketing communications at any time by adjusting your account preferences, clicking unsubscribe links in emails, or contacting customer support. Opting out of marketing communications will not affect transactional or service-related communications necessary for platform operation.

4. How We Protect Your Information

iptoto implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

4.1 Technical Security

• Encryption: All data transmission between your device and our servers is protected using industry-standard 256-bit SSL/TLS encryption, the same encryption technology used by major financial institutions worldwide. Sensitive data at rest, including passwords and financial information, is encrypted in our databases using advanced encryption algorithms.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls including 24/7 monitoring, access controls, fire suppression systems, and backup power. We employ firewalls, intrusion detection systems, and regular security patching to protect against cyber threats.
• Access Controls: Personal information is accessible only to authorized iptoto personnel who require access to perform their job functions. All staff with access to personal data are bound by confidentiality agreements and receive security awareness training.
• Account Security Features: We offer two-factor authentication (2FA), login notifications, session monitoring, and withdrawal whitelisting to help you protect your account. You are responsible for maintaining the confidentiality of your password and should use a strong, unique password.

4.2 Organizational Security

• Regular security audits and vulnerability assessments conducted by internal and external security experts.
• Incident response procedures to quickly detect, respond to, and mitigate security breaches if they occur.
• Data minimization practices ensuring we collect only information necessary for stated purposes and retain it no longer than required.
• Vendor security assessments to ensure third-party service providers handling personal data meet our security standards.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security posture and promptly address any identified vulnerabilities. If you become aware of any security vulnerability or breach, please contact us immediately at [email protected].

5. Information Sharing and Disclosure

iptoto does not sell your personal information to third parties. We only share your information in the limited circumstances described below:

5.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks and payment gateways that process deposits and withdrawals (BCA, BRI, Mandiri, BNI, CIMB Niaga, e-wallet providers) receive necessary financial information to execute transactions.
• Identity Verification Services: KYC/AML compliance vendors that verify identification documents and screen against sanctions lists receive identity information necessary for verification.
• Cloud Infrastructure Providers: Companies that host our servers and databases receive encrypted data for storage and processing.
• Customer Support Tools: Live chat platforms and support ticket systems receive information necessary to provide customer assistance.
• Analytics Providers: Services that help us understand user behavior and improve our platform receive aggregated or anonymized usage data.

All service providers are contractually bound to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws.

5.2 Legal and Regulatory Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or other legal processes.
• Cooperate with law enforcement investigations, regulatory inquiries, or government requests.
• Report suspicious transactions to financial intelligence units as required by anti-money laundering regulations.
• Protect and defend our legal rights, property, or the safety of iptoto, our users, or others.
• Enforce our Terms and Conditions or investigate potential violations.

5.3 Business Transfers

If iptoto is involved in a merger, acquisition, asset sale, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, for example when you authorize us to share information with a responsible gaming support organization you wish to contact.

6. Data Retention

iptoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices consider:

• Active Accounts: While your account remains active, we retain your information to provide ongoing services and maintain account history.
• Closed Accounts: After account closure, we retain transaction records, identification documents, and account history for a minimum of 5 years to comply with financial regulations, tax laws, and anti-money laundering requirements.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to honor your request.
• Legal Holds: Information subject to legal holds, investigations, audits, or disputes is retained until the matter is resolved.
• Anonymized Data: We may retain indefinitely or permanently delete anonymized data that cannot be used to identify you for analytical and statistical purposes.

When personal information is no longer needed and retention periods have expired, we securely delete or anonymize it in accordance with our data destruction procedures.

7. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: You can request access to the personal information we hold about you and receive a copy of your data in a structured, commonly used format.
• Right to Correction: You can request correction of inaccurate or incomplete personal information. You can update some information directly through your account settings.
• Right to Deletion: You can request deletion of your personal information, subject to our legal and regulatory retention obligations. Deleting your account will result in permanent loss of access to the platform.
• Right to Restriction: You can request that we restrict processing of your personal information in certain circumstances, such as while we verify accuracy or investigate your concerns.
• Right to Object: You can object to processing of your personal information for marketing purposes or when processing is based on legitimate interests.
• Right to Data Portability: You can request transfer of your personal information to another service provider in a machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time, though this will not affect the lawfulness of processing before withdrawal.

To exercise these rights, please contact our customer support team at [email protected] with your request. We will respond to verified requests within 30 days. Please note that we may need to verify your identity before fulfilling requests to protect your privacy and prevent unauthorized access.

8. Cookies and Tracking Technologies

iptoto uses cookies and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for platform functionality including login, account access, and transaction processing. These cookies cannot be disabled without affecting platform operation.
• Performance Cookies: Collect anonymous information about how users interact with our platform to help us improve performance and identify technical issues.
• Functionality Cookies: Remember your preferences such as language settings, username (if you choose "remember me"), and customization options.
• Marketing Cookies: Track your browsing across our platform to deliver personalized promotions and measure advertising campaign effectiveness.

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling cookies may limit your ability to use certain features of our platform. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9. International Data Transfers

iptoto operates internationally, and your personal information may be transferred to, stored in, and processed in countries outside of Indonesia where our service providers and servers are located. These countries may have different data protection laws than Indonesia. When we transfer your information internationally, we implement appropriate safeguards to protect your data in accordance with this Privacy Policy and applicable law, including the use of standard contractual clauses approved by data protection authorities.

10. Children's Privacy

The iptoto platform is intended only for users who are at least 21 years of age. We do not knowingly collect personal information from anyone under the age of 21. If you are under 21, you must not attempt to create an account or use our services. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the account. Parents or guardians who believe their child under 21 has provided information to iptoto should contact us immediately at [email protected].

11. Changes to This Privacy Policy

iptoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, regulatory, or business reasons. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, provide additional notice via email or prominent notification on our website. Your continued use of iptoto services after changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the iptoto website
• WhatsApp: +62 812 3456 7890

We are committed to resolving privacy concerns fairly and promptly. Our customer support team will work with you to address your questions and investigate any complaints regarding our privacy practices.