startotoPrivacy Policy

This page describes what we collect when you use startoto and how we keep that data protected. We gather personal information—name, email, phone number, identity documents, banking details—to operate our platform, verify your account, process deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, and other payment methods, and comply with anti-fraud and financial crime prevention laws.

Our servers and payment processors may sit outside your jurisdiction. We share user data only with trusted partners (payment providers, hosting services, legal authorities) and never sell your information to third parties for marketing. We encrypt all sensitive data in transit and at rest.

If you have questions about how we handle your privacy on startoto, or if you wish to access, correct, or delete your data, contact our support team. Your rights are outlined in this policy and where applicable by local law in Jakarta, Surabaya, Bandung, Medan, and other regions where we operate.

Data We Collect on startoto

We collect personal data in several categories. Account information includes your full name, email address, phone number, date of birth, and residential address. Identity verification requires a government-issued document (passport, national ID, or driver's license) and may include a facial photograph for anti-fraud purposes. Financial data includes your bank account details, payment method information (e-wallet IDs, QRIS codes, bank account numbers), and transaction history (deposits, withdrawals, bets placed, winnings, losses).

Behavioural data is collected automatically: your login times, pages visited on startoto, games played, odds viewed, bet sizes, device type (mobile browser or desktop), IP address, and browser information. This helps us improve platform performance, detect fraud, and personalise your experience. We do not track you off-site; our tracking covers only startoto activities.

Communication data includes any email or support messages you send us. If you contact our support team about a Liga 1 bet, a live-dealer game, a slot spin, or a payment issue, we log that conversation and may use it to improve our service or investigate disputes.

Account information
Name, email, phone, address, date of birth; required for registration and verification
Identity documents
Passport, national ID, or driver's license; required for KYC (know-your-customer) compliance
Financial data
Bank details, payment method IDs, deposit/withdrawal history, bet records; retained for settlement and audit
Behavioural data
Login times, pages visited, games played, IP address; collected via cookies and server logs

How We Use Your Data

We use your data primarily to operate startoto and deliver your requested services. Account verification prevents fraud and ensures you are of legal age in your jurisdiction. Payment processing requires your financial information to deposit funds via e-wallet, mobile banking, local payment, online payment, or bank transfer, and to process withdrawals. Bet settlement and game outcomes are recorded in your account history so you can audit every transaction.

We use behavioural and financial data to detect fraud, money laundering, and irregular betting patterns. If we identify suspicious activity, we may freeze your account pending investigation or report the activity to relevant authorities. We retain this data for a defined retention period (typically several years) to meet legal and regulatory obligations.

Communication data from support interactions is used to resolve your issue, improve our response processes, and train our support team. We may use anonymised aggregated data (e.g., "50 users reported deposit delays on Idul Fitri") to enhance service quality, but never in ways that identify you personally.

Third-Party Data Sharing

We share your data only with trusted partners essential to operate startoto. Payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment networks) receive your payment details to complete deposits and withdrawals. These partners are bound by strict confidentiality agreements. We do not control their privacy practices; we recommend reviewing their policies independently.

Hosting and cloud service providers store our servers and databases; they have access to encrypted user data but are contractually prohibited from using it for their own purposes. Legal authorities (police, tax agencies, regulatory bodies) may request user data if required by law; we comply with lawful requests and notify you when permitted by law.

We never sell your personal data to marketers, advertisers, or third parties for profit. We do not share your betting history, winnings, or payment details with anyone outside startoto unless you explicitly consent or legal process demands it. Your data remains within our control or that of our contracted partners only.

Cookies and Tracking on startoto

We use cookies (small text files stored on your browser) to remember your login session, keep you authenticated while browsing startoto, and store your language and display preferences. Cookies do not contain sensitive data like passwords or payment details. If you disable cookies in your browser, some startoto features may not function properly.

We also use server logs and pixel tracking to monitor site performance, identify technical issues, and understand user behaviour (which games are popular, which payment methods are used most, which times see peak activity). This data is aggregated and anonymised; it does not identify individuals but helps us optimise the platform.

Third-party analytics services (such as Google Analytics, if enabled) may place additional cookies; review their privacy policies to understand their practices. We do not use advertising cookies or retarget users across other websites.

Your data rights on startoto

  • Access: you can request a copy of all data we hold about you
  • Correction: you can update your name, email, or address via account settings
  • Deletion: you can request deletion of your data after account closure (subject to legal retention requirements)
  • Objection: you can opt out of behavioural tracking or promotional communications
  • Complaint: if you believe we mishandle your data, you can lodge a complaint with your local data protection authority

Data Retention and Security

We retain account data (name, email, address) for as long as your startoto account is active. After account closure, we retain data for a legal minimum period (typically 5–7 years) to comply with tax, anti-money-laundering, and financial crime prevention requirements. Bet records and transaction history are retained indefinitely to protect against disputes and allow account auditing.

We encrypt all sensitive data (passwords, payment details, identity documents) using industry-standard encryption (TLS 1.2 or higher) when transmitted over the internet. Data at rest is stored on secured servers with access controls, firewalls, and intrusion detection. We do not store unencrypted passwords; we use hashing algorithms to store password verification without storing the actual password.

Despite these protections, no system is entirely secure. If we discover a data breach, we will notify affected users and relevant authorities within legal timeframes. You are responsible for keeping your login credentials confidential; if you believe your account has been compromised, contact our support team immediately.

Children and Age Restrictions

Our services on startoto are intended only for users of legal age to gamble in their jurisdiction. We do not knowingly collect data from users under the legal age for gaming. If we learn that a minor has registered, we will close the account and delete the associated data. Parents or guardians who believe a minor has created a startoto account should contact our support team immediately.

Jurisdiction and Policy Changes

Our data practices are governed by the laws of the jurisdictions where we operate and where our servers are located. Users in Jakarta, Surabaya, Bandung, Medan, and other Indonesian regions where startoto is available have rights under applicable Indonesian data protection laws. We comply with requests under those laws and may provide data to Indonesian authorities if lawfully required.

We may update this privacy policy at any time. Changes will be posted on this page with an updated date. If changes materially affect how we use your data, we will notify you via email or in-platform message. Continued use of startoto after changes indicates acceptance of the updated policy.

If you have questions about our privacy practices on startoto, wish to access or delete your data, or believe we have mishandled your information, contact our support team through your account dashboard. We aim to respond to data requests within a standard timeframe; complex requests may take longer.