Privacy Policy

1. Introduction

At jktoto, we recognize that your privacy is paramount. This Privacy Policy explains how we collect, use, protect, store, and share your personal information when you use our online gaming platform. This policy applies to all users of jktoto services, including visitors to our website, registered account holders, and individuals who interact with our customer support team.

jktoto is committed to complying with applicable data protection laws and industry best practices for privacy and security. We implement robust technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction. By using jktoto, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together govern your use of jktoto services. If you have questions about how we handle your personal information or wish to exercise your privacy rights, please contact our Data Protection team at [email protected].

2. Information We Collect

jktoto collects various types of personal information to provide, maintain, and improve our services. The information we collect falls into several categories:

2.1 Registration and Account Information

When you create a jktoto account, we collect the following mandatory information:

• Personal Identifiers: Full legal name, date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, and residential address in Indonesia
• Account Credentials: Username, password (stored in encrypted form), and security questions
• Preferred Language and Currency: Language preference and transaction currency (Indonesian Rupiah - IDR)

2.2 Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and prevent fraud, jktoto requires identity verification through our Know Your Customer (KYC) process. We collect:

• Scanned copies or photographs of government-issued identification (Indonesian Identity Card - KTP, passport, or driver's license)
• Proof of address documents (utility bills, bank statements, or government correspondence dated within the last 3 months)
• Selfie photographs holding identification documents for facial verification
• Additional documentation if required for enhanced due diligence (source of funds, employment information)

2.3 Financial and Transaction Information

When you deposit funds, place bets, or request withdrawals, we collect and process:

• Bank account details (account number, bank name, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposit amounts, withdrawal requests, bet placements, and winnings
• Payment method preferences and transaction timestamps

Note: jktoto does not store full credit card numbers or CVV codes. Payment card processing is handled by certified PCI-DSS compliant payment processors.

2.4 Gaming Activity Data

To provide gaming services, enforce our Terms and Conditions, and detect fraudulent activity, we collect:

• Game play history including games played, bet amounts, outcomes, and timestamps
• Sports betting activity including selected markets, odds, stake amounts, and settlement results
• Togel (Indonesian numbers lottery) selections and draw participation
• Casino game session data including duration, betting patterns, and balance changes
• Bonus claim history and wagering requirement progress

2.5 Technical and Device Information

When you access jktoto, we automatically collect certain technical information:

• IP address and geographic location (city and region level, not precise GPS coordinates)
• Device information (device type, operating system, browser type and version)
• Connection information (internet service provider, connection type)
• Usage data (pages visited, features used, time spent, click patterns)
• Cookies and similar tracking technologies (see Section 8 for details)

2.6 Communications and Support Interactions

When you contact jktoto customer support or communicate with us, we collect:

• Email correspondence content and metadata
• Live chat transcripts and timestamps
• Phone call recordings (where permitted by law and with notification)
• Feedback, complaints, and dispute resolution documentation

3. How We Use Your Information

jktoto uses your personal information for specific, legitimate purposes necessary to provide and improve our gaming services. We process your data based on the following legal grounds:

3.1 Service Provision and Account Management

We use your information to:

• Create and maintain your jktoto account
• Process your deposits, withdrawals, and gaming transactions
• Provide access to casino games, sports betting markets, live dealer tables, and togel lottery draws
• Calculate and pay winnings accurately
• Manage bonuses, promotions, and loyalty program participation
• Authenticate your identity when you log in to your account

3.2 Legal and Regulatory Compliance

We process your information to comply with legal obligations including:

• Verify that you are at least 21 years of age and legally permitted to gamble
• Conduct Know Your Customer (KYC) and Enhanced Due Diligence (EDD) checks
• Prevent money laundering, terrorist financing, and financial crime
• Maintain transaction records as required by financial regulations
• Respond to lawful requests from regulatory authorities, law enforcement, or courts
• Enforce our Terms and Conditions and other policies

3.3 Fraud Prevention and Security

To protect both jktoto and our users, we use your information to:

• Detect and prevent fraud, bonus abuse, and account sharing
• Identify multiple accounts created by the same individual
• Monitor for irregular betting patterns and collusion
• Prevent unauthorized account access and protect against cyber attacks
• Verify the authenticity of identity documents submitted during KYC
• Investigate disputes, complaints, and suspected violations of our Terms

3.4 Customer Support and Communication

We use your contact information to:

• Respond to your inquiries and provide customer support in Indonesian and English
• Send important account notifications including security alerts, password resets, and verification codes
• Notify you of changes to our Terms, policies, or services
• Communicate regarding responsible gaming concerns if we detect problematic behavior
• Resolve disputes and address complaints

3.5 Marketing and Promotions (With Consent)

With your explicit consent, we may use your information to:

• Send promotional emails about new games, bonuses, and special offers
• Provide personalized game recommendations based on your play history
• Notify you of tournaments, competitions, and special events
• Send promotional SMS messages (if you have opted in)

You can withdraw marketing consent at any time by clicking the unsubscribe link in emails or adjusting your account communication preferences. Withdrawing consent does not affect essential service communications.

3.6 Platform Improvement and Analytics

We analyze aggregated and anonymized data to:

• Improve our website and mobile platform performance
• Understand user preferences and optimize game selection
• Identify and fix technical issues
• Develop new features and enhance user experience
• Conduct internal research and statistical analysis

4. Information Sharing and Disclosure

jktoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data with trusted partners and service providers necessary to operate our platform, and only under strict confidentiality agreements.

4.1 Service Providers and Business Partners

We share limited personal information with the following categories of third-party service providers:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Identity Verification Services: KYC and AML compliance providers to verify your identity and prevent fraud
• Game Providers: Third-party software studios that supply casino games, live dealer tables, and sports betting platforms
• Cloud Hosting Providers: Secure data centers that host our servers and store encrypted data
• Customer Support Tools: Live chat platforms and email systems used to provide support services
• Analytics Services: Providers that help us understand platform usage through anonymized data

All third-party providers are contractually required to protect your information and use it only for the specific purposes we authorize.

4.2 Legal and Regulatory Disclosure

jktoto may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with court orders, subpoenas, or legal processes
• Respond to lawful requests from government authorities or law enforcement
• Enforce our Terms and Conditions and protect our rights and property
• Protect the safety and security of jktoto, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and Anonymized Data

jktoto may share aggregated, anonymized data that cannot be used to identify you individually. This includes statistical information about platform usage, popular games, betting trends, and demographic insights used for business analysis and industry reporting.

5. Data Security Measures

jktoto employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our multi-layered security approach includes:

5.1 Encryption Technologies

• SSL/TLS Encryption: All data transmitted between your device and jktoto servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same standard used by Indonesian banks
• Data-at-Rest Encryption: Sensitive data stored in our databases, including personal information and financial records, is encrypted using AES-256 encryption
• Password Protection: User passwords are hashed using bcrypt with salt, making them unreadable even to jktoto staff

5.2 Access Controls

• Strict access controls limit which jktoto employees can view personal information, based on job function and necessity
• Multi-factor authentication (MFA) required for all staff accessing sensitive systems
• Regular access reviews to ensure only authorized personnel retain access privileges
• Comprehensive audit logs tracking all access to and modifications of personal data

5.3 Network and Infrastructure Security

• Enterprise-grade firewalls protecting against external threats and cyber attacks
• Intrusion detection and prevention systems (IDS/IPS) monitoring for suspicious activity
• Regular security vulnerability assessments and penetration testing by independent auditors
• DDoS (Distributed Denial of Service) protection ensuring platform availability
• Secure data centers with physical security controls and redundant systems

5.4 Employee Training and Policies

• All jktoto employees undergo comprehensive data protection training
• Strict confidentiality agreements binding all staff members
• Clear internal policies governing data handling, access, and disposal
• Regular security awareness training to prevent social engineering attacks

5.5 Your Role in Security

While jktoto implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password that is not used for other online services
• Never share your account credentials with anyone
• Log out of your account when using shared or public devices
• Immediately report any suspicious activity or unauthorized access to [email protected]
• Keep your email account secure, as it is used for account recovery and important notifications

6. Data Retention

jktoto retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

• Account Information: Retained for the duration of your active account, plus 7 years after account closure for regulatory compliance
• Transaction Records: Financial records retained for 7 years as required by Indonesian anti-money laundering regulations
• KYC Documents: Identity verification documents retained for 7 years following account closure
• Gaming Activity: Betting and game play history retained for 7 years for dispute resolution and regulatory purposes
• Communications: Customer support communications retained for 3 years
• Marketing Consent: Consent records retained until you withdraw consent, plus 1 year for proof of compliance

6.2 Data Disposal

When personal information is no longer required, jktoto securely deletes or anonymizes it using industry-standard methods including secure data wiping and cryptographic erasure. Backup copies are retained according to our disaster recovery protocols but are similarly deleted once backup retention periods expire.

6.3 Inactive Accounts

Accounts with no activity (no logins, deposits, or bets) for 12 consecutive months are considered dormant. jktoto will attempt to contact you via email regarding the dormant status. If an account remains inactive for 24 months with no response to contact attempts, any remaining small balance may be forfeited, and the account may be closed in accordance with our Terms and Conditions. Personal data will then be retained for regulatory periods and subsequently deleted.

7. Your Privacy Rights

jktoto respects your rights regarding your personal information. Depending on your jurisdiction, you may have the following rights:

7.1 Right to Access

You have the right to request a copy of the personal information jktoto holds about you. To request access, contact [email protected] with your account details. We will provide the information in a commonly used electronic format within 30 days of verification of your identity.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For changes requiring verification (such as name or date of birth corrections), contact our support team with supporting documentation.

7.3 Right to Deletion (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or you withdraw consent for processing. Note that we may be required to retain certain information for legal or regulatory compliance (typically 7 years for financial records). To request deletion, contact [email protected].

7.4 Right to Restrict Processing

You may request that jktoto limit how we use your information in certain situations, such as while we verify accuracy of disputed information or assess whether we have legitimate grounds to process it. During the restriction period, we will store your information but not actively process it except with your consent or for legal purposes.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller. This applies to information you provided to jktoto that we process based on your consent or contract.

7.6 Right to Object to Processing

You may object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications by clicking unsubscribe links in emails or adjusting your account communication preferences. You may also object to processing based on legitimate interests by contacting us with your specific situation.

7.7 Right to Withdraw Consent

Where we process your information based on consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal and does not impact processing based on other legal grounds.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection team at [email protected] with your request. Include your full name, account username, and specific details of your request. We will respond within 30 days after verifying your identity. There is no fee for exercising these rights unless your request is manifestly unfounded or excessive.

8. Cookies and Tracking Technologies

jktoto uses cookies and similar tracking technologies to provide and improve our services, understand user preferences, and ensure platform security.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable websites to remember your preferences, authenticate your login, and provide personalized experiences.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly. These enable core functionality like account login, game loading, and secure transactions. You cannot opt out of essential cookies.
• Performance Cookies: Collect information about how you use jktoto, such as which pages you visit and if you encounter errors. This helps us improve platform performance. These cookies do not identify you individually.
• Functional Cookies: Remember your preferences such as language selection, display settings, and recently played games. These enhance your user experience.
• Analytics Cookies: Help us understand user behavior through aggregated data, allowing us to optimize game selection, betting markets, and platform features.

8.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling essential cookies may prevent you from using certain features of jktoto. To manage cookies, consult your browser's help section or visit aboutcookies.org for detailed instructions for all major browsers.

8.4 Third-Party Cookies

Some cookies on jktoto are set by third-party service providers such as game studios and analytics platforms. These cookies are subject to the third parties' privacy policies. jktoto does not control third-party cookies but only works with reputable partners who adhere to privacy standards.

9. International Data Transfers

jktoto operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. Some of these countries may have data protection laws different from Indonesian standards.

When we transfer your information internationally, we ensure appropriate safeguards are in place, including:

• Contractual clauses requiring third parties to provide equivalent protection to your data
• Processing only by service providers in countries recognized as providing adequate data protection
• Technical and organizational measures ensuring data security during and after transfer
• Regular audits of third-party data handling practices

All data transfers comply with applicable international data protection regulations. If you have concerns about international data transfers, please contact our Data Protection team at [email protected].

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how jktoto handles your personal information, please contact us:

When contacting us regarding privacy matters, please provide:

• Your full name and jktoto account username
• Clear description of your inquiry or request
• Proof of identity if requesting access, correction, or deletion of personal information
• Any relevant reference numbers or dates if inquiring about specific transactions or communications

We take all privacy inquiries seriously and will work diligently to address your concerns in accordance with applicable data protection laws.