poketotoPrivacy Policy

This page describes what we collect when you use poketoto and how we keep that data protected. We collect personal information—email, phone number, identity documents, payment details—to verify your account, process deposits and withdrawals, and comply with anti-fraud requirements. We do not sell your data to third parties. We do share transaction records with payment processors (DANA, e-wallet, mobile banking, local payment providers, and banks) because they handle the actual fund transfers.

We store your data on secure servers. Some servers may sit outside your jurisdiction (Indonesia), which means your data may be processed internationally. We apply standard encryption and access controls to prevent unauthorized use. Account holders in Jakarta, Surabaya, Bandung, Medan, and other supported regions can request access to their data or request deletion subject to legal retention requirements.

This policy explains how we collect, use, store, and protect your information. Services are available only where local law permits.

Data we collect and how we use it

When you create an account on poketoto, we collect your email address and phone number. During verification, we request your Indonesian ID (KTP), proof of payment method (DANA screenshot, e-wallet account screenshot, or bank statement), and sometimes proof of address. We use this data to verify your identity, prevent fraud, and comply with anti-money-laundering regulations. We do not share your ID number or identity documents with third parties—these remain within poketoto's secure systems.

When you deposit funds via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or bank transfer (online payment, e-wallet, mobile banking, local payment), we receive transaction records from those payment processors. These records include your payment method, deposit amount, timestamp, and transaction ID. We store these records to track account funding, prevent duplicate deposits, and settle your balance. We retain these records for the length of your account plus three years for regulatory compliance.

We do not sell your data to marketing companies

Your information remains within poketoto systems. We do not rent or sell email addresses, phone numbers, or account history to third parties for advertising purposes. We may contact you regarding account security or service updates, but only when necessary.

Third-party payment processors and data sharing

We share limited data with payment processors because they execute deposits and withdrawals on our behalf. When you deposit via online payment, we send your account number and deposit amount to e-wallet's systems; mobile banking then deducts your account and credits poketoto. When you withdraw to local payment, we send your withdrawal amount and online payment account details to e-wallet's systems; mobile banking then credits your account. These payment processors collect the same data as banks do during normal transactions—they do not use your data for purposes beyond processing the payment.

We do not authorize payment processors to store your data longer than needed for settlement. local payment, online payment, e-wallet, and bank systems may retain transaction records per their own privacy policies and anti-fraud requirements—typically three to seven years. We cannot control their retention; you should review their privacy notices if you want to understand their practices. We do not share your email, ID number, or personal preferences with payment processors—only the minimum data needed to complete the specific transaction.

Cookies and tracking on poketoto

We use cookies to keep you logged into your poketoto account. A session cookie stores your login token; when you close your browser, the cookie expires and you are logged out. We also use analytics cookies to count page views and understand which game categories are popular—this data is anonymized (we do not link it to your name or email). We do not use cookies to track you across other websites.

You can disable cookies in your browser settings, but doing so may prevent you from logging into poketoto or cause slowdowns. We recommend keeping cookies enabled for normal use. Third-party services (Google Analytics, Cloudflare) may set their own cookies; we advise reviewing their privacy policies if you have concerns. We do not combine analytics data with personally identifiable information—your browsing patterns remain separate from your account.

We keep your data minimal, encrypted, and accessible only to poketoto staff who need it to operate your account and comply with law.

poketoto editorial

International data transfer

Our servers are located in multiple countries, which means your data may be transferred internationally. We apply the same security standards (encryption, access control, audit logging) to data wherever it resides. We ensure that servers comply with industry best practices. If your local jurisdiction prohibits data transfer outside Indonesia, you should not use poketoto—services are available only where local law permits.

We do not explicitly seek consent for international transfer beyond the account creation process. By opening an account on poketoto, you acknowledge that your data may reside on international servers. We protect that data with encryption and standard security practices, but we cannot guarantee absolute immunity from data breaches. If a breach occurs, we will notify affected account holders via email as soon as feasible and provide guidance on account security steps.

Your rights and our obligations

You have the right to access your data, request correction of inaccurate information, and request deletion of your account. To exercise these rights, contact our support team via email. We will respond within ten business days. We may retain certain data (transaction records, identity documents) for legal compliance even after account deletion—typically three years for anti-money-laundering purposes.

You have the right to withdraw consent for cookies and analytics tracking. You can delete cookies from your browser settings at any time. You can also request that we not send you promotional emails (though we will continue to send account security alerts). We do not require you to consent to cookies to use poketoto—session cookies for login are essential, but analytics cookies are optional and can be disabled without affecting core functionality.

  • 1
    Access your dataRight 1

    Request a copy of all personal data we hold about you

  • 2
    Correct inaccurate dataRight 2

    Update your email, phone number, or other account details

  • 3
    Delete your accountRight 3

    Request closure and data deletion (subject to legal retention periods)

  • 4
    Opt out of cookiesRight 4

    Disable analytics and marketing cookies via browser settings

How to contact us about privacy

If you have questions about our privacy practices, how we use your data, or how to exercise your rights, contact our support team. We are available in English and Indonesian. Response times are typically within five business days. For urgent data security concerns, we maintain a dedicated escalation channel—contact support and mark your message as urgent.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you via email if material changes occur. Continued use of poketoto after a policy update indicates your acceptance of the new policy. Account holders in Jakarta, Surabaya, Bandung, Medan, and all other supported regions are subject to the same privacy obligations. Our commitment remains unchanged: we keep your data secure, minimize collection, and share only what is necessary to operate our service and comply with law.

↑