Privacy Policy

1Information We Collect

1.1 Personal Information You Provide

When you register an account with pgtoto, we collect the following personal information directly from you:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification documents (Indonesian National ID card / KTP, passport, or driver's license).
• Contact Information: Email address, phone number (mobile and landline if applicable), residential address, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), transaction history, deposit and withdrawal records, and payment method preferences.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and two-factor authentication settings.
• Verification Documents: Copies of identification documents, proof of address (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) verification purposes.

1.2 Information Collected Automatically

When you access pgtoto Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Log Data: IP address, access times, pages viewed, time spent on pages, referring/exit pages, clickstream data, and error logs.
• Location Data: Approximate geographic location based on IP address (country, city, region) to comply with licensing requirements and detect suspicious activities.
• Gaming Activity: Bets placed, games played, betting patterns, win/loss history, active sessions, bonus usage, and gameplay preferences.
• Communication Records: Transcripts of live chat conversations with customer support, email correspondence, and WhatsApp messages exchanged with our support team.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Identity verification services that confirm the authenticity of your submitted documents
• Payment processors that provide transaction confirmation and fraud prevention services
• Credit reference agencies for financial verification purposes (where legally permitted)
• Publicly available sources to verify identity and prevent fraud

2How We Use Your Information

pgtoto uses your personal information for the following purposes:

2.1 Account Management

• Creating and maintaining your betting account
• Verifying your identity, age, and residency through KYC procedures
• Authenticating your login credentials and securing account access
• Processing account updates, password resets, and profile modifications

2.2 Transaction Processing

• Processing deposits, withdrawals, and other financial transactions
• Verifying payment method ownership and preventing payment fraud
• Maintaining accurate financial records and transaction history
• Reconciling accounts and resolving payment disputes

2.3 Service Delivery

• Providing access to sports betting, casino games, slot games, and other gaming products
• Processing bets and settling winnings according to game rules
• Delivering customer support via live chat, email, and WhatsApp
• Sending important account notifications, transaction confirmations, and service updates

2.4 Legal and Regulatory Compliance

• Complying with licensing requirements and gaming regulations
• Preventing underage gambling by verifying age through KYC checks
• Detecting and preventing money laundering, fraud, and other illegal activities
• Responding to legal requests, court orders, and regulatory inquiries
• Maintaining records required by anti-money laundering (AML) laws

2.5 Platform Security and Fraud Prevention

• Monitoring account activity for suspicious behavior or unauthorized access
• Detecting and preventing fraud, bonus abuse, and collusion
• Identifying and blocking duplicate accounts
• Protecting against cyber attacks, hacking attempts, and system vulnerabilities

2.6 Responsible Gaming

• Implementing deposit limits, loss limits, and session time limits at your request
• Processing self-exclusion requests and account cooling-off periods
• Identifying potential problem gambling behavior and offering support resources
• Complying with responsible gaming regulations and best practices

2.7 Marketing and Communications

• Sending promotional offers, bonuses, and special event notifications (only with your consent)
• Providing personalized game recommendations based on your gaming preferences
• Conducting customer satisfaction surveys and collecting feedback
• Sending newsletters with platform updates and new game announcements

Note: You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in promotional emails.

2.8 Analytics and Service Improvement

• Analyzing usage patterns to understand how users interact with our platform
• Improving website performance, navigation, and user experience
• Developing new features and gaming products based on user preferences
• Optimizing payment processing times and customer support efficiency

3Data Sharing and Disclosure

pgtoto does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

3.1 Service Providers

We share your information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Identity Verification Services: To verify your identity documents and prevent fraud during KYC procedures
• Cloud Hosting Providers: To securely store data on encrypted servers
• Customer Support Software: To manage support tickets and live chat conversations
• Email Service Providers: To send account notifications, transaction confirmations, and promotional emails

All service providers are contractually bound to protect your data and use it only for the specific purposes we authorize.

3.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, regulators, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Enforce our Terms and Conditions and other legal agreements
• Protect the rights, property, or safety of pgtoto, our users, or the public
• Detect, prevent, or address fraud, security issues, or illegal activities
• Respond to claims that content violates third-party rights

3.3 Business Transfers

In the event that pgtoto is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and/or a prominent notice on our website of any such change in ownership or control of your personal information.

3.4 With Your Consent

We may share your information with third parties when you have provided explicit consent for us to do so.

4Data Security Measures

pgtoto implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Encryption

All data transmitted between your device and pgtoto servers is encrypted using 256-bit SSL (Secure Socket Layer) technology - the same encryption standard used by major banks worldwide. Sensitive information such as passwords and financial data is encrypted both in transit and at rest on our servers.

4.2 Access Controls

Access to your personal information is restricted to authorized pgtoto employees who need the data to perform their job functions (e.g., customer support agents, compliance officers, technical staff). All employees undergo background checks and receive training on data protection and privacy regulations. Access is granted on a need-to-know basis and is regularly audited.

4.3 Secure Infrastructure

Our servers are hosted in secure data centers with physical security measures including 24/7 monitoring, biometric access controls, and redundant power supplies. We implement firewalls, intrusion detection systems, and regular security audits to protect against cyber threats.

4.4 Regular Security Testing

We conduct regular vulnerability assessments, penetration testing, and security audits performed by independent third-party security experts to identify and address potential weaknesses in our systems.

4.5 Incident Response

In the unlikely event of a data breach, we have established incident response procedures to contain the breach, assess its impact, notify affected users, and report to relevant authorities as required by law. We will notify you promptly if your personal information is compromised in a data breach.

Your Responsibility: While we implement robust security measures, you also play a critical role in protecting your account. Choose a strong, unique password, do not share your login credentials, log out after each session on shared devices, and contact us immediately if you suspect unauthorized access to your account.

5Data Retention

pgtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

5.1 Active Account Data

While your account remains active, we retain all account information, transaction history, gaming records, and communications to provide ongoing services and maintain accurate records.

5.2 Closed Account Data

After you close your account, we retain certain information for the following minimum periods as required by law and regulatory obligations:

• Identity and KYC Documents: 5 years from account closure (required for anti-money laundering compliance)
• Financial Transaction Records: 7 years from transaction date (required for tax and financial auditing purposes)
• Gaming Activity Records: 5 years from activity date (required for licensing and dispute resolution)
• Communication Records: 3 years from communication date (for customer service quality and dispute resolution)

5.3 Marketing Data

If you opt out of marketing communications, we will retain minimal information (email address, opt-out preference) to ensure we do not contact you again for marketing purposes.

5.4 Legal Holds

We may retain information beyond standard retention periods if required to comply with legal obligations, resolve disputes, enforce agreements, or as part of ongoing investigations.

5.5 Data Deletion

Once retention periods expire and there is no legal or business reason to retain your information, we securely delete or anonymize your personal data using industry-standard data destruction methods.

6Your Privacy Rights

You have the following rights regarding your personal information held by pgtoto:

How to Exercise Your Rights

To exercise any of these rights, contact our customer support team via email, live chat, or WhatsApp. We will respond to your request within 30 days. For security purposes, we may require verification of your identity before processing requests involving access to or deletion of personal information.

Note: Some rights may be limited by legal obligations. For example, we cannot delete financial transaction records that must be retained for tax and regulatory compliance purposes.

7Cookies and Tracking Technologies

pgtoto uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content.

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They enable the website to remember your preferences, recognize you on return visits, and improve functionality.

7.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, including login authentication, security features, and session management. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how users interact with our website to improve performance and user experience.
• Functionality Cookies: Remember your preferences (language, region, display settings) to provide a personalized experience.
• Analytical Cookies: Help us understand user behavior, popular pages, and traffic sources to optimize our platform.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect website functionality, including the ability to log in to your account.

7.4 Third-Party Cookies

Some cookies may be placed by third-party service providers (analytics tools, payment processors) to support our operations. These third parties have their own privacy policies governing how they use information collected through cookies.

8Third-Party Services

pgtoto integrates with third-party services to provide payment processing, identity verification, game content, and other functionalities. When you interact with these services through our platform, their own privacy policies apply to how they collect and use your information.

Third-Party Links: Our website may contain links to external websites (e.g., responsible gaming resources, payment provider sites). We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

Payment Processors: When you make deposits or withdrawals, your payment information is processed by third-party payment providers (Indonesian banks, e-wallet services). These providers handle your financial data according to their own security standards and privacy policies.

9International Data Transfers

pgtoto operates as an internationally licensed platform, and your personal information may be transferred to, stored, and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have different data protection laws than Indonesia.

When we transfer your personal information internationally, we implement appropriate safeguards to protect your data, including:

• Contractual agreements with service providers requiring them to protect your information according to international standards
• Use of secure data transfer mechanisms compliant with international data protection regulations
• Regular audits of data processing partners to ensure compliance with privacy standards

By using pgtoto Services, you consent to the transfer of your information to countries outside Indonesia as necessary to provide our services.

10Children's Privacy

pgtoto Services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. Our KYC verification procedures are designed to prevent underage individuals from creating accounts.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information and close the associated account. If you believe we have collected information from an underage individual, please contact us immediately.

Parental Notice: We encourage parents and guardians to monitor their children's internet usage and help enforce our age restrictions. If you discover that your child has created an account on pgtoto, contact our support team immediately for account closure.

11Changes to This Privacy Policy

pgtoto reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email sent to your registered email address
• Display a prominent notice on our website homepage
• For significant changes affecting your rights, request your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of pgtoto Services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

12Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or how pgtoto handles your personal information, please contact us through the following channels:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 on the pgtoto website
• WhatsApp: Available 08:00-23:00 WIB daily

Our customer support team will respond to privacy-related inquiries within 48 hours. For formal data subject requests (access, deletion, portability), we will respond within 30 days as required by applicable data protection laws.

If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with a data protection authority in your jurisdiction.