opatoto Platform Privacy Notice

This page describes what we collect when you use opatoto and how we keep that data protected. We collect personal information only when necessary to verify your identity, process your deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks (mobile banking, local payment, online payment, e-wallet), and to meet regulatory requirements. Our privacy practices are transparent: we tell you what we gather, why, and how long we keep it.

At opatoto, we operate a football-focused platform covering Liga 1, Piala AFF, Piala Indonesia, Champions League, and other tournaments, alongside live-dealer games and slots. Your account data supports all these services. We take data security seriously because your trust in opatoto depends on it. Our servers encrypt your login credentials, transaction history, and verification documents. We do not sell your information to advertisers or marketing firms. Our privacy policy applies whether you access opatoto on Android, iOS, or browser.

If you have questions about how we handle your data on opatoto, this document answers them. We are transparent about our third-party processors, your rights, and how to contact us if you wish to delete your information.

What We Collect and Why

Account and identity data

We collect your email address, phone number, and full name when you create an account on opatoto. We also collect proof of identity (national ID, passport, or driving licence) and proof of address (utility bill, bank statement, or government document) as part of our KYC (Know Your Customer) verification. We use this data to confirm you are eligible to use opatoto, to prevent fraud, and to comply with Indonesian gaming regulations. These documents are encrypted and stored separately from your login credentials.

Financial and transaction data

When you deposit or withdraw on opatoto, we collect transaction details — the amount, the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your chosen bank), and the timestamp. We keep a record of all transactions for at least five years to detect fraud and meet regulatory audits. We do not store your bank account number or digital wallet password; our payment processor handles that. We also record your account balance, any active bonuses, and your game history to settle disputes and verify bonus playthrough requirements.

Device and usage data

We collect information about how you access opatoto — your device type (Android, iOS, browser), your IP address, and your approximate location (country and city level, such as Jakarta, Surabaya, Bandung, or Medan). We use this to detect unusual login attempts, to block access from restricted jurisdictions, and to optimize our platform for your device. We also log the pages and games you visit and the time you spend on each. This helps us improve opatoto's service but does not identify you personally.

Communications data

If you contact our support team or subscribe to notifications about upcoming tournaments (Champions League, Piala Indonesia) or payment changes, we store your message or preference. We use this data only to respond to your inquiry or send you the information you requested. We do not use your contact data for marketing unless you explicitly opt in.

Your Rights and Our Commitments on opatoto

Third-party processors

We share your financial data with our payment processors (the companies that handle DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers). We also share verification documents with our identity-verification partner and transaction data with our fraud-prevention vendor. These third parties are bound by confidentiality agreements and process your data only as we instruct. Our servers may sit outside Indonesia; your data may be transmitted internationally to comply with our service infrastructure.

Data retention

We keep transaction records for five years. Account data (email, phone, verification documents) is retained while your account is active and for two years after closure.

Your rights

You can request access to your data, ask us to correct errors, or request deletion. Some data is retained for legal and fraud-prevention reasons and cannot be deleted while your account is active.

Jurisdiction

Our privacy policy applies where opatoto services are available by law. We comply with Indonesian data-protection standards and local gaming regulations.

Contact and changes

If you have a privacy concern or wish to exercise your rights on opatoto, contact our support team through the in-app help centre. We will respond within 10 business days. If we update this privacy notice, we will notify you by email or in-app message. Your continued use of opatoto after notification means you accept the updated policy. We at opatoto remain committed to protecting your data and keeping our practices transparent so you can use our platform with confidence.