sauditoto Privacy Policy

This page describes what we collect when you use sauditoto and how we keep that data protected. We at sauditoto take your privacy seriously—every piece of information you share with us, from your email address to your payment method, is encrypted, stored securely, and never sold to third parties without your explicit consent.

When you open an account on sauditoto, register your identity, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or place a bet on Liga 1, Piala AFF, or any of our games, you share personal data with us. We use that data only to provide our service—to verify your identity, process your transactions, settle your winnings, and improve our platform. We do not use your data for marketing beyond what you've explicitly opted into, and we do not sell your information to advertisers or data brokers.

Our policy is structured around transparency. You can request a copy of your data, ask us to correct it, or request deletion (subject to legal retention requirements). We respond to all such requests within a reasonable timeframe. This privacy policy applies to all users of sauditoto wherever you access our platform—mobile app, browser, desktop.

What Data We Collect on sauditoto

We collect several categories of information when you use sauditoto. Your account data includes your name, email address, phone number, date of birth, and government-issued ID details (which you provide during identity verification, known as KYC). We also collect your residential address and, in some cases, a photo of your government ID or a selfie for verification purposes.

Your transaction data is recorded automatically. Each deposit, withdrawal, bet placement, and game outcome is logged with timestamps. If you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the payment method used, the amount, and the transaction reference number. We do not store full payment credentials (e.g., complete card numbers or e-wallet passwords) on our servers; those are handled by our payment processors using industry-standard encryption.

Device and usage data is collected passively. When you log into sauditoto, we record your IP address, device type (mobile or desktop), browser version, and approximate location (derived from your IP, not from GPS). We track which games you play, how long you play, and when you log in and out. This data helps us detect fraud, optimize platform performance, and understand usage patterns across our player base.

How We Use Your Data

We use your data for several essential purposes. First, we use it to verify your identity and prevent fraud. When you register, we confirm that you are of legal age and that your identity matches official records. During withdrawals, we may ask for additional verification to prevent money laundering. Second, we use your data to process transactions—your deposits and withdrawals—by sharing minimal necessary information with our payment partners.

Third, we use your data to provide customer support. If you contact our team about an account issue, a forgotten password, or a dispute, we retrieve your account history and communication records to help you. Fourth, we use it for platform optimization—analyzing which games are popular, which payment methods fail most often, and where we can improve load times or reduce data usage on mobile.

Finally, we use your data to comply with legal obligations. If a court order or law enforcement request arrives (e.g., investigation into money laundering or fraud across Indonesia or abroad), we may be obligated to disclose limited information. We disclose only what is legally required and notify you when possible.

Third Parties and Our sauditoto Partners

We work with third-party processors to operate sauditoto. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment providers, and banks like online payment, e-wallet, mobile banking, local payment) receive the minimum data necessary to process your deposit or withdrawal. We do not control how these partners use your data; their privacy policies apply to their processing. Our live dealer providers operate the blackjack, roulette, baccarat, and Dragon Tiger tables—they may see your account name and game activity but not your banking details. Our slot game suppliers (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways) receive only anonymized aggregate data about play patterns, not individual identities.

We do not share your data with advertisers, marketing agencies, or brokers. We do not sell email lists or phone numbers. If we use an external hosting provider to store our databases, that provider is contractually bound to confidentiality and restricted access—they can see data but cannot use it for any other purpose.

• 1
  Payment processorsThird-party access

  Receive transaction data only; bound by their own privacy policies and payment regulations.

• 2
  Game suppliersThird-party access

  Receive aggregate, anonymized play data; never receive individual identity information.

• 3
  Hosting providersThird-party access

  Store our data infrastructure; contractually forbidden from using it independently.

• 4
  Marketing / advertisingThird-party access

  We do not share personal data with advertisers or data brokers.

Cookies, Tracking, and Session Management

We use cookies and similar tracking technologies on sauditoto to maintain your session, remember your preferences, and track your activity within our platform. Session cookies expire when you close your browser or log out; they store your login token so you don't have to re-enter credentials on every page load. Persistent cookies (if enabled) may last for weeks or months and help us recognize you on future visits.

We use analytics cookies to track aggregate usage—which pages are popular, where users drop off, and how they navigate our mobile app. These cookies are anonymized and do not identify you by name. We do not use third-party analytics services that could track you across other websites. Your sauditoto activity remains within our platform.

Data Retention and Your Rights

We retain your account data for as long as your account is active and for a reasonable period afterward (typically several years) to comply with financial and legal regulations. Transaction records are kept to audit your account history, dispute resolution, and regulatory compliance. After a withdrawal is processed and confirmed, we keep payment records for at least three years. If you request account deletion, we anonymize or delete your personal data within days, except where we are legally obligated to retain it.

Under applicable data protection laws, you have rights over your information. You can request a complete copy of all data we hold about you; we provide this within ten business days. You can request correction of inaccurate information—if your address or name has changed, let us know and we'll update it. You can request deletion of your data, subject to legal retention periods. You can object to certain processing, such as being contacted for promotions. To exercise any of these rights, contact our support team with your request and identity verification.

Data Security and Encryption

We at sauditoto protect your data using industry-standard encryption and security practices. All communication between your phone or browser and our servers is encrypted using SSL/TLS protocols—a standard used by banks and payment processors worldwide. Your password is never stored in plaintext; we store a cryptographic hash that cannot be reversed. Payment data is encrypted before storage and is accessible only to our payment-processing systems.

Our servers are located in secure data centers with restricted physical access, backup power, and fire suppression. We maintain automated backups so that if one server fails, your data is not lost. We run security audits regularly and patch vulnerabilities promptly. If a data breach occurs, we notify affected users and relevant authorities as required by law within the minimum timeframe.

International Data Transfers

Our servers may be located outside Indonesia. If your data is transferred to another country for processing or storage, we ensure the receiving country has adequate data protection laws, or we implement additional safeguards such as standard contractual clauses. By using sauditoto, you consent to such transfers. Your data is subject to the laws and regulations of the jurisdiction(s) where it is stored and processed.

Contact and Questions

If you have questions about this privacy policy, how we handle your data, or how to exercise your rights, contact our support team. We respond to all privacy inquiries within ten business days. Our commitment is transparency—we want you to understand how sauditoto protects your information and how we use it to serve you. Your trust is essential, and we take that responsibility seriously across all our services, from Liga 1 betting in Jakarta to live casino tables across Surabaya, Bandung, and Medan.