Privacy Policy

1. Introduction

Pototo ("we," "us," "our," or the "Platform") operates an online betting platform serving Indonesian players at https://pototo.cam. This Privacy Policy applies to all personal information collected through our website, mobile applications, customer service channels, and related services. We are committed to transparency in our data practices and compliance with applicable privacy and data protection laws.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of Pototo's services. By creating an account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your personal information as described herein.

2. Information We Collect

Pototo collects various types of information to provide, maintain, and improve our services. The categories of information we collect include:

2.1 Information You Provide Directly

When you register for a Pototo account, you provide us with personal information including:

• Identity Information: Full legal name, date of birth, gender, and nationality
• Contact Information: Email address, phone number, and residential address
• Account Credentials: Username, password, and security questions
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history
• Verification Documents: Government-issued identification (KTP Nasional), proof of address, and selfie photographs for KYC (Know Your Customer) verification
• Communication Data: Records of your interactions with our customer support team via live chat, email, WhatsApp, or phone

2.2 Information Collected Automatically

When you access and use the Pototo platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Connection Information: IP address, internet service provider, geographic location (country, city), time zone
• Usage Data: Pages visited, features used, time spent on pages, clickstream data, search queries, bet history, game preferences
• Transaction Data: Deposit amounts, withdrawal requests, payment method used, transaction timestamps, currency (IDR)
• Performance Data: Platform errors, crashes, loading times, and technical diagnostics

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment processors (banks and e-wallet providers) to verify transactions and prevent fraud
• Identity verification services to confirm your age, identity, and address during KYC processes
• Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, PG Soft) who share gameplay data and bet outcomes
• Marketing partners who provide demographic and interest data to help us improve our services (only with your consent)

3. How We Use Your Information

Pototo uses your personal information for the following purposes:

3.1 Service Delivery and Account Management

• Creating and maintaining your Pototo account
• Processing deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR)
• Providing access to sports betting, live casino, and slot games
• Settling bets and distributing winnings
• Administering bonuses, promotions, and loyalty rewards
• Providing customer support in Indonesian and English

3.2 Legal Compliance and Security

• Verifying your identity and age (21+ requirement) through KYC processes
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Detecting and preventing fraud, money laundering, collusion, and other illegal activities
• Enforcing our Terms and Conditions and identifying violations
• Responding to legal requests from government authorities and law enforcement
• Protecting the security and integrity of our platform and users

3.3 Platform Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Conducting market research and customer satisfaction surveys
• Developing new features, products, and services tailored to Indonesian players
• Testing and optimizing platform performance, loading speeds, and mobile responsiveness
• Identifying and fixing technical issues, bugs, and security vulnerabilities

3.4 Marketing and Communications

• Sending promotional offers, bonus announcements, and marketing materials via email, SMS, and push notifications (with your consent)
• Personalizing content, game recommendations, and betting suggestions based on your preferences
• Notifying you of important account updates, policy changes, and service announcements
• Conducting targeted advertising campaigns relevant to Indonesian sports fans (BRI Liga 1, EPL, badminton, e-sports)

You may opt out of marketing communications at any time by adjusting your account settings or clicking "unsubscribe" in our emails.

4. Information Sharing and Disclosure

Pototo does not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the platform:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and PG Soft receive limited data to facilitate gameplay
• Identity Verification Services: Third-party KYC providers verify your identity, age, and address
• Cloud Hosting: Secure data storage and server infrastructure providers
• Customer Support Tools: Live chat, email, and ticketing system providers
• Analytics Providers: Tools that help us understand user behavior and platform performance

All service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize.

4.2 Legal Obligations

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from government authorities, regulators, or law enforcement agencies
• Legal obligations to prevent fraud, money laundering, or other crimes
• Protection of Pototo's rights, property, or safety, or that of our users

4.3 Business Transfers

If Pototo undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the new owner as part of that transaction. We will notify you via email and prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when you provide explicit consent, such as participating in promotional partnerships or marketing campaigns.

5. Data Security Measures

Pototo employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Sockets Layer) encryption—the same technology used by banks and financial institutions
• Secure Storage: Personal information is stored on secure servers with restricted access, firewalls, and intrusion detection systems
• Access Controls: Only authorized Pototo employees with a legitimate business need can access personal information. Access is logged and monitored
• Password Protection: Account passwords are hashed and salted using advanced cryptographic algorithms. We never store plaintext passwords
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential risks
• Fraud Detection: Automated systems monitor for suspicious activity, duplicate accounts, and unusual betting patterns
• Staff Training: Employees receive regular training on data protection, privacy compliance, and security best practices

While we implement robust security measures, no system is 100% secure. You play an important role in protecting your account by choosing a strong password, not sharing your credentials, and logging out after each session on shared devices.

6. Cookies and Tracking Technologies

Pototo uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow the platform to recognize your device, remember your preferences, and provide a personalized experience.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, including login, account access, and transaction processing. These cannot be disabled.	Session or persistent
Performance Cookies	Collect anonymous data on how users interact with the platform to identify issues and improve performance.	Persistent (up to 2 years)
Functional Cookies	Remember your preferences such as language (English), currency (IDR), and game favorites.	Persistent (up to 1 year)
Marketing Cookies	Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. Require consent.	Persistent (up to 1 year)

6.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect platform functionality. Disabling essential cookies will prevent you from logging in or placing bets. For more information on managing cookies, visit your browser's help section.

7. Data Retention

Pototo retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Active Accounts: We retain data for as long as your account remains active
• Closed Accounts: After account closure, we retain transaction records and KYC documents for 7 years to comply with financial regulations and anti-money laundering laws
• Marketing Data: If you opt out of marketing communications, we retain your email address solely to honor your opt-out request
• Inactive Accounts: Accounts with no activity for 3 consecutive years may be closed, and associated data deleted (after notifying you via email)

You may request deletion of your personal information by contacting customer support, subject to our legal retention obligations.

8. Your Privacy Rights

You have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Data Portability: Request a machine-readable copy of your data to transfer to another service
• Right to Object: Object to processing of your data for marketing purposes
• Right to Restrict Processing: Request restriction of processing in certain circumstances
• Right to Withdraw Consent: Withdraw consent for data processing activities that require your consent

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. Proof of identity may be required to process your request.

9. Children's Privacy

Pototo's services are strictly for individuals aged 21 and older. We do not knowingly collect personal information from anyone under 21 years of age. If you are under 21, you must not register an account or use our services. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to Pototo should contact us immediately at [email protected].

10. International Data Transfers

Pototo primarily serves Indonesian players and stores data on servers located in secure jurisdictions. Some of our service providers (such as cloud hosting, game providers, and analytics tools) may be located outside Indonesia, which means your data may be transferred to and processed in countries with different data protection laws. We ensure that all international data transfers comply with applicable laws and that adequate safeguards are in place to protect your information, including standard contractual clauses and data processing agreements with third parties.

11. Changes to This Privacy Policy

Pototo may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by:

• Sending an email to the address registered on your account
• Displaying a prominent notice on our homepage and in your account dashboard
• Updating the "Last Updated" date at the top of this page

Your continued use of Pototo's services after changes have been published constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or Pototo's data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the Pototo platform
• WhatsApp: Contact information available in your account dashboard
• Postal Address: Available upon request for formal legal correspondence

Our customer support team operates 24/7 with the fastest response times during Western Indonesia Time (WIB) business hours (09:00 - 21:00 WIB). For general inquiries, visit our FAQ page. For terms of service, see our Terms and Conditions.