cumitotoPrivacy Policy

This page describes what we collect when you use cumitoto and how we keep that data protected. We at cumitoto handle your personal information—name, email, payment details, identity documents, and betting history—with strict security measures and transparent practices. Your data is used only for account verification, fraud prevention, regulatory compliance, and service improvement.

Our privacy commitments apply to every member, whether you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer (mobile banking, local payment, online payment, e-wallet). We do not sell your personal data to third parties. We share data only with payment processors, identity-verification vendors, and regulators when required by law. This policy explains your rights and our obligations in plain language.

If you have questions about how we handle your data or wish to exercise your privacy rights, contact our support team through the channels listed at the end of this document.

What Data We Collect at cumitoto

We at cumitoto collect personal data in two categories: information you provide directly and information we gather through your interactions with our platform.

Information you provide:

• Email address and password during account registration.
• Full legal name, date of birth, and residential address for Know Your Customer (KYC) verification.
• Government-issued identity document (passport, national ID, driving licence) and proof of residence (utility bill, bank statement).
• Phone number for account recovery and support contact.
• Payment account details (bank account number or e-wallet identifier) for deposits and withdrawals.
• Any information you submit when contacting our support team or filing a complaint.

Information we collect automatically:

• Your betting and gaming history—all bets placed, games played, outcomes, and wager amounts.
• Account activity logs—login timestamps, device types, IP addresses, and geographic location at login.
• Transaction records—all deposits, withdrawals, bonus claims, and balance changes.
• Browser and device information—operating system, browser type, device identifier, and other technical details.
• Cookie data and analytics—how you navigate cumitoto, which pages you visit, time spent on each section.

How We Use Your Data at cumitoto

Account Verification

We verify your identity to confirm eligibility, prevent underage access, and enable withdrawals. KYC documents are matched against identity databases.

Fraud Prevention

We analyze betting patterns, login behavior, and payment history to detect and block fraudulent activity, money-laundering, and multi-accounting.

Regulatory Compliance

We retain records for anti-money-laundering (AML) checks, tax reporting, and gaming license compliance across Indonesian and international jurisdictions.

Service Improvement

We analyze aggregate usage data—which games are popular, payment method preferences, support ticket trends—to enhance cumitoto's features and performance.

Marketing (if consented)

If you opt in, we send promotional emails about new games, seasonal events (Idul Fitri, Idul Adha, Imlek, Nyepi), or Liga 1 and Piala AFF tournaments.

Dispute Resolution

We use account history to investigate complaints about bets, bonuses, or payment issues and to make fair rulings.

Third-Party Processors and Data Sharing

We at cumitoto do not sell your personal data. However, we share data with trusted partners who help us operate the platform:

• Payment processors: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and partner banks (mobile banking, local payment, online payment, e-wallet) receive transaction details to process your deposits and withdrawals.
• Identity verification vendors: Third-party verification services may access your identity documents and personal details to confirm eligibility and prevent fraud.
• Hosting and analytics providers: Our servers and analytics platforms may be located outside Indonesia; these vendors process data according to contracts that require confidentiality and security.
• Regulators and law enforcement: We may disclose data to gambling regulators, tax authorities, and law enforcement if required by legal process or court order.
• Support platforms: Live chat and email systems may retain logs of your communications for quality assurance and training.

All third-party partners are contractually bound to protect your data and use it only for their contracted purpose. We do not permit these vendors to use your data for marketing or other unrelated purposes.

Data Retention and Your Rights

We at cumitoto retain your personal data for as long as you maintain an active account, plus a retention period required by gaming regulation (typically 5–7 years after account closure). After this period, we securely delete or anonymize your information.

Under applicable data-protection laws, you have the following rights:

• Right to access: You can request a copy of all personal data we hold about you.
• Right to correction: You can request that we correct inaccurate or incomplete information (e.g., spelling errors in your address).
• Right to deletion: You can request deletion of your data, subject to our legal retention obligations.
• Right to withdraw consent: If you consented to marketing emails, you can opt out at any time via the unsubscribe link or account settings.
• Right to data portability: You can request a machine-readable copy of your data for transfer to another service.

To exercise any of these rights, contact our support team with your account details and a description of your request. We will respond within 15 business days.

Security Measures and Data Protection

We at cumitoto employ industry-standard security measures to protect your data from unauthorized access, alteration, or disclosure:

• All connections to cumitoto are encrypted using SSL/TLS protocols.
• Personal data is stored in encrypted databases with restricted access.
• We conduct regular security audits and penetration tests.
• Staff access to sensitive data is logged and monitored.
• Passwords are hashed and salted, never stored in plain text.
• We do not store full payment card details; payment data is handled by PCI-compliant processors.

Despite these measures, no system is completely immune to security breaches. If we discover unauthorized access to your personal data, we will notify you and relevant authorities as required by law.

Cookies and Tracking Technologies

We at cumitoto use cookies and similar technologies for the following purposes:

Session Cookies

Maintain your login state and remember settings during your visit; deleted when you close your browser.

Persistent Cookies

Remember your preferences (language, timezone) across multiple visits; remain on your device for up to one year.

Analytics Cookies

Track how you use cumitoto—which pages you visit, how long you stay, where you click—to improve user experience.

Security Cookies

Prevent unauthorized access, detect suspicious activity, and enforce rate limits on login attempts.

Most browsers allow you to control or delete cookies. However, disabling cookies may limit cumitoto's functionality—for example, you may be logged out more frequently or unable to access certain features. Third-party analytics tools (such as Google Analytics) may set their own cookies; you can opt out through those services' privacy controls.

International Data Transfers

We at cumitoto operate servers and partner with vendors located outside Indonesia. When we transfer your data internationally—such as to hosting providers in Singapore, Australia, or Europe—we ensure that transfers comply with applicable law. We use contractual protections (Standard Data Protection Clauses) to maintain the same level of security as if your data remained in Indonesia.

By using cumitoto, you acknowledge that your data may be processed in jurisdictions with different privacy laws than Indonesia. We remain responsible for protecting your data regardless of where it is stored or processed.

Children and Minors

We at cumitoto do not knowingly collect personal data from minors. Our platform requires that all users meet the minimum age threshold set by their jurisdiction's gaming law. If we discover that an account belongs to a minor, we will close the account and forfeit any balance in accordance with our terms and applicable law.

Parents or guardians who believe a minor has registered at cumitoto should contact our support team immediately with evidence of the account registration.

Policy Updates

We at cumitoto may update this privacy policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes via email or account notification at least 30 days before the change takes effect. Continued use of cumitoto after the change date constitutes your acceptance of the updated policy. If you do not agree with the changes, you may request account closure and withdrawal of your balance before the effective date.

Contact Us About Privacy

If you have questions, concerns, or complaints about our privacy practices, or if you wish to exercise your data rights, contact our privacy team:

• Live chat: Available during business hours through your cumitoto account.
• Email: Support team responds within one business day.
• Phone: Multilingual support available during standard business hours.
• Mailing address: Contact details available on our website footer for formal written inquiries.

If you are dissatisfied with our response, you have the right to lodge a complaint with your local data-protection regulator or authority. Members in major Indonesian cities—Jakarta, Surabaya, Bandung, Medan, Semarang—are subject to Indonesian privacy law and may contact the relevant local authority for assistance.

Summary – Privacy at cumitoto

We at cumitoto collect your personal data only to verify your identity, prevent fraud, comply with gaming regulations, and improve our service. We do not sell your data to advertisers or marketers. We share data with payment processors and verification vendors—all under strict confidentiality agreements. Your data is encrypted, retained securely, and deleted after regulatory periods expire.

You have rights: access, correct, delete, and opt out of marketing. Contact our support team anytime to exercise these rights. We respond within 15 business days.

This privacy policy is binding on cumitoto and reflects our commitment to transparent data handling. By using cumitoto, you acknowledge that you have read and understood this policy and agree to our data practices.