Privacy Policy

Last Updated: January 15, 2026

1. Introduction

edtoto ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the edtoto platform, including our website and mobile applications.

By creating an account on edtoto or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, please do not use our platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of the edtoto platform.

2. Information We Collect

edtoto collects several types of information to provide, maintain, improve, and protect our services. The information we collect falls into the following categories:

2.1 Personal Information You Provide

When you register an account on edtoto, you voluntarily provide us with personal information including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., KTP number, passport number).
• Contact Information: Email address, mobile phone number, residential address (street, city, postal code, province).
• Account Credentials: Username, password, and security questions (stored in encrypted form).
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet IDs (OVO, DANA, GoPay), payment card information (if applicable), and transaction history.
• Verification Documents: Copies of government-issued ID cards, passports, driver's licenses, utility bills, bank statements, or other documents required for identity verification (KYC) and age verification purposes.
• Communication Records: Content of your communications with our customer support team via live chat, email, or phone, including support tickets and complaint records.

2.2 Information Collected Automatically

When you access and use the edtoto platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address), screen resolution, mobile network operator.
• Connection Information: IP address, geolocation data (country, city, approximate coordinates based on IP), time zone, internet service provider.
• Usage Data: Pages visited, games played, bet history, transaction history, session duration, click patterns, referral sources, search queries within the platform.
• Technical Data: Server logs, error reports, performance metrics, load times, API calls, crash reports.

2.3 Information from Third Parties

In some cases, we may receive information about you from third-party sources including:

• Payment processors and financial institutions (to verify transactions and prevent fraud)
• Identity verification services (to confirm your identity and age)
• Game providers and software vendors (to track game outcomes and resolve disputes)
• Advertising partners (to measure campaign effectiveness, only if you consented to tracking)
• Publicly available databases (to comply with anti-money laundering and fraud prevention regulations)

3. How We Use Your Information

edtoto uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• To create, maintain, and manage your edtoto account
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and respond to your inquiries
• To verify your identity and age (21+ requirement)
• To enable you to place bets, play games, and access platform features
• To maintain accurate transaction and betting records

3.2 Security and Fraud Prevention

• To detect, prevent, and investigate fraud, money laundering, bonus abuse, and other prohibited activities
• To enforce our Terms and Conditions and protect the integrity of our platform
• To monitor for unusual account activity, multiple account detection, and security threats
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• To protect edtoto and our users from cyberattacks, unauthorized access, and data breaches

3.3 Platform Improvement and Analytics

• To analyze user behavior, preferences, and engagement patterns to improve our services
• To conduct market research and user satisfaction surveys
• To test new features, games, and platform updates
• To optimize user experience, interface design, and mobile app performance
• To generate aggregated, anonymized statistics for business intelligence purposes

3.4 Marketing and Communications

• To send you promotional offers, bonuses, and personalized recommendations (only if you opted in)
• To notify you about platform updates, new games, tournaments, and special events
• To send transactional emails (account confirmations, withdrawal notifications, security alerts)
• To deliver targeted advertising based on your interests and betting history (only with your consent)

3.5 Legal and Regulatory Compliance

• To comply with applicable laws, regulations, and legal obligations in Indonesia and internationally
• To respond to lawful requests from government authorities, courts, or law enforcement agencies
• To enforce our legal rights and defend against legal claims
• To report suspicious transactions to financial crime prevention authorities

4. Data Sharing and Disclosure

edtoto does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers

We share personal information with trusted third-party service providers who perform functions on our behalf, including:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and international payment gateways) to process deposits and withdrawals
• Identity verification services to conduct KYC checks and age verification
• Cloud hosting providers to store and secure your data
• Customer support platforms (live chat software, ticketing systems)
• Email service providers for transactional and marketing communications
• Analytics and advertising platforms (Google Analytics, Facebook Pixel, only if you consented to tracking)

All service providers are contractually obligated to protect your data, use it only for the purposes specified by edtoto, and comply with applicable data protection laws.

4.2 Game Providers

When you play games from third-party providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.), limited information such as your username, bet amounts, and game outcomes may be shared with these providers to enable game functionality and resolve disputes. Game providers are bound by strict confidentiality agreements.

4.3 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, courts, or regulators when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate suspected fraud, money laundering, or other criminal activity
• Protect the rights, property, or safety of edtoto, our users, or the public
• Enforce our Terms and Conditions or defend against legal claims

4.4 Business Transfers

In the event that edtoto is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and platform announcement before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if you provide explicit consent at the time of data collection.

5. Data Security Measures

edtoto employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored in our databases (passwords, financial information) is encrypted at rest using AES-256 encryption.
• Secure Data Centers: Your information is stored on secure servers located in certified data centers with 24/7 physical security, fire suppression systems, and environmental controls.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All employees and contractors undergo background checks and are bound by confidentiality agreements.
• Multi-Factor Authentication: We offer two-factor authentication (2FA) for enhanced account security and strongly encourage all users to enable this feature.
• Firewall Protection: Our network is protected by enterprise-grade firewalls and intrusion detection/prevention systems.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.
• Incident Response: We maintain a formal incident response plan to detect, contain, and mitigate security breaches. In the event of a data breach affecting your personal information, we will notify you as required by applicable laws.

While we implement robust security measures, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

6. Cookies and Tracking Technologies

edtoto uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, login status, and browsing behavior. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device for a specified period).

6.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality such as logging in, maintaining session state, and processing transactions. These cookies cannot be disabled without affecting platform performance.
• Performance Cookies: Collect anonymous data about how users interact with our platform (pages visited, time spent, errors encountered) to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (language settings, display options, favorite games) to provide a more personalized experience.
• Advertising Cookies: Track your browsing behavior across websites to deliver targeted ads and measure campaign effectiveness. These cookies require your consent and can be disabled in your browser settings.

6.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may affect your ability to use certain platform features. To manage cookies, visit your browser's help section or use browser extensions designed for cookie management.

7. Data Retention

edtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Active Accounts: Personal information associated with active accounts is retained indefinitely as long as your account remains open.
• Closed Accounts: If you close your account, we retain certain information (identity documents, transaction records, communication logs) for a minimum of 7 years to comply with financial record-keeping, anti-money laundering, and tax regulations.
• Inactive Accounts: Accounts inactive for 24 consecutive months may be closed, and personal information beyond legal requirements may be anonymized or deleted.
• Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again.

After the retention period expires, personal information is securely deleted or anonymized so it can no longer be associated with you.

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. edtoto respects these rights and provides mechanisms to exercise them:

• Right to Access: You can request a copy of the personal information we hold about you. Log in to your account to view most of your data, or contact customer support for a comprehensive data export.
• Right to Rectification: You can update or correct inaccurate personal information through your account settings or by contacting customer support.
• Right to Erasure: You can request deletion of your personal information, subject to legal retention requirements (e.g., financial records must be kept for 7 years). To request account deletion, contact customer support.
• Right to Restrict Processing: You can request that we limit how we use your personal information in certain circumstances (e.g., if you contest the accuracy of your data).
• Right to Data Portability: You can request a machine-readable copy of your personal information to transfer to another service provider.
• Right to Object: You can object to processing of your personal information for direct marketing purposes or based on legitimate interests. Use the unsubscribe link in marketing emails or update your communication preferences in account settings.
• Right to Withdraw Consent: If processing is based on your consent (e.g., marketing cookies), you can withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond within 30 days.

9. Third-Party Services

The edtoto platform may contain links to third-party websites, services, or applications (e.g., game providers, payment processors, social media platforms). This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you interact with.

When you use third-party payment methods (BCA online banking, OVO app, DANA app), you are subject to those providers' privacy policies and terms of service. edtoto does not receive or store your full payment credentials (e.g., bank login passwords, e-wallet PINs).

10. International Data Transfers

edtoto operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. These countries may have different data protection laws than Indonesia. When we transfer data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements requiring recipients to protect your information
• Certification under recognized data protection frameworks (e.g., ISO 27001)

By using the edtoto platform, you consent to the international transfer of your personal information as described in this Privacy Policy.

11. Children's Privacy

edtoto is strictly an adult-only platform. We do not knowingly collect personal information from anyone under the age of 21. If you are under 21 years old, you are prohibited from creating an account or using our services.

If we discover that we have inadvertently collected personal information from a minor, we will immediately delete that information and close the associated account. If you believe a minor has provided personal information to edtoto, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's online activities and use parental control software to prevent access to gambling websites.

12. Changes to This Policy

edtoto reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via:

• Email to the address associated with your account
• Prominent notice on the edtoto homepage and within your account dashboard
• Pop-up notification upon your next login

The "Last Updated" date at the top of this document indicates when the Privacy Policy was most recently revised. Your continued use of the edtoto platform after changes are posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using the platform and close your account.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Team:

Acknowledgment: By using the edtoto platform, you acknowledge that you have read, understood, and agree to the data collection, use, and sharing practices described in this Privacy Policy. This policy is an integral part of our Terms and Conditions.