Privacy Policy

1. Introduction

This Privacy Policy applies to all users of the kptoto platform, accessible at https://kptoto.cam, and governs the collection, processing, storage, and disclosure of personal information provided by users during account registration, gameplay, payment transactions, and general website usage. kptoto operates as an online gambling platform serving Indonesian players with sports betting, live casino games, and togel lottery services. We take our data protection responsibilities seriously and comply with applicable international data protection standards and best practices.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of kptoto's services. If you have any questions about this policy or how we handle your information, please contact our Data Protection Officer at [email protected].

2. Information We Collect

kptoto collects several categories of personal information to provide our services, verify your identity, process transactions, prevent fraud, and comply with legal obligations. The information we collect includes:

2.1 Personal Identification Information

When you register for a kptoto account, we collect the following mandatory information:

• Full Legal Name: Your complete name as it appears on your government-issued identification document.
• Date of Birth: To verify you meet the minimum age requirement of 21 years.
• Government ID Number: Your Indonesian KTP (Kartu Tanda Penduduk) number, passport number, or driver's license number for identity verification.
• Residential Address: Your complete current address in Indonesia, including street, city, province, and postal code.
• Email Address: A valid email address for account communications and password recovery.
• Mobile Phone Number: Your Indonesian mobile phone number for account security and two-factor authentication.
• Username and Password: Your chosen login credentials (we store passwords in encrypted form only).

2.2 Financial Information

To process deposits and withdrawals, we collect payment-related information including:

• Bank Account Details: Bank name, account number, and account holder name for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI).
• E-Wallet Information: Registered phone numbers or account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction History: Records of all deposits, withdrawals, wagers, wins, and account balance changes.
• Payment Method Verification: Documentation proving ownership of payment methods, such as bank statements or e-wallet screenshots showing your name and account number.

2.3 Verification Documents

As part of our Know Your Customer (KYC) procedures and anti-money laundering compliance, we may collect:

• Clear photographs or scanned copies of your government-issued ID (KTP, passport, or driver's license).
• Proof of address documents such as utility bills, bank statements, or government correspondence showing your name and residential address dated within the last three months.
• Selfie photographs holding your identification document to verify identity authenticity.
• Source of funds documentation if required for large transactions or suspicious activity investigations.

2.4 Technical and Usage Data

We automatically collect certain technical information when you access kptoto's platform:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• IP Address and Location: Your IP address and approximate geographic location (city level) derived from your IP address.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies to maintain login sessions, remember preferences, and analyze usage patterns.
• Gameplay Data: Records of games played, bets placed, wins and losses, game preferences, and gambling behavior patterns.
• Website Interaction: Pages visited, features used, time spent on site, navigation paths, and referral sources.
• Customer Support Communications: Records of your communications with our support team via live chat, email, or other channels.

3. How We Use Your Information

kptoto processes your personal information for the following legitimate purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your kptoto account.
• Processing your deposits, withdrawals, wagers, and payouts.
• Providing customer support and responding to your inquiries.
• Managing your participation in promotions, bonuses, and loyalty programs.
• Sending you important service notifications regarding account activity, policy changes, and security alerts.

3.2 Identity Verification and Fraud Prevention

• Verifying your age to ensure compliance with the 21+ age requirement.
• Confirming your identity to prevent account fraud and identity theft.
• Detecting and preventing multiple account creation, bonus abuse, collusion, and other prohibited activities.
• Monitoring for suspicious betting patterns, money laundering, or other illegal activities.
• Protecting the integrity of our gaming platform and ensuring fair play for all users.

3.3 Legal and Regulatory Compliance

• Complying with anti-money laundering (AML) regulations and reporting obligations.
• Meeting Know Your Customer (KYC) requirements under international gaming standards.
• Responding to legal requests from law enforcement, regulators, or courts.
• Maintaining records as required by gaming licenses and applicable laws.
• Implementing responsible gaming measures and identifying problem gambling behavior.

3.4 Platform Improvement and Marketing

• Analyzing user behavior and preferences to improve our services, website design, and game offerings.
• Conducting market research and statistical analysis to understand Indonesian player preferences.
• Sending you promotional communications about new games, bonuses, and features (with your consent).
• Personalizing your gaming experience based on your preferences and playing history.

4. Information Sharing and Disclosure

kptoto does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for the purposes described in this policy:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our platform, including:

• Payment Processors: Indonesian banks and e-wallet providers to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC and AML compliance providers to verify your identity and documentation.
• Game Providers: Software suppliers such as Evolution Gaming, Pragmatic Play, and others who provide our casino games and sports betting platform.
• Customer Support Tools: Live chat platforms and customer relationship management systems.
• Data Analytics Providers: Services that help us analyze website usage and improve user experience.

All service providers are contractually obligated to protect your information and may only use it for the specific purposes we authorize.

4.2 Legal Requirements and Protection of Rights

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests.
• Enforce our Terms & Conditions and protect our legal rights.
• Investigate, prevent, or take action regarding suspected fraud, security breaches, or illegal activities.
• Protect the safety and security of kptoto, our users, or the public.
• Cooperate with law enforcement or regulatory investigations.

4.3 Business Transfers

If kptoto is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

5. Data Security Measures

kptoto implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL encryption, the same security standard used by major financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in protected data centers with restricted physical access.
• Password Protection: User passwords are encrypted using industry-standard hashing algorithms and are never stored in plain text.
• Access Controls: Access to personal information is restricted to authorized personnel only on a need-to-know basis.
• Regular Security Audits: Our systems undergo regular security assessments and penetration testing to identify and address vulnerabilities.
• Firewall Protection: Network-level firewalls prevent unauthorized access to our systems.
• Account Security Features: Two-factor authentication, login notifications, and session management to protect your account.

While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and should immediately notify us if you suspect unauthorized account access.

6. Data Retention

kptoto retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your active account and up to seven years after account closure to comply with regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven years as required by anti-money laundering regulations.
• Verification Documents: Identification documents and KYC records are retained for at least seven years after account closure.
• Communication Records: Customer support communications are retained for up to three years for quality assurance and dispute resolution.
• Technical Data: Server logs and technical data are typically retained for 12-24 months unless needed for security investigations or legal compliance.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data retention schedule and applicable laws.

7. Your Privacy Rights

As a kptoto user, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete information in your account settings or by contacting support.
• Right to Erasure: You may request deletion of your personal information, subject to legal retention obligations and legitimate business interests.
• Right to Restrict Processing: You may request that we limit how we use your information in certain circumstances.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.
• Right to Object: You may object to certain types of data processing, including direct marketing.
• Right to Withdraw Consent: Where we rely on your consent to process information, you may withdraw that consent at any time.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days of receiving a valid request. Please note that we may need to verify your identity before processing requests to access or delete personal information.

8. Cookies and Tracking Technologies

kptoto uses cookies and similar tracking technologies to enhance your user experience, maintain login sessions, remember your preferences, and analyze website usage. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information.

8.1 Types of Cookies We Use

• Essential Cookies: Required for core website functionality, including login sessions, security features, and account access. These cannot be disabled without affecting site functionality.
• Preference Cookies: Remember your language preferences, currency display, and other customization settings.
• Analytics Cookies: Help us understand how users interact with our platform, which pages are most popular, and where improvements are needed.
• Marketing Cookies: Track your interaction with promotional content and help us deliver relevant offers (with your consent).

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of the kptoto platform. Most browsers allow you to view, delete, and block cookies.

9. International Data Transfers

kptoto's servers and service providers may be located outside of Indonesia. When your personal information is transferred internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection standards. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

10. Children's Privacy

kptoto's services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the associated account. Parents or guardians who believe their child has provided information to kptoto should contact us immediately at [email protected].

11. Changes to This Privacy Policy

kptoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you via email or prominent notice on our website. Your continued use of kptoto's services after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry
• Response Time: We aim to respond to all privacy inquiries within 48 hours

For general customer support inquiries unrelated to privacy, please use our 24/7 live chat service available on the kptoto website.