dultoto Casino & Sportsbook Data Care
This page describes what we collect when you use dultoto and how we keep that data protected. Your account spans multiple services — sports betting on Liga 1 and Piala AFF, live-dealer casino, slot games, and esports markets — and we collect information across all of these to verify your identity, process your payments via DANA, e-wallet, mobile banking or bank transfer, and detect fraud. Because your data flows through multiple touchpoints (deposit, account verification, betting history, withdrawal), we explain exactly what we collect, where it sits, who can access it, and what rights you have.
We're transparent about data handling because account security and privacy are foundational to dultoto. When you provide identity documents for KYC, payment details for deposits, or betting preferences for personalization, you're trusting us to store and use that information responsibly. Our policy details that commitment.
What We Collect on dultoto
We collect information in three categories: registration data, payment data, and behavioral data. During signup, we collect your full name, date of birth, email address, phone number, and residential address. All of this is required for account verification and to comply with financial regulations in the jurisdictions where we operate (Jakarta, Surabaya, Bandung, Medan, Semarang, and other supported regions).
For payment processing, we collect payment method details — your DANA username, e-wallet account number, or bank account details linked to mobile banking, local payment, online payment, e-wallet, or mobile banking. We also collect identity documents during KYC: a scan of your government-issued ID and proof of address. These documents are encrypted and stored separately from your main account profile. We never store full credit card numbers or banking credentials directly; payment processors handle encryption and storage of sensitive payment tokens.
Behavioral data includes your betting history, account activity timestamps, IP addresses, device information, and browser cookies. We collect this to personalize your experience, detect fraud, and understand how dultoto is used. This data is aggregated to improve game performance, detect account abuse, and ensure fair play across all users.
How We Use Your Data
We use your registration data to verify your identity, process account opening, and comply with anti-money-laundering requirements. Your payment data is used solely for deposit and withdrawal processing — we don't use it for any secondary purpose without your consent. We share payment details only with our payment processors (the banks and wallet providers who handle transactions) and our compliance team to flag suspicious activity.
Behavioral data helps us improve dultoto — we analyze it to identify game crashes, slow load times, or confusing account flows, then fix them. We also use behavioral signals to detect account abuse (repeated bonus claims without genuine engagement, collusion between accounts, or rapid-fire high-stakes betting followed by withdrawal attempts). This is core to protecting legitimate users from fraud.
Your data stays within dultoto and our direct payment partners — we never buy or sell user lists, and we don't share your account activity with advertisers or data brokers.
Data Storage and Security
We store account data on servers within the Asia-Pacific region. Your encrypted identity documents, payment details, and transaction history sit in isolated databases with access restricted to our authentication, payment, and compliance teams. We use industry-standard encryption (TLS 1.2 or higher) for data in transit and AES-256 for data at rest. Our servers are monitored 24/7 for intrusion attempts, and we conduct quarterly penetration testing to identify vulnerabilities.
We keep your account data as long as your account is active, plus seven years after closure for regulatory retention (financial and anti-money-laundering compliance requires this). After seven years, we anonymize or delete your data unless we're required by law to retain it longer. You can request access to your stored data at any time via our support team — we provide it in a portable format (CSV or PDF) within 14 days.
Our data deletion policy
You can request account closure and data deletion from your account settings under "Privacy & Security." We'll immediately deactivate your account and begin the deletion process. Your balance (if any) will be processed as a withdrawal to your registered payment method. After withdrawal completion, we delete your personal data from active systems within 30 days, though we retain anonymized transaction records (dates, amounts, no names) for regulatory compliance. If you have an ongoing withdrawal request or dispute, we delay deletion until those are resolved.
Cookies and Tracking Technology
We use cookies to keep you logged in and to remember your preferences (preferred betting odds format, language setting, etc.). These are essential cookies; without them, dultoto wouldn't function. We also use analytics cookies to track page load times, error rates, and user flows — this helps us improve performance. You can disable non-essential cookies in your browser settings without losing account access, though some features may be slower. We respect Do-Not-Track headers if your browser sends one.
Your Rights and Contact
You have the right to access, correct, and delete your personal data. You also have the right to data portability — we'll export your account history in a standard format. If you believe we've misused your data, you can file a complaint with our support team or with your local data-protection authority. Our support team (available 24/7) handles all privacy requests via email or live chat.
We update this policy periodically as dultoto grows or as law changes. Material updates are announced via your registered email. Your continued use of dultoto after a policy update means you accept the new terms.