Privacy Policy

1. Introduction

mitoto ("we," "us," "our," or "the Company") operates an online gaming platform accessible at https://mitoto.cam. We are committed to safeguarding the privacy of our users and maintaining the highest standards of data protection. This Privacy Policy governs the collection, processing, storage, and use of personal information provided by players ("you" or "the Player") who access or use our services.

This policy applies to all personal data collected through our website, mobile applications, customer service channels, and any other digital touchpoints where mitoto operates. We process personal data in accordance with applicable data protection laws and international privacy standards. By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein.

For residents of Indonesia, we recognize the importance of compliance with Indonesian data protection principles and regulations, including but not limited to Law No. 27 of 2022 concerning Personal Data Protection (UU PDP). We are committed to processing your data fairly, lawfully, and transparently, and we will take all reasonable steps to ensure your personal information is protected against unauthorized access, loss, or misuse.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a mitoto account, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, and nationality as stated on your official identification documents.
• Contact Information: Email address, telephone number, residential address, and postal code.
• Account Credentials: Username, password, and security questions used to access your account.
• Financial Information: Bank account details, e-wallet information, payment card details (if applicable), and transaction history for deposits and withdrawals.
• Verification Documents: Copies of identity documents such as Indonesian National Identity Card (KTP), passport, driver's license, utility bills, bank statements, or other documents required for Know Your Customer (KYC) compliance.
• Communication Data: Content of communications you send to us via email, live chat, telephone, or other customer service channels, including support tickets and feedback.

2.2 Information Collected Automatically

When you access the mitoto platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Log Data: IP address, access times and dates, pages viewed, page response times, download errors, length of visits to certain pages, and page interaction information.
• Location Data: Geographic location data derived from your IP address to ensure compliance with jurisdictional restrictions and to provide localized services.
• Gaming Activity: Detailed records of your betting history, gaming patterns, game preferences, wager amounts, winnings and losses, bonus usage, and session duration.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see Section 6 for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification and fraud prevention data from banks, e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay), and payment gateways.
• Identity Verification Services: Data from third-party identity verification providers used to authenticate your identity and age during KYC procedures.
• Fraud Prevention Services: Information from fraud detection agencies and databases to identify suspicious activity and protect against fraudulent transactions.
• Marketing Partners: Anonymous aggregated data from advertising partners regarding campaign performance and user acquisition sources.

3. How We Use Your Information

mitoto processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your gaming account.
• Processing deposits, withdrawals, and other financial transactions.
• Providing access to games, sports betting markets, and platform features.
• Managing bonuses, promotions, and loyalty program benefits.
• Maintaining accurate records of your gaming activity and transaction history.
• Resolving technical issues and providing customer support.

3.2 Legal and Regulatory Compliance

• Verifying your identity, age, and eligibility to use gaming services (KYC compliance).
• Preventing underage gambling and ensuring users meet the minimum age requirement of 21 years.
• Detecting and preventing fraud, money laundering, and other financial crimes (Anti-Money Laundering compliance).
• Complying with licensing requirements and regulatory obligations imposed by gaming authorities.
• Responding to legal requests from law enforcement agencies, courts, or regulatory bodies.
• Maintaining audit trails and records as required by applicable gaming laws.

3.3 Security and Risk Management

• Monitoring account activity for signs of unauthorized access or suspicious behavior.
• Implementing security measures to protect against hacking, phishing, and cyber attacks.
• Detecting collusion, bonus abuse, and violations of our Terms & Conditions.
• Protecting the integrity of games and ensuring fair play for all users.
• Investigating disputes, complaints, and potential violations of our policies.

3.4 Marketing and Communications

• Sending promotional offers, bonus announcements, and updates about new games or features (with your consent).
• Providing personalized game recommendations based on your preferences and gaming history.
• Conducting market research and customer satisfaction surveys.
• Analyzing platform usage to improve user experience and develop new services.
• Sending important account notifications, security alerts, and policy updates (which you cannot opt out of as they are essential to service provision).

3.5 Responsible Gaming

• Monitoring gaming behavior to identify potential signs of problem gambling.
• Implementing and managing responsible gaming tools such as deposit limits, self-exclusion, and session time limits.
• Providing support and resources to players who may be experiencing gambling-related difficulties.
• Conducting age verification to prevent minors from accessing gambling services.

4. Data Sharing and Disclosure

mitoto does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that facilitate deposits and withdrawals. These entities process your financial information solely for transaction execution.
• Game Providers: Third-party game studios and live casino providers who supply gaming content on our platform. They may collect limited data necessary for game functionality.
• Identity Verification Services: KYC and age verification providers who authenticate your identity documents and confirm your eligibility to use gaming services.
• Cloud Hosting Providers: Companies that host our servers and databases, storing your information on secure cloud infrastructure.
• Customer Support Software Providers: Platforms that facilitate live chat, email support, and customer relationship management.
• Marketing and Analytics Services: Tools that help us analyze platform usage, track campaign performance, and improve user experience through anonymized and aggregated data.

All service providers are contractually bound to protect your data and use it only for the specific purposes we authorize. They are prohibited from using your information for their own marketing purposes or sharing it with other parties.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulatory bodies, or law enforcement agencies when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests.
• Enforce our Terms & Conditions and investigate violations.
• Protect the rights, property, or safety of mitoto, our users, or the public.
• Detect, prevent, or address fraud, security vulnerabilities, or technical issues.
• Cooperate with anti-money laundering investigations or counter-terrorism financing efforts.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving mitoto, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4.4 Consent-Based Sharing

We may share your information with other parties if you provide explicit consent for such sharing. For example, if you opt to participate in a co-branded promotion with a partner organization, we may share relevant information with that partner. You have the right to withdraw such consent at any time.

5. Data Security Measures

mitoto employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

5.1 Technical Safeguards

• Encryption: All data transmissions between your device and our servers are protected using SSL/TLS encryption with 256-bit encryption keys, ensuring data confidentiality during transit.
• Secure Data Storage: Personal information and financial data are stored on encrypted databases with access controls and regular security audits.
• Firewall Protection: Multi-layered firewall systems protect our servers from unauthorized external access and cyber attacks.
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity, potential breaches, or security threats.
• Regular Security Testing: Periodic vulnerability assessments and penetration testing conducted by independent security experts to identify and address potential weaknesses.

5.2 Organizational Safeguards

• Access Controls: Strict role-based access policies ensure that only authorized personnel with legitimate business needs can access personal data.
• Employee Training: Comprehensive data protection training for all staff members who handle personal information.
• Confidentiality Agreements: All employees and contractors are bound by confidentiality obligations and data protection clauses in their contracts.
• Incident Response Plan: Established procedures for responding to data breaches, including notification protocols and remediation measures.

5.3 Your Role in Security

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose strong, unique passwords combining uppercase and lowercase letters, numbers, and special characters.
• Never share your login credentials with anyone, including customer support staff.
• Log out of your account when using shared or public devices.
• Keep your contact information current so we can reach you with security alerts.
• Report suspicious activity or unauthorized access immediately to our support team.

Despite our best efforts, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable legal requirements and work to mitigate any potential harm.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us recognize your device, remember your preferences, and improve your experience on the mitoto platform. We use both first-party cookies (set by us) and third-party cookies (set by our service providers).

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, account access, and security. Cannot be disabled.	Session or up to 1 year
Performance Cookies	Collect anonymous information about how visitors use our site to help us improve performance and user experience.	Up to 2 years
Functional Cookies	Remember your preferences such as language settings, display options, and login information for convenience.	Up to 1 year
Advertising Cookies	Track your browsing habits to deliver personalized promotional content and measure campaign effectiveness.	Up to 13 months

6.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, blocking all cookies may limit your ability to use certain features of the mitoto platform. You can manage cookies through your browser settings or by using our cookie preference center available in your account settings. Note that essential cookies cannot be disabled as they are necessary for the platform to function.

7. Data Retention

mitoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration your account remains active plus any period required for legal compliance.
• Closed Accounts: After account closure, most personal data is deleted or anonymized within 90 days, except for information we are legally required to retain.
• Transaction Records: Financial transaction data and betting history are retained for a minimum of 7 years to comply with anti-money laundering regulations and tax laws.
• KYC Documents: Identity verification documents are retained for 7 years after account closure as required by gaming regulations.
• Marketing Communications: If you unsubscribe from marketing emails, your contact information is retained in a suppression list to ensure we honor your opt-out request.
• Dispute Records: Information related to complaints, disputes, or investigations is retained until the matter is resolved and any applicable appeal period has expired.

8. Your Privacy Rights

Subject to applicable laws, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You can access most of your account information directly through your account dashboard. For comprehensive data requests, contact our support team.

8.2 Right to Rectification

You can update or correct inaccurate personal information through your account settings or by contacting customer support. You are responsible for keeping your information current and accurate.

8.3 Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements. Note that we may need to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

8.4 Right to Restrict Processing

In certain circumstances, you can request that we limit how we use your personal information, such as while we investigate a complaint or verify data accuracy.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. Simply click the unsubscribe link in marketing emails or adjust your communication preferences in account settings.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within 30 days, though complex requests may require additional time. We may need to verify your identity before processing your request to ensure data security.

9. International Data Transfers

mitoto operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information, including:

• Transferring data only to countries recognized as providing adequate data protection standards.
• Using standard contractual clauses approved by data protection authorities.
• Ensuring our service providers implement appropriate technical and organizational measures to protect transferred data.
• Obtaining your explicit consent for data transfers where required by law.

By using mitoto services, you acknowledge and consent to the international transfer of your personal information as described in this policy.

10. Protection of Minors

mitoto services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the legal gambling age. Our age verification procedures are designed to prevent minors from accessing our platform. If you are under 21, you must not use our services or provide any personal information to us.

If we discover that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our systems. Parents or guardians who believe their child has provided personal information to mitoto should contact us immediately so we can remove the data and close any associated account.

11. Changes to This Policy

mitoto reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date.
• Sending an email notification to your registered email address.
• Displaying a prominent notice on our platform when you next log in.

Changes become effective immediately upon posting unless otherwise stated. Your continued use of mitoto services after policy changes constitutes acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Customer Support: Available 24/7 via live chat on our platform

For formal data subject access requests or privacy complaints, please mark your communication as "Data Protection Request" to ensure proper routing to our data protection team. We will acknowledge receipt of your inquiry within 3 business days and provide a substantive response within 30 days.