Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by latoto through our website at latoto.click, mobile applications (if any), and any other digital platforms we operate. This policy applies to all users of latoto services, including registered players, visitors to our website, and individuals who contact our customer support team.

latoto is an online betting platform serving the Indonesian market, offering sports betting, live casino games, togel (traditional Indonesian numbers lottery), slot games, and other gambling entertainment. We operate in compliance with international data protection standards and Indonesian privacy regulations to ensure your personal information is handled responsibly and securely.

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer using the contact information provided in Section 12 of this document.

2. Information We Collect

2.1 Information You Provide to Us

When you register for a latoto account or use our services, you provide us with personal information, including:

• Identity Information: Full name, date of birth, gender, and nationality as shown on your Indonesian national identity card (KTP) or other government-issued identification documents.
• Contact Information: Residential address, email address, mobile phone number, and preferred communication methods.
• Account Credentials: Username, password, and security questions used to access your latoto account.
• Financial Information: Bank account details, e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card information, and transaction history for deposits and withdrawals.
• Verification Documents: Copies of identification documents (KTP), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification (KYC) purposes.
• Communication Records: Contents of emails, live chat conversations, WhatsApp messages, and Telegram communications with our customer support team.
• Survey and Feedback Data: Responses to customer satisfaction surveys, feedback forms, and promotional questionnaires.

2.2 Information We Collect Automatically

When you access and use latoto services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, device ID), and mobile network information.
• Connection Information: IP address, internet service provider (ISP), connection timestamps, and geographic location derived from IP address.
• Usage Information: Pages visited, features used, time spent on each page, click patterns, search queries, games played, bets placed, and navigation paths through our website.
• Transaction Data: Betting history, deposit and withdrawal records, bonus claims, wagering activity, game outcomes, and account balance changes.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar tracking technologies. See Section 3 for details about our cookie usage.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) provide transaction confirmation data and payment verification information.
• Identity Verification Services: Third-party KYC and identity verification providers may supply verification results and fraud screening data.
• Gaming Providers: Game developers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe provide game session data and outcome information.
• Analytics Services: Web analytics providers supply aggregated traffic analysis and user behavior insights.
• Advertising Partners: Marketing platforms may provide campaign performance data and audience demographic information.

3. How We Use Your Information

latoto uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your latoto account.
• Verifying your identity and age to comply with legal requirements (21+ age restriction).
• Processing your deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR).
• Providing access to sports betting, live casino, togel, slots, and other gaming services.
• Calculating bet settlements, distributing winnings, and maintaining accurate account balances.
• Managing bonus campaigns, promotions, and loyalty programs.
• Responding to your customer support inquiries via email, live chat, WhatsApp, or Telegram.

3.2 Legal and Regulatory Compliance

• Complying with Indonesian legal obligations and international gaming regulations.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.
• Preventing fraud, money laundering, terrorist financing, and other illegal activities.
• Detecting and preventing underage gambling, bonus abuse, multi-accounting, and terms violations.
• Cooperating with law enforcement agencies, regulatory authorities, and legal proceedings when required by law.
• Maintaining records for audit and compliance purposes as required by gaming licenses and regulations.

3.3 Platform Security and Improvement

• Protecting latoto systems from security threats, cyberattacks, and unauthorized access.
• Monitoring for suspicious activity, fraudulent transactions, and terms violations.
• Analyzing usage patterns to improve platform performance, user experience, and service quality.
• Testing new features, conducting A/B testing, and optimizing website design.
• Troubleshooting technical issues and resolving bugs or errors.

3.4 Marketing and Communications

• Sending promotional emails about bonuses, special offers, and new games (with your consent).
• Displaying personalized content and recommendations based on your gaming preferences.
• Conducting customer satisfaction surveys and market research.
• Notifying you about important account updates, policy changes, and service announcements.
• Celebrating Indonesian cultural events with special promotions during Independence Day (17 August), Idul Fitri, Chinese New Year (Imlek), and other holidays relevant to our Indonesian player community.

3.5 Responsible Gaming

• Monitoring betting patterns to identify signs of problem gambling.
• Implementing deposit limits, time limits, and self-exclusion tools you have requested.
• Providing access to responsible gaming resources and support services.
• Restricting or suspending accounts when required to protect vulnerable players.

4. Legal Basis for Processing

Under international data protection laws, latoto processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing betting services, processing transactions, managing your account).
• Legal Obligation: Processing is required to comply with legal or regulatory obligations (KYC verification, AML checks, age verification, record-keeping).
• Legitimate Interest: Processing serves latoto's legitimate business interests (fraud prevention, platform security, service improvement, analytics) while respecting your privacy rights.
• Consent: Processing is based on your explicit consent (marketing communications, optional cookies, data sharing for specific purposes). You may withdraw consent at any time.

5. How We Share Your Information

latoto does not sell your personal information to third parties. We share your information only in the following circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian banks and e-wallet providers process your deposits and withdrawals.
• Gaming Providers: Software developers provide casino games and sports betting platforms.
• Identity Verification Services: KYC providers verify your identity and screen for fraud.
• Customer Support Tools: Live chat, email, and communication platforms facilitate customer service.
• Cloud Hosting Providers: Secure servers store and process your data.
• Analytics Services: Web analytics tools help us understand user behavior and improve services.

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, courts, or regulatory bodies when:

• Required by Indonesian law, court order, or legal process.
• Necessary to investigate fraud, security threats, or illegal activity.
• Needed to protect latoto's legal rights or comply with gaming license requirements.
• Required for tax reporting, anti-money laundering investigations, or other regulatory purposes.

5.3 Business Transfers

If latoto is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the new owner or successor entity, subject to privacy protections equivalent to those described in this policy.

5.4 With Your Consent

We may share your information with other third parties when you provide explicit consent for a specific purpose.

6. Data Retention

latoto retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: We retain information for the duration of your active account plus an additional period after closure.
• Transaction Records: Financial transaction records are retained for at least 7 years to comply with Indonesian banking regulations and international AML standards.
• KYC Documents: Identity verification documents are retained for 7 years after account closure for regulatory compliance.
• Marketing Data: Marketing preferences and communication records are retained until you withdraw consent or request deletion.
• Legal Claims: Information may be retained longer if necessary to establish, exercise, or defend legal claims.

When personal information is no longer required, we securely delete or anonymize it in accordance with data protection standards.

7. Data Security

latoto implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same technology used by major Indonesian banks such as BCA, BRI, BNI, and Mandiri.
• Secure Storage: Personal information is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
• Access Controls: Only authorized latoto personnel with a legitimate need can access your personal information, and all access is logged and monitored.
• Employee Training: latoto staff receive regular training on data protection, privacy practices, and security protocols.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and address potential risks.
• Vendor Security: Third-party service providers are required to maintain adequate security standards and undergo regular security assessments.

Despite these measures, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information using industry best practices.

8. Your Privacy Rights

Under international data protection laws and Indonesian privacy principles, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements.
• Right to Restriction: You may request that we limit processing of your personal information in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, please contact our Data Protection Officer using the contact information in Section 12. We will respond to your request within 30 days. Proof of identity may be required to process certain requests.

9. Cookies and Tracking Technologies

latoto uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and personalize content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for website operation, authentication, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and login status to enhance usability.
• Analytics Cookies: Collect anonymous usage data to help us understand how visitors interact with our website.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness (with your consent).

You can control cookie preferences through your browser settings. Disabling certain cookies may limit website functionality. For detailed cookie information, see our Cookie Policy.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia, including countries that may not have equivalent data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by international data protection authorities.
• Ensuring recipients are certified under recognized data protection frameworks.
• Obtaining your explicit consent for specific transfers where required.

These safeguards ensure your personal information receives adequate protection regardless of where it is processed.

11. Children's Privacy

latoto services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from someone under 21, we will promptly delete that information and close the associated account. If you believe we have collected information from an underage individual, please contact us immediately.

12. Changes to This Privacy Policy

latoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by:

• Posting a prominent notice on our website.
• Sending an email to your registered email address.
• Displaying an in-account notification upon your next login.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through our website
• WhatsApp: Available through our customer support portal
• Telegram: Available through our customer support portal

We will respond to all privacy-related inquiries within 30 days. For urgent data protection concerns, please mark your communication as "Urgent Privacy Matter."

By using latoto services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. Your continued use of our platform after policy changes constitutes acceptance of the updated policy.