Privacy Policy

1. Introduction

attoto ("we," "us," "our") operates an online casino and sports betting platform serving Indonesian players. We recognize that privacy is important to our users and are committed to being transparent about how we collect, use, and protect your personal information.

This Privacy Policy applies to all personal data we collect through our website at https://attoto.cam, mobile applications, customer support channels, and any other services we provide. By using attoto's services, you consent to the data practices described in this policy.

If you do not agree with the terms of this Privacy Policy, please discontinue use of our services immediately and contact us to close your account.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account with attoto, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number for Indonesian residents)
• Contact Information: Email address, phone number, residential address, postal code, and city of residence
• Account Credentials: Username, password, and security questions for account access
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), and payment card details if applicable
• Verification Documents: Copies of government-issued ID (KTP or passport), selfie photographs for identity verification, proof of address documents (utility bills, bank statements), and source of funds documentation when required
• Communication Records: Customer support chat transcripts, email correspondence, phone call recordings, and feedback you provide

2.2 Information We Collect Automatically

When you access and use attoto's platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, games played, bet history, deposit and withdrawal transactions, login times and frequency, session duration, and clickstream data
• Location Data: General geographic location derived from your IP address (country, region, city) to verify Indonesian residency and comply with geo-restriction requirements
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to recognize your device, maintain your login session, personalize your experience, and analyze platform usage patterns

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Providers: Transaction confirmation, payment method verification, and fraud screening data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized verification providers
• Marketing Partners: Information about how you discovered attoto and which marketing campaigns you engaged with
• Social Media Platforms: If you choose to link social media accounts, we may receive basic profile information

3. How We Use Your Information

attoto uses the personal information we collect for the following purposes:

3.1 Account Management and Service Provision

• Create and maintain your player account
• Process your deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets
• Enable you to place bets on sports events including bandar bola (football betting), play casino games, and access togel (lottery) services
• Track your gaming activity, bet history, and account balance
• Provide customer support and respond to your inquiries

3.2 Identity Verification and Compliance

• Verify that you are at least 21 years of age and a resident of Indonesia
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by gaming regulations
• Prevent fraud, collusion, and other prohibited activities
• Detect and prevent multiple account registrations by the same individual
• Comply with legal obligations including regulatory reporting requirements

3.3 Platform Security and Fraud Prevention

• Monitor for suspicious account activity and unauthorized access attempts
• Implement security measures to protect against hacking, phishing, and data breaches
• Identify and prevent bonus abuse, arbitrage betting, and other terms violations
• Maintain platform integrity and ensure fair gaming outcomes

3.4 Marketing and Personalization

• Send promotional offers, bonus notifications, and newsletters about attoto services (with your consent)
• Personalize your gaming experience based on your preferences and play history
• Conduct market research and analyze player behavior to improve our services
• Inform you about new games, features, and platform updates

3.5 Responsible Gaming

• Monitor your gaming patterns for signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion requests
• Provide responsible gaming tools and support resources
• Comply with responsible gaming regulations and industry best practices

4. Legal Basis for Processing (GDPR Compliance)

Although attoto primarily serves Indonesian players, we adhere to international data protection standards including GDPR principles. We process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (Terms and Conditions) and provide gaming services
• Legal Obligation: Processing is required to comply with legal requirements including age verification, KYC, AML regulations, and tax reporting
• Legitimate Interest: Processing serves our legitimate business interests including fraud prevention, platform security, service improvement, and direct marketing (where not overridden by your privacy rights)
• Consent: For certain marketing communications and optional data collection, we obtain your explicit consent which you may withdraw at any time

5. How We Share Your Information

attoto does not sell your personal information to third parties. However, we may share your data with the following categories of recipients:

5.1 Service Providers

We engage third-party companies to perform services on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process your deposits and withdrawals
• Game Providers: Casino game studios and live dealer providers who deliver gaming content through our platform
• Identity Verification Services: Specialized providers who verify your age, identity, and address
• Cloud Hosting Providers: Secure servers where we store your data with encryption and access controls
• Customer Support Tools: Live chat, email, and ticketing systems used by our support team
• Analytics Providers: Services that help us understand platform usage and improve user experience

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

5.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, regulators, or legal advisors when:

• Required by law, court order, subpoena, or legal process
• Necessary to enforce our Terms and Conditions or protect our legal rights
• Required to comply with gaming license conditions and regulatory reporting obligations
• Necessary to investigate fraud, illegal activity, or violations of our terms

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and the choices you have regarding your data.

6. Data Retention

attoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: We retain your data for the duration your account remains active plus any applicable statutory retention periods
• Closed Accounts: After you close your account, we retain essential data for 5-7 years to comply with financial regulations, tax laws, and AML requirements
• Marketing Data: If you opt out of marketing communications, we retain your email address in a suppression list to honor your request
• Transaction Records: Deposit, withdrawal, and bet history are retained for regulatory compliance and dispute resolution

After the retention period expires, we securely delete or anonymize your personal information so that it can no longer identify you.

7. Data Security

attoto implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same standard used by online banking
• Secure Storage: Personal data is stored on secure servers with restricted access, firewalls, and intrusion detection systems
• Access Controls: Only authorized attoto personnel with legitimate business needs can access your personal information, and all access is logged
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities
• Employee Training: All staff members are trained on data protection principles and sign confidentiality agreements

Despite our best efforts, no method of data transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and should not share it with anyone.

8. Your Privacy Rights

As an attoto user, you have the following rights regarding your personal information:

8.1 Right of Access

You may request a copy of the personal information we hold about you, including account details, transaction history, and communication records. We will provide this information in a commonly used electronic format within 30 days.

8.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you may request that we correct or update it. You can edit certain information directly in your account settings, or contact customer support for assistance.

8.3 Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may be required to retain certain information for legal compliance, fraud prevention, or dispute resolution.

8.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data or object to our processing.

8.5 Right to Data Portability

You may request a copy of your personal data in a structured, machine-readable format that can be transferred to another service provider.

8.6 Right to Object

You may object to processing of your personal data for direct marketing purposes. We will honor such requests and stop sending promotional communications.

8.7 Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before your withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days and may ask you to verify your identity before processing your request.

9. Cookies and Tracking Technologies

attoto uses cookies and similar tracking technologies to enhance your experience on our platform:

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Necessary for platform functionality, login authentication, and security features	Session or up to 1 year
Performance Cookies	Collect anonymous usage statistics to help us improve platform performance	Up to 2 years
Functionality Cookies	Remember your preferences, language settings, and personalization choices	Up to 1 year
Advertising Cookies	Deliver relevant promotional content and measure marketing campaign effectiveness	Up to 1 year

9.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may impact your ability to use certain platform features. Essential cookies required for platform functionality cannot be disabled.

10. Third-Party Links

Our platform may contain links to third-party websites, including payment provider portals and game provider sites. This Privacy Policy applies only to attoto's services. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

attoto's services are strictly for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that a minor has provided us with personal data, we will immediately close the account, delete the information, and forfeit any funds in the account. Parents or guardians who believe their child has registered an account should contact us immediately at [email protected].

12. International Data Transfers

attoto primarily serves Indonesian players, and your data is stored on servers located in secure data centers. In some cases, we may transfer your data to service providers located outside Indonesia. When we do so, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions confirming equivalent data protection standards
• Binding corporate rules for intra-group transfers

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. The "Last Updated" date at the top of this policy indicates when the most recent revision was made.

If we make material changes that significantly affect your privacy rights, we will notify you via email or prominent notice on our website at least 30 days before the changes take effect. Your continued use of attoto's services after the effective date constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through our website
• WhatsApp: +62 812-3456-7890

We aim to respond to all privacy inquiries within 7 business days. For formal data subject rights requests, we will respond within 30 days as required by law.