yoktoto Platform Privacy Notice
This page describes what data we collect when you use yoktoto and how we keep that data protected. We take privacy seriously. When you register an account, deposit funds, place a bet on Liga 1 or Piala AFF matches, play a live-dealer game, or access our platform from Jakarta, Surabaya, Bandung, Medan, or Semarang, you share certain information with us. We explain here what we collect, why, and how we safeguard it.
We comply with data-protection laws in the jurisdictions where we operate. Our privacy practices reflect our commitment to transparent handling of your personal information. If you have questions about your data or how yoktoto uses it, this notice provides the answers.
Read this notice alongside our Terms of Use and Legal Notice for a complete picture of your rights and our obligations.
What Data We Collect
We collect data in several categories when you use our yoktoto platform. During account registration, we collect your full name, email address, phone number, date of birth, national identity number (KTP or equivalent), and proof of address. We require this information to verify your identity and confirm you meet our legal eligibility requirements. We also record your IP address and device type when you log in.
When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we collect transaction details: the amount, date, time, payment method, and a reference ID. We do not store your full payment card numbers or bank account credentials; our payment processors (licensed financial institutions) handle those securely. We log your deposit and withdrawal history in your yoktoto account so you can audit your financial activity.
When you play games on yoktoto—whether live-dealer blackjack, roulette, slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), sports betting on Liga 1 or Piala Indonesia, or esports markets (Mobile Legends, Free Fire, PUBG Mobile)—we record your bets, outcomes, and settlement amounts. We also track how long you play, which games you choose, and when you are active. This helps us understand usage patterns and improve our platform.
Cookies and Tracking Technologies
Our yoktoto platform uses cookies and similar tracking technologies to maintain your login session, remember your preferences (language, theme), and analyze how users interact with our site. We use first-party cookies (set by yoktoto) for essential functions like keeping you logged in. We may also use analytics cookies to understand traffic patterns and improve site performance.
You may disable cookies in your browser settings, but this may affect your ability to use yoktoto fully. We do not use third-party tracking pixels or advertisers' cookies; we do not sell data to marketers.
How We Use Your Data
We at yoktoto use your data for specific, lawful purposes. We use your identity information (name, ID, address) to verify your account during KYC verification and to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. We use your email and phone number to contact you about your account, process withdrawals, reset passwords, and notify you of important service updates.
We use your transaction history (deposits, withdrawals, game outcomes) to settle bets, maintain your account balance, and prevent fraud. We review withdrawal patterns to detect unusual activity and protect against unauthorized access. We use gameplay data to improve our game libraries, optimize app performance, and tailor our platform features to user preferences.
We do not use your data for direct marketing, profiling, or automated decision-making on yoktoto without your consent. We do not sell your personal information to third parties.
Your trust in yoktoto depends on transparent data practices. We collect only what we need and protect it as if it were our own.
Data Storage and Third-Party Processors
Our yoktoto platform stores data on secure servers located in multiple regions. Our primary servers may be located outside your jurisdiction; by using yoktoto, you consent to cross-border data transfer where necessary for service delivery. We encrypt data in transit (using TLS) and at rest. Our servers maintain backup copies for disaster recovery; these backups are also encrypted and retained according to our data-retention schedule.
We work with third-party processors for specific functions. Payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and licensed banks) handle your deposit and withdrawal transactions. These processors are contractually bound to protect your data and use it only for payment processing. Our cloud hosting provider stores our application and database; they are also bound by strict data-protection agreements. We do not allow any processor to use your data for their own marketing or commercial purposes.
Data Retention and Deletion
We retain your account data (name, identity, contact information) for as long as your account is active. After you close your account, we retain identifiable transaction data (deposits, withdrawals, bets, outcomes) for at least three years to comply with anti-fraud, tax, and regulatory requirements. After that period, we may delete or anonymise old records.
You may request deletion of your personal data from yoktoto at any time by contacting our support team. We will delete non-essential data (profile preferences, browsing history) within 30 days. We will retain transaction data as required by law, but we will remove your identifying information from those records where legally permissible.
Your Rights Regarding Your Data
You have the right to access, correct, or delete your personal data on yoktoto. You may request a copy of all data we hold about you in a portable, machine-readable format. You may object to our use of your data for analytics or profiling (though this may affect your ability to use certain yoktoto features). You have the right to withdraw consent for marketing communications at any time.
To exercise any of these rights, contact our support team with your account ID and a description of your request. We will respond within 30 days. If you believe we have mishandled your data, you have the right to lodge a complaint with the data-protection authority in your jurisdiction.