warungtoto Platform Privacy Notice
This page describes what we collect when you use warungtoto and how we keep that data protected. We take your privacy seriously and follow Indonesian data-protection principles and international best practices for encryption, access control, and third-party processor oversight. Our privacy commitments apply equally whether you access warungtoto via browser on desktop, mobile device, or any supported platform.
We collect personal information (name, ID number, contact details, payment account information) to verify your identity, process deposits and withdrawals, and comply with regulatory requirements. We also collect non-personal information (game activity, session logs, device identifiers) to improve our service and detect fraud. This notice explains your rights, how we use your data, and how you can request access or deletion.
Our data practices are transparent and disclosed upfront. You control your personal information; you can request corrections, access exports, or account deletion at any time by contacting our support team.
What Information We Collect on warungtoto
Personal Identification Data
We collect your full legal name, date of birth, and government-issued ID number (Indonesian KTP or passport) during account registration and verification. This information is mandatory before you can access deposit or withdrawal features on warungtoto. We also collect your phone number and email address to send account notifications, verify your identity during withdrawals, and restore account access if you lose your password.
Your address information (street, city, postal code) is collected during verification and is used to confirm your residency and detect duplicate accounts or fraud. We never share this information with third parties except where required by law enforcement or regulatory authorities.
Payment and Financial Data
When you deposit or withdraw on warungtoto, we collect your payment account details (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet account identifiers, or mobile banking, local payment, online payment, e-wallet bank account numbers). We do not store your full bank-account credentials; instead, we use tokenized references maintained by our payment processors. Your deposit history and withdrawal requests are logged and stored in encrypted format on our servers for transaction reconciliation and dispute resolution.
Gameplay and Activity Data
We collect records of all wagers you place, games you access, and outcomes you receive on warungtoto. This includes football bets (Liga 1, Piala AFF, Piala Indonesia, Champions League), live-dealer table sessions, slot-game spins, and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We log the timestamp, stake amount, multiplier or odds, and result of each transaction. This data is used to calculate your weekly cashback, determine your tier status, and detect fraud or collusion attempts.
Device and Session Data
We collect your device type (smartphone, tablet, desktop), operating system, browser version, and IP address when you access warungtoto. We also log session duration, pages visited, and feature usage. This data helps us optimize performance, detect unauthorized access, and troubleshoot technical issues. We use cookies and similar tracking technologies (session tokens, pixel tags) to maintain your login state and personalize your experience.
Cookies and Tracking Technologies
Our cookies on warungtoto serve four purposes: authentication (keeping you logged in), functionality (remembering your preferences), analytics (tracking page views and feature usage), and fraud detection (flagging suspicious login patterns). We use first-party cookies (set by warungtoto directly) and third-party analytics cookies (set by Google Analytics). All cookies expire within 30 days of your last activity; you can manage cookie settings in your browser preferences.
How We Use Your Data and Protect It
Data Use and Legal Basis
We use your personal information on warungtoto for six core purposes: (1) account verification and compliance with Indonesian gaming regulations, (2) processing deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfer channels, (3) calculating and crediting your tier-based cashback and promotional bonuses, (4) fraud detection and prevention, (5) customer support and account troubleshooting, and (6) improving our platform performance through aggregated analytics.
Your legal basis for this processing is either contract fulfilment (we need your data to provide the service), legal obligation (Indonesian regulations require identity verification), or legitimate interest (fraud detection and service improvement). You have the right to object to any processing; contact our support team to request restrictions on specific data uses.
Data Encryption and Security
All sensitive data on warungtoto — identity documents, payment details, account credentials — is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Our servers maintain firewall protection, intrusion-detection systems, and regular security audits. Access to personal data is restricted to authorized staff and automated systems; no one can access your data without explicit authorization logged in our audit trail.
We undertake quarterly penetration testing and maintain a data-breach response plan. If a breach occurs that exposes your personal information, we will notify you within 72 hours and provide guidance on protective steps. We carry cybersecurity insurance to cover incident response costs.
We at warungtoto believe that transparent data practices build trust. Every piece of information we collect has a documented purpose; you can request what data we hold and how it is used.
Third-Party Processors and Data Sharing
We share your data with specific third parties to operate warungtoto: payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive transaction details to settle deposits and withdrawals; game studios (Playtech, Evolution, Pragmatic Play) receive session identifiers to record gameplay; analytics platforms (Google Analytics) receive anonymized usage data to track platform performance; and cloud-hosting providers (AWS, Google Cloud) store our database backups for disaster recovery.
All processors sign data-processing agreements ensuring they meet our security standards and use your data only for the stated purpose. We do not sell your personal information to marketers, advertisers, or data brokers. We may disclose personal data to law enforcement or regulatory authorities only if legally required or to comply with gaming regulations in jurisdictions where warungtoto operates (including Jakarta, Surabaya, Bandung, Medan, and Semarang).
Data Retention and Deletion
We retain your account data (name, ID, contact details) for as long as your account is active and for seven years after account closure to comply with Indonesian financial-record-keeping rules. Transaction logs and gameplay history are retained for five years. You can request permanent account deletion at any time; upon request, we anonymize your personal identifiers within 30 days while retaining aggregated, non-identifiable records for regulatory compliance.
Your Rights on warungtoto
You have the right to request access to all personal data we hold about you. You can request corrections if your information is inaccurate (e.g., address change after you move). You can request data portability — we will export your personal data in a machine-readable format (JSON or CSV). You can request deletion or anonymization of your account and associated data, subject to our legal and regulatory retention obligations.
To exercise any of these rights, contact our support team via in-app chat or email. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with Indonesia's data-protection authority.
International Data Transfer
Our database servers may sit outside Indonesia (e.g., in AWS or Google Cloud data centres in Singapore or the US). Transfers of your data outside Indonesia occur under Standard Contractual Clauses (SCCs) approved by data-protection authorities. We ensure that third countries maintain adequate data-protection laws or supplementary safeguards equivalent to Indonesian standards.
Promotional Communications and Contact
We may send you promotional notifications about Liga 1, Piala AFF, Imlek, Idul Fitri, Idul Adha, and seasonal bonus opportunities on warungtoto via email or SMS. You can opt out of promotional communications at any time by clicking "unsubscribe" in our emails or managing notification settings in your account. Mandatory service notifications (account security alerts, withdrawal confirmations, verification requests) cannot be disabled as they are essential to your account security.
Your Rights
- Access all data we hold about you.
- Request corrections to inaccurate information.
- Export your data in machine-readable format.
- Request account deletion and data anonymization.
What We Don't Do
- We never sell your personal data to third parties.
- We never share your payment details with advertisers.
- We never store your full bank-account credentials locally.
Contact and Policy Updates
Our support team can answer questions about our privacy practices. You can reach us via in-app chat (available during business hours) or email (responses within 24 hours). We will update this privacy notice if our data practices change. Material changes will be announced via your account notifications and will take effect 30 days after posting. Your continued use of warungtoto after an update implies acceptance of the revised terms.
Last updated: This notice reflects our current practices as of January 2025. We remain committed to protecting your personal information and operating transparently on warungtoto.