rototo Casino & Sportsbook Data Care

This page describes what we collect when you use rototo and how we keep that data protected. Our privacy commitments are simple: we collect only what is necessary to operate your account, process your payments, and comply with law. We do not sell your information to marketers or share it beyond essential service partners.

When you join rototo—whether you access us from Jakarta, Surabaya, Bandung, Medan, or Semarang—we handle your personal details according to the same principles. Your email, identity documents, payment information, and account activity are encrypted and stored securely. We explain exactly how below.

Understanding our privacy practices helps you trust rototo. If anything is unclear, our support team is available to answer questions during business hours.

What We Collect and Why

Account Registration Data

We collect your email address, phone number, full name, and date of birth when you create a rototo account. This information is mandatory—without it, we cannot verify your identity or contact you about your account. We use your email to send account confirmations, password resets, and promotional notifications (which you can disable in settings). Your phone number enables SMS-based verification codes and account recovery if you lose access.

We keep your registration data for the lifetime of your rototo account plus any legally required retention period afterward. If you close your account, we retain minimal identifiers for dispute resolution and regulatory compliance, but delete personal details according to local data-protection laws.

Identity and Address Verification

We at rototo require identity verification before any deposit or withdrawal. You upload a photograph of your national ID card or passport, plus proof of address (utility bill, rental agreement, or bank statement). These documents are encrypted and stored separately from your account profile. We use them only to verify you are who you claim and to prevent fraud and money-laundering.

Our verification team reviews documents manually; we do not use automated facial recognition. Once verification is complete, you can delete uploaded documents from your account settings if you wish. We retain verification records for regulatory compliance, typically 5-7 years depending on jurisdiction.

Payment and Transaction Data

When you deposit or withdraw, we record the amount, timestamp, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), and status. We never store your full payment credentials—e-wallet or bank account numbers are tokenised (converted to secure codes) so we never see them in plain text.

Our payment processors handle the actual transaction; we exchange only encrypted data with them. We retain transaction records for dispute resolution and regulatory reporting. If a payment is disputed, we use these records to investigate fairly.

Gaming Activity and Account Behaviour

We track your rototo account activity—which games you play, when you play, your wagers and winnings, and your balance history. This data helps us calculate your weekly cashback, tier progression, and eligibility for promotions. We use activity data to detect fraud (sudden unusual patterns) and to comply with anti-money-laundering regulations.

We do not use your gaming data for targeted marketing to third parties. We may use anonymised, aggregated statistics—"X thousand users play football on rototo"—for internal analysis, but never individual profiles.

Tokenisation

Converting sensitive data (like payment numbers) into secure codes that we cannot reverse. This protects your payment details from exposure.

Encryption

Converting data into coded form that only authorised systems can read. We use industry-standard encryption for all sensitive information.

Data retention

Keeping data only as long as necessary for the stated purpose, then deleting it. We follow legal retention requirements for regulatory compliance.

Our rototo Data Protection Practices

Third-Party Access and Payment Processors

We share your data only with essential partners. Our payment processors (e-wallet providers and banks) receive only what they need to complete transactions—amount, account identifier, payment method. They cannot see your full personal profile or gaming history. Our hosting provider stores our servers and databases but operates under strict confidentiality agreements; they cannot access or use your data for their own purposes.

We do not share your data with advertisers, data brokers, or analytics vendors. We may be compelled to disclose information if legally required by courts or regulators; we will notify you when possible unless law prohibits it.

International Data Transfers

Our servers may sit outside your jurisdiction (rototo operates across multiple regions). When you use rototo from Jakarta, Medan, or anywhere else, your data may travel internationally. We apply encryption during transit so data is protected in motion. We ensure all jurisdictions where we store data comply with privacy standards equivalent to or stronger than your home country's requirements.

Cookies and Tracking Technologies

We use cookies (small files stored on your device) to remember your login session, language preference, and game settings. These are functional cookies—they make rototo work smoothly for you. We do not use marketing cookies to track your behaviour across other websites.

You can disable cookies in your browser settings, but rototo may not function properly without them. We do not use pixel tracking or similar technologies to monitor you outside our platform.

Your Rights and Account Recovery

You have the right to request a copy of all personal data we hold about you on rototo. Contact our support team and provide identity verification; we will send you a detailed export within a standard processing window. You can also request corrections if any information is inaccurate.

You cannot delete your rototo account data directly—we must retain transaction history for regulatory compliance. However, you can request account closure; we then anonymise or delete non-essential information according to legal retention schedules.

If you forget your rototo login credentials, we verify your identity via email or phone and send you recovery instructions. We will not ask for your password in any message; if you receive such a request, report it to our support team immediately—it is likely a scam.

We at rototo treat your data as a trust. Every safeguard we describe here is active, tested, and audited.

Changes to This Privacy Policy

We may update this policy as our service evolves or regulations change. Material changes (such as new data collection or sharing practices) will be communicated via email and in-app notice. Minor clarifications are posted without individual notification. Your continued use of rototo after an update constitutes acceptance of the new terms.

Contact and Dispute Resolution

Questions about our privacy practices? Contact our support team via live chat, email, or phone during extended business hours. If you believe we have mishandled your data or violated this policy, we investigate all complaints.

We are committed to protecting your privacy on rototo. Transparency is core to that commitment.