Privacy Policy

Introduction

awtoto operates an online gaming platform at https://awtoto.cam, providing sports betting, live casino, slot games, and other gaming services to players primarily located in Indonesia. We recognize that privacy and data security are critical concerns for our users, and we have designed our data handling practices to meet the highest international standards.

This Privacy Policy describes what personal information we collect from you, how we use that information, who we share it with, how we protect it, and what rights you have regarding your personal data. This policy applies to all users of the awtoto platform, whether you are a registered player, a casual visitor, or someone who has subscribed to our communications.

We are committed to compliance with applicable data protection laws and regulations, including those that apply in the jurisdictions where we hold gaming licenses. Where local Indonesian data protection regulations provide additional rights or protections, we endeavor to honor those provisions even though awtoto operates under an international offshore license.

Data Controller

For the purposes of data protection law, the data controller responsible for your personal information is the entity operating the awtoto platform under its international gaming license. As the data controller, we determine the purposes and means of processing your personal data.

If you have questions about how your data is handled, wish to exercise your data protection rights, or need to contact our Data Protection Officer, please use the contact details provided in Section 14 of this Privacy Policy.

Data We Collect

awtoto collects several categories of personal information from users. The specific data we collect depends on how you interact with our platform. Below is a comprehensive breakdown of the types of data we may collect:

How We Collect Your Data

We collect personal information through several methods during your interaction with the awtoto platform:

• Direct Collection: When you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings, you directly provide us with personal information.
• Automatic Collection: When you visit our website or use our mobile platform, we automatically collect technical data through cookies, log files, and similar tracking technologies. This includes your IP address, browser type, pages visited, and time spent on the platform.
• Third-Party Sources: We may receive information from third-party payment processors (to verify transactions), identity verification services (to confirm your identity during KYC), fraud prevention agencies (to detect suspicious activity), and game providers (to track gameplay across integrated platforms).
• Publicly Available Sources: In rare cases where enhanced due diligence is required (typically for high-value transactions or when suspicious activity is detected), we may supplement our records with information from publicly available databases to verify your identity or assess risk.

How We Use Your Data

awtoto uses your personal information for the following legitimate business purposes:

5.1 Account Management & Service Delivery

• To create and maintain your player account
• To verify your identity and age (21+ requirement enforcement)
• To process deposits, withdrawals, and other financial transactions
• To provide access to games and betting markets
• To calculate winnings, losses, and account balances
• To administer bonuses, promotions, and loyalty programs

5.2 Legal & Regulatory Compliance

• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• To fulfill reporting obligations to our licensing authority
• To detect and prevent fraud, money laundering, underage gambling, and other illegal activities
• To respond to lawful requests from law enforcement or regulatory bodies
• To enforce our Terms & Conditions and protect our legal rights

5.3 Customer Support

• To respond to your inquiries, complaints, and support requests
• To troubleshoot technical issues and improve platform functionality
• To provide assistance in your preferred language (Indonesian-speaking support agents)

5.4 Marketing & Communications

• To send you promotional offers, bonus announcements, and special event notifications (only with your consent)
• To inform you of platform updates, new games, and service changes
• To conduct surveys and gather feedback on your user experience
• To personalize marketing content based on your gaming preferences and history

5.5 Platform Improvement & Analytics

• To analyze user behavior and gameplay patterns to improve our services
• To conduct statistical analysis and generate reports on platform performance
• To test new features and optimize user experience
• To identify popular games and betting markets for Indonesian players

5.6 Responsible Gaming

• To monitor gameplay patterns and identify signs of problem gambling
• To implement self-exclusion requests, deposit limits, and cooling-off periods
• To provide access to responsible gaming tools and resources
• To prevent minors from accessing the platform

Data Sharing & Disclosure

awtoto does not sell, rent, or trade your personal information to third-party marketers. However, we do share your data with carefully selected third parties in the following circumstances:

6.1 Service Providers

We share data with trusted service providers who perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services that verify the authenticity of your identity documents.
• Game Providers: Software studios like Pragmatic Play, Evolution Gaming, and others whose games appear on our platform. These providers receive limited gameplay data to operate their games but do not have access to your financial or identity information.
• Customer Support Tools: Live chat software and ticketing systems used to manage customer support interactions.
• Cloud Hosting Providers: Secure data centers where our servers and databases are hosted.

All service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes we have authorized.

6.2 Legal & Regulatory Bodies

We may disclose your personal information to regulatory authorities, law enforcement agencies, or courts when:

• Required by law or legal process (e.g., court orders, subpoenas)
• Necessary to comply with licensing obligations or regulatory audits
• We believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other illegal activity
• Required to protect the safety, rights, or property of awtoto, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate restructuring involving awtoto, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that the new controller continues to honor the commitments made in this Privacy Policy.

6.4 With Your Consent

In any circumstance not covered above, we will only share your personal information with third parties if you have given explicit consent for us to do so.

Data Security Measures

Protecting your personal information from unauthorized access, disclosure, alteration, or destruction is a top priority for awtoto. We implement comprehensive technical and organizational security measures, including:

Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected using industry-standard SSL/TLS encryption (minimum 256-bit). Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest.
• Firewalls: Our servers are protected by enterprise-grade firewalls that block unauthorized access attempts.
• Intrusion Detection Systems: We employ automated systems that monitor for suspicious activity and potential security breaches in real time.
• Secure Data Centers: Our infrastructure is hosted in certified data centers that maintain physical security controls, redundant power supplies, and disaster recovery systems.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments of our platform on a regular basis.

Organizational Safeguards

• Access Controls: Access to personal data is restricted to authorized employees who require it to perform their job functions. All staff members sign confidentiality agreements.
• Data Segregation: Player funds are held in segregated accounts separate from operational funds, ensuring your deposits are always protected.
• Employee Training: All team members receive regular training on data protection principles and security best practices.
• Incident Response Plan: We maintain a documented incident response procedure to quickly address any security breaches and notify affected users as required by law.

Data Retention Period

awtoto retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Active Accounts: For as long as your account remains active and you continue to use our services.
• Closed Accounts: Following voluntary account closure, we retain your identity verification documents, transaction history, and key account data for a minimum of 7 years to comply with anti-money-laundering regulations and our licensing obligations.
• Self-Excluded Accounts: If you have self-excluded from the platform, we retain your identity information indefinitely to prevent you from re-registering during your self-exclusion period or permanently if you have chosen permanent self-exclusion.
• Marketing Data: If you unsubscribe from marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not inadvertently contact you again.
• Customer Support Records: Support chat transcripts and correspondence are retained for 3 years to assist with ongoing support issues and for quality assurance purposes.

After the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be linked to you as an individual.

Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You can update many details directly through your account settings.
• Right to Erasure (Right to be Forgotten): In certain circumstances, you may request that we delete your personal data. This right is not absolute and may be limited by legal obligations to retain certain records.
• Right to Restrict Processing: You may ask us to temporarily restrict how we use your data while we investigate a concern you have raised about its accuracy or our use of it.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to request that we transfer it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to our processing of your data for marketing purposes at any time. You can unsubscribe from promotional emails using the link at the bottom of any marketing message.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing that occurred before you withdrew consent.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to your request within 30 days and may require verification of your identity before processing your request.

Cookies & Tracking Technologies

awtoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve website functionality.

Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly. These include session cookies that keep you logged in and security cookies that protect against fraudulent activity.
• Performance Cookies: Collect anonymous information about how users interact with our platform, helping us identify technical issues and optimize performance.
• Functional Cookies: Remember your preferences (e.g., language selection, display settings) to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior patterns, popular games, and traffic sources so we can improve our services.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. These are only used with your consent and can be disabled through your browser settings.

Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling essential cookies may prevent you from accessing certain features of the platform. To manage cookies:

• Use your browser's cookie management settings (typically found in Privacy or Security settings)
• Opt out of analytics cookies using our cookie preference center (if available)
• Use browser extensions or privacy tools that block third-party tracking cookies

Third-Party Services & Links

The awtoto platform may contain links to third-party websites, such as payment provider sites, game provider platforms, or responsible gaming resources. This Privacy Policy applies only to information collected by awtoto. When you click on a third-party link and leave our platform, you are subject to that third party's privacy policy and terms of service.

We are not responsible for the privacy practices or content of third-party websites. We recommend that you review the privacy policy of any external site before providing personal information to them.

Similarly, third-party game providers integrated into our platform may collect limited gameplay data in accordance with their own privacy policies. We select game providers who maintain high data protection standards, but we do not control their data handling practices once data leaves our platform.

Children's Privacy

awtoto is an adults-only platform. We do not knowingly collect personal information from individuals under 21 years of age, which is the minimum legal gambling age enforced on our platform. Our Terms & Conditions explicitly prohibit underage users from registering or using our services.

If we discover that we have inadvertently collected personal information from a minor, we will immediately delete that information from our systems and permanently close the associated account. Any deposits made will be refunded to the source (net of any withdrawals already processed).

Parents and guardians are encouraged to monitor their children's internet usage and to use parental control software to prevent minors from accessing online gambling websites.

If you believe that a minor has provided personal information to awtoto or is using our platform, please contact us immediately at the email address provided in Section 14.

Changes to This Privacy Policy

awtoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email or in-platform notification
• Provide a reasonable notice period before the changes take effect (typically 14 days)
• Highlight significant changes in the notification message

Your continued use of the awtoto platform after the effective date of any privacy policy changes constitutes your acceptance of the revised policy. If you do not agree to the updated terms, you should cease using the platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Previous versions of this policy are available upon request for your reference.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us through the following channels:

• Email (display only): [email protected]
• Subject Line for Privacy Requests: Please include "Privacy Request" or "Data Protection Inquiry" in your email subject line to ensure your message is routed to our Data Protection team.
• Customer Support: Available during WIB business hours via live chat. Our Indonesian-speaking agents can assist with general privacy questions and escalate formal data requests to the appropriate department.

We aim to respond to all privacy-related inquiries within 30 days. For complex requests, we may require additional time and will keep you informed of our progress.

For additional information about your account, please also refer to our Terms & Conditions, Responsible Gaming page, and FAQ.