apintotoPrivacy Policy

This page describes what we collect when you use apintoto and how we keep that data protected. We collect personal information during account registration, deposit processing, and gameplay to verify your identity, process payments, settle outcomes fairly, and comply with anti-money-laundering law. Your data security is central to our operations.

We at apintoto encrypt all sensitive information (passwords, payment details, identity documents) and store it on secure servers. We do not sell your data to third parties for marketing. We share information only with payment processors, compliance teams, and legal authorities when required by law.

Our privacy practices are transparent and consistent across all platforms — Android APK, iOS browser, and desktop access. If you have questions about how we handle your data or want to exercise your rights, contact our support team at any time.

What We Collect When You Use apintoto

We collect the following information when you create an apintoto account:

Identity data: Full name, date of birth, address, phone number, email address.
Verification documents: Scanned copy of your identity card, passport, or driver's license (used for KYC verification only).
Payment information: Bank account or e-wallet details (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet account identifiers).
Account activity: Deposit history, withdrawal requests, gameplay records, market positions, bet settlements.
Device and network data: IP address, device type (Android or iOS), app version, browser type, timestamp of login and logout.
Communication records: Support tickets, emails, chat messages between you and our customer service team.

Collection note: We collect this data only with your explicit consent during registration. You cannot use apintoto without providing mandatory fields (name, email, phone, address). Optional fields may improve your experience but are not required.

How We Use Your Data on apintoto

We use the information you provide for the following purposes:

Account verification: We verify your identity against your identity document and match it to your deposit payment method to prevent fraud.
Payment processing: We use your bank or e-wallet details to process deposits and withdrawals. Payment providers (mobile banking, local payment, online payment, etc.) receive only the information necessary to complete the transaction.
Compliance: We maintain records of your identity, deposits, and account activity to comply with anti-money-laundering and Know Your Customer (KYC) regulations.
Gameplay and settlement: We use your activity records to track your positions, settle outcomes fairly, and maintain your account balance.
Customer support: We use your contact details and communication history to respond to your inquiries and resolve disputes.
Security and fraud prevention: We analyse your login patterns, IP address, and transaction history to detect and prevent unauthorized access or fraudulent activity.
Legal obligation: We may disclose your data to law enforcement, tax authorities, or financial regulators if required by law or court order.

Third-Party Data Processors

We use specialized third-party providers to support apintoto operations. These include:

Payment processors: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking (and their intermediaries) receive transaction details needed to process your deposits and withdrawals.
Cloud hosting providers: Our servers may be located outside your jurisdiction. These providers are contractually bound to protect your data according to our standards.
Verification services: We may use third-party identity-verification services to cross-check your documents and details during KYC.
Analytics and monitoring: We use services to monitor platform performance, detect fraud, and analyse user behaviour patterns (anonymised).

All third-party processors sign data-protection agreements with apintoto requiring them to keep your information confidential and use it only for the purposes we specify. We do not sell your personal data to any third party for marketing or commercial use.

Your data protection rights

You have the right to know what data we hold about you and request a copy.
You have the right to correct inaccurate or incomplete information.
You have the right to request deletion of your data (subject to legal retention requirements).
You have the right to object to certain uses of your data (e.g., marketing communications).
You have the right to lodge a complaint with relevant data-protection authorities in your jurisdiction.

How Long We Keep Your Data

We at apintoto retain your data for as long as your account is active and for a period after account closure. Specifically:

Active accounts: Identity, contact, and payment information are retained while your account is open.
After account closure: We retain transaction records, settlement history, and identity documents for five to seven years to satisfy anti-money-laundering regulations and tax requirements.
Communication records: Support chat logs and emails are retained for two years after the final communication.
Device and network logs: IP addresses and login timestamps are retained for one year.

We delete data earlier if you explicitly request it and no legal obligation requires us to retain it. To request data deletion, contact our support team with your account details.

Cookies and Tracking Technologies

When you access apintoto on a browser (iOS Safari or desktop), we use cookies to remember your login status, language preference, and session information. Cookies are small text files stored on your device; they do not contain sensitive information like passwords or payment details.

The Android APK does not use traditional cookies but may use similar session-management techniques to keep you logged in across app sessions. You can disable cookies in your browser settings; however, this may affect your apintoto experience (e.g., you may need to log in more frequently).

We do not use cookies for marketing tracking or to build profiles of you across other websites. We do not share cookie data with third parties except as needed for fraud prevention and platform analytics.

How We Protect Your Data

We implement multiple security measures to protect your apintoto account and data:

Encryption: All data in transit (between your device and our servers) is encrypted using TLS (Transport Layer Security). All sensitive data at rest (on our servers) is encrypted.
Password security: We do not store your password in plaintext; we store only a cryptographic hash. We cannot retrieve your password; we can only reset it via email or SMS verification.
Access controls: Only authorised apintoto team members can access customer data, and only as needed for their specific role.
Fraud monitoring: We monitor account activity continuously to detect and prevent unauthorised access.
Account verification: We require identity verification before processing withdrawals or allowing sensitive account changes.

While we take security seriously, no system is completely immune to breach. If we discover a security incident affecting your data, we will notify you promptly and take corrective action as required by law.

Your Rights Regarding apintoto Data

You have rights over your personal data held by apintoto. Depending on your jurisdiction, you may be able to:

Request a copy: Ask us what data we hold about you and receive a copy in a readable format.
Request correction: If your address, phone number, or other details have changed, ask us to update your record.
Request deletion: Ask us to delete your data (we may decline if legal obligations require retention).
Object to processing: Ask us to stop using your data for certain purposes (e.g., analytics) — though we cannot stop using it for payments or legal compliance.
Data portability: Request a copy of your data in a format that can be transferred to another service.

To exercise any of these rights, contact our support team with your full name, account email, and a clear description of your request. We will respond within a reasonable timeframe — typically ten to thirty business days depending on the complexity of your request.

Children and Minors

apintoto does not knowingly collect data from individuals under the legal age to participate in online gaming in their jurisdiction. If we discover that a minor has created an account, we will suspend or close that account and forfeit any funds. If you are a parent or guardian and believe your child has opened an apintoto account, contact us immediately.

International Data Transfers

We at apintoto may transfer your data internationally to fulfil our operations. Our servers may be located in jurisdictions outside Indonesia. When we transfer data, we ensure it is protected by contractual safeguards equivalent to the protections under Indonesian law. You consent to such transfers by using apintoto.

Contact Us About Your Privacy

If you have questions about our privacy practices, want to exercise your data rights, or believe we have mishandled your information, contact our support team:

In-app support chat (available during business hours).
Email support (response within one business day).
Phone support in English and Indonesian (standard business hours).

We take privacy concerns seriously and will investigate any complaint. If you are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority or privacy commissioner.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or law. We will post the updated version on apintoto and notify you of material changes via email or in-app message. Your continued use of apintoto after an update constitutes acceptance of the new policy.

Last updated: This privacy policy is current as of the date published on apintoto's website. We review and update it regularly to ensure it remains accurate and compliant with applicable privacy laws across supported regions (Jakarta, Surabaya, Bandung, Medan, and other areas where our service operates).