emastotoPrivacy Policy

When you access emastoto via Android app or iOS browser, we collect personal data needed to verify your account, process payments, and support your queries. This page describes what we collect, how we use it, and what rights you have. We keep all data encrypted and do not sell it to third parties.

Our policy applies to everyone who registers on emastoto, regardless of whether they access the platform from Jakarta, Surabaya, Bandung, or elsewhere. We comply with local data protection laws in all supported jurisdictions. If you have questions about how your data is handled, our support team can provide detailed answers.

Read this policy carefully before creating an account. By using emastoto, you agree that we collect and process your personal data as described below.

What Data We Collect on emastoto

We collect personal data in four categories. First, account data: your full name, email address, mobile phone number, and date of birth. Second, identity verification data: a government ID photo (KTP, passport, or driving licence) to comply with account verification rules. Third, payment data: the last four digits of your card or e-wallet, transaction records, and IP address. Fourth, behavioural data: which games you play, how long you stay logged in, and which sports markets on Liga 1 or Piala Indonesia you view.

We collect this data in three ways. When you register, you provide name, email, and phone directly. When you verify your account, you upload your government ID. When you deposit via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer to mobile banking, local payment, online payment, e-wallet, we receive payment confirmation from the processor but do not store your full card or account number.

We use this data for five purposes. First, account security: KYC verification, two-factor authentication, and fraud detection. Second, payment processing: confirming deposits and withdrawals via your chosen method. Third, legal compliance: reporting to regulators in your jurisdiction. Fourth, customer support: answering your queries about deposits, withdrawals, or account access. Fifth, service improvement: understanding which games or sports markets are most used so we can improve stability.

We share your data with third-party processors only when necessary. Payment processors (like local payment and e-wallet partners) receive your transaction amount and confirmation token. Compliance partners may receive your ID and transaction history for verification. Cloud servers hosting our data sit outside Indonesia; we encrypt data in transit and at rest. We do not share your data with marketing companies, data brokers, or unrelated platforms.

Your Rights and Our Commitments on emastoto

We keep your data encrypted and separate from public records. Your account password is never stored in plain text; we hash it using industry-standard algorithms. Payment data is stored separately from personal data so a breach of one system does not expose both. We retain account data for two years after your last login; identity documents are deleted after 30 days unless required for compliance. Transaction records are kept for seven years to meet tax and fraud-monitoring requirements.

We use cookies to remember your login session and language preference. We do not use cookies to track you across other websites. You can disable cookies in your browser settings, but account login may not work correctly without them. Third-party services (like web analytics) may set their own cookies; we do not control these.

You have the right to request access to all data we hold about you. You can also request that we correct inaccurate data, delete non-essential data, or export your transaction history. To exercise these rights, contact our support team through the help menu in your account. We respond to all data requests within 30 days.

• Your password is your primary defence—change it every three months and never share it.
• Enable two-factor authentication in your account settings after your first deposit.
• Contact support immediately if you notice a login from an unfamiliar location or device.
• We monitor all accounts for suspicious activity and may temporarily lock an account during Idul Fitri or other peak periods if we detect unusual patterns.

If you believe we have misused your data or violated your privacy rights, contact our compliance team through the emastoto support menu. We investigate all complaints within 14 days and provide a written response. You also have the right to lodge a complaint with the data protection authority in your jurisdiction.