kytoto Casino & Sportsbook Data Care
This page describes what we collect when you use kytoto and how we keep that data protected. Our privacy practices reflect the sensitivity of your account details, payment information, and betting history. We do not sell your data to third parties, and we encrypt all personal information on our servers.
We collect data in two ways: directly (when you register, verify your identity, or deposit) and indirectly (when you use our platform — match entries, market choices, session timestamps). This guide explains what each type of data is used for, how long we keep it, and what rights you have to access or delete it.
Our service operates in Indonesia and serves users in Jakarta, Surabaya, Bandung, and Medan. We comply with local data protection standards and Indonesian law. If you have questions about your data or how we handle it, contact our support team during Jakarta business hours (Monday–Friday, 9 AM–5 PM).
Data we collect from kytoto users
We collect personal data when you register an account. This includes your legal name, date of birth, email address, phone number, and password. We use your email to send account confirmations, withdrawal receipts, and important notices. We use your phone number to deliver SMS verification codes during login and password recovery.
We also collect KYC (Know Your Customer) data before you can deposit or withdraw. This includes a copy of your government-issued ID (passport, driver's license, or national ID card) and proof of residential address (utility bill, rental agreement, or bank statement). Our verification team reviews these documents to confirm your identity and prevent fraud. We keep these documents encrypted on our servers for compliance and audit purposes.
When you deposit funds, we record the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer), the amount, the timestamp, and the settlement status. We do not store your full bank account number or mobile banking token — we store only the payment method type and a masked reference. This allows us to match deposits to your account without exposing sensitive payment details.
How we use your data on kytoto
We use your data to operate our platform. Your name and email authenticate your account and allow us to contact you about account changes, withdrawals, or security issues. Your KYC data confirms your identity for regulatory compliance and fraud prevention. Your payment history lets us process deposits and withdrawals accurately.
We also track your betting activity — which markets you enter, what odds you take, when you place entries, and how much you wager. This data stays in your account ledger and is used to calculate winnings, settle markets, and generate your account statements. We do not share this activity with third parties. It is kept private to your account.
We encrypt all data in transit and at rest
Data moving between your device and our servers uses SSL/TLS encryption. Data stored on our servers is encrypted with AES-256. We do not store plaintext passwords — we store only hashed versions.
Third-party processors and data location
We use third-party payment processors to handle deposits and withdrawals. When you deposit via local payment, online payment, e-wallet, or mobile banking, your transaction is routed through those providers' systems. They collect transaction data (amount, timestamp, status) as part of their service. We do not control their privacy policies — you should review those separately if you have concerns about their data practices.
Our servers may sit outside Indonesia. We use cloud infrastructure located in multiple regions for redundancy and performance. This means your data may be stored on servers in Singapore, Australia, or other countries. We enforce the same encryption and security standards across all server locations. You acknowledge this international data transfer when you use kytoto.
Your rights and data deletion on kytoto
You have the right to access your data. Log into your account and view your KYC status, payment history, and betting activity in your account page. You can download a copy of your account data by requesting it from our support team — we will provide it within 5 business days.
You have the right to request deletion of your account. Send a deletion request to our support team with your registered email. We will anonymize your personal data but may retain your betting history and transaction records for compliance and dispute resolution. Some data cannot be deleted if we are required to keep it by law or for regulatory audits.
Cookies and session tracking on kytoto
We use cookies to maintain your session when you log into kytoto. Session cookies are temporary and expire when you close your browser. They store your login state so you do not have to re-enter your credentials every time you navigate between pages. These cookies are essential for the platform to function.
We also use analytics cookies to understand how users navigate our platform — which markets are most popular, how long sessions last, where users drop off. These cookies do not identify you personally — they record only aggregate patterns. You can disable analytics cookies in your browser settings without affecting your account functionality.
Changes to our kytoto privacy policy
We may update this privacy policy if our practices change or if the law requires it. We will announce significant changes on our homepage and via email to registered accounts. Changes take effect 30 days after announcement unless the change is required by law, in which case it takes effect immediately. Your continued use of kytoto after a policy change constitutes acceptance of the new terms.
Contact us about privacy
If you have questions about how we handle your data, contact our support team. We are available in Indonesian and English during Jakarta business hours (Monday–Friday, 9 AM–5 PM, excluding Idul Fitri, Idul Adha, and Imlek holidays). You can reach us via the chat feature in your account, email, or phone.
Our commitments on data protection
We at kytoto commit to protecting your data against unauthorized access, alteration, or loss. We use industry-standard encryption, secure password storage, and restricted server access. Our staff do not see your plaintext password or full payment details. Our servers are monitored for intrusions 24/7.
We do not sell your data, rent it, or share it with advertisers. We share data only with payment processors (DANA, e-wallet, mobile banking, local payment, banks) to process your transactions, and with legal authorities if required by law. We do not use your betting history to profile you for marketing or discrimination.
We retain your data for as long as your account is active. After you delete your account, we keep anonymized transaction records for compliance and dispute resolution for up to 7 years. Personal data (name, ID, address) is deleted within 90 days unless we are required to retain it by law.