ekatoto Casino & Sportsbook Data Care

This page describes what we collect when you use ekatoto and how we keep that data protected throughout your account lifecycle and beyond. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we collect payment information. When you verify your identity, we collect your name, ID number, date of birth, and address. When you bet on Liga 1, Piala Indonesia, or Champions League markets, we log your activity. We treat all of this information with care and encrypt it at rest and in transit.

We at ekatoto do not sell personal data to third parties. We share information only with payment processors who handle your deposits and withdrawals, compliance partners who help us detect fraud and meet legal obligations, and government authorities if required by law. Our servers may sit outside your jurisdiction, but we encrypt all data and enforce the same protection standards regardless of storage location.

You have rights over your data—you can request access, correction, or deletion by contacting our support team. This policy applies to all users on ekatoto, regardless of where they access the platform, and we update it regularly as our practices evolve.

What We Collect and How We Use It

We collect information in several categories. Account data includes your email, phone number, full legal name, date of birth, government ID number, and permanent address. Payment data includes the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank details for mobile banking, local payment, online payment, e-wallet transfers), transaction amounts, and payment processor reference numbers. We do not store your card numbers or mobile wallet passwords—payment processors retain that information under their own security standards.

Activity data includes every bet you place on football markets (Liga 1, Piala Indonesia, Champions League), casino games, slots, or esports events. We log timestamps, bet amounts, odds, and outcomes. We use this data to settle bets, detect fraud, and comply with anti-money-laundering regulations. We also collect your IP address, device type, browser version, and approximate location based on IP geolocation. We use this to detect account compromise, prevent unauthorized access, and identify access from restricted jurisdictions.

Optional data includes any communications you send via live chat, email, or our ticket system. If you contact our support team in Jakarta, Surabaya, Bandung, or Medan, we keep a record of your inquiry and our response for quality assurance and dispute resolution.

Identity verification (KYC)

We collect government ID, proof of address, and selfie to verify you are who you claim and to comply with financial regulations.

Payment data

We record deposit and withdrawal amounts, methods (mobile banking, local payment, etc.), and timestamps for accounting and dispute resolution.

Behavioral data

We log betting patterns, login times, and device information to detect fraud and account compromise.

Retention and Deletion

We retain account data for seven years after you close your account, as required by financial and anti-money-laundering regulations. We retain payment data for the same period. We retain activity logs (bets, game sessions) for five years. If you request deletion before the retention period ends, we will anonymize or delete non-essential personal details (like your name and address) but retain transaction records and identity verification data as required by law. You can request data deletion by emailing our compliance team, but we cannot delete records needed to settle disputes or comply with regulatory obligations.

We delete temporary data (cookies, session tokens) when you log out or when your session expires. We delete live chat transcripts after one year unless they are part of a dispute or regulatory inquiry.

Third-Party Processors

We share personal data only with essential partners. Payment processors (the companies that handle online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers) receive your payment method and transaction details. Compliance and fraud-detection vendors receive your activity logs, IP address, and device information. Email service providers receive your email address to send account confirmations and notifications. We do not share betting data, personal details, or financial information with marketing agencies, data brokers, or affiliate networks. All processors sign data-protection agreements and must comply with the same encryption and access controls we enforce.

Your Rights and Our Commitments

We at ekatoto commit to transparency. You can access your personal data, request corrections, and ask us to delete non-essential information by contacting our support team or submitting a formal data request via our ticket portal. We respond to access requests within seven days and deletion requests within 30 days, unless legal or regulatory obligations require us to retain the data. You have the right to object to data processing for marketing purposes—we do not use your betting history to send promotional emails unless you opt in.

We do not sell your data. We encrypt all information at rest and in transit. We respond to data requests within seven days.

Cookies and Tracking

We use cookies to keep you logged in, remember your language preference, and measure how users interact with ekatoto. We use essential cookies (login tokens, anti-fraud tokens) which cannot be disabled without breaking account functionality. We use optional analytics cookies to understand traffic patterns, popular betting markets, and page performance. We do not use third-party tracking pixels or retargeting cookies. You can disable optional cookies in your browser settings without losing access to ekatoto. We respect Do Not Track signals and do not track users who enable this browser setting.

Contact and Policy Updates

We update this policy periodically as our practices evolve. Changes are effective immediately upon posting. We announce material changes prominently on our website. If you have questions about how we handle your data, contact our compliance team at [email protected] or via live chat. We respond to privacy inquiries within five working days. If your concern is not resolved, you can escalate to our senior data officer, who will respond within an additional five working days. This policy was last updated in 2025 and applies to all users accessing ekatoto regardless of jurisdiction.