investoto Casino & Sportsbook Data Care
This page describes what we collect when you use investoto and how we keep that data protected. We operate transparently about your information, from the moment you install our app on Android or access us via browser on iOS through every deposit, withdrawal, and account verification step. Our services are available only where local law permits.
We recognize that your trust depends on clear practices. When you fund your investoto account via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet—or transfer via mobile banking, local payment, online payment, or e-wallet—you're sharing sensitive financial details. We don't take that lightly. Our encryption, verification workflows, and third-party processor agreements all exist to keep your data secure and your account yours alone.
What follows is our full privacy commitment. You'll find sections on what we collect, how we use it, who has access, your rights, and how to contact us if you have questions.
What We Collect at investoto
We collect your personal data in a few key moments: account registration, payment processing, and KYC verification. During registration, we ask for your name, email, phone number, and date of birth. We store a hashed version of your password—never in plain text. When you add a payment method—whether DANA, e-wallet, or a bank virtual account—we record the transaction ID and timestamp; we do not store your card number or e-wallet PIN in our systems.
Our KYC (Know Your Customer) process requires proof of identity. We accept a national ID card, passport, or driver's license. We also request a selfie with your ID to confirm it's you. These documents are scanned, verified, and then encrypted. We retain them only as long as your account is active; if you close your account, we delete them within 30 days unless local regulation requires us to keep them longer.
We also collect behavioural data: your login times, game selections, betting patterns, and IP address. This helps us detect fraud, flag unusual activity, and improve our platform. We do not sell this data to third parties.
How We Use Your Data on investoto
Our primary use is operational. We verify your identity so we can process deposits and withdrawals safely. When you deposit via mobile banking scan-and-pay, we confirm the transaction with your bank or e-wallet provider. When you request a withdrawal, we send the funds back to your verified payment method—and we log that transaction for audit and regulatory compliance.
We also use your data for security. If someone tries to log into your investoto account from an unfamiliar device, we may flag it or ask for two-factor authentication. If we detect a pattern of unusual bets or rapid withdrawals, we investigate. This protects you and protects us from fraud.
We may contact you about account changes (e.g., if your password is reset), payment failures, or deposit bonuses that apply to your account. We will not phone you with unsolicited offers; any communication we send is transactional or security-related.
Third Parties, Cookies, and Your Rights on investoto
We work with payment processors (your bank, DANA, e-wallet, mobile banking, local payment, online payment, and e-wallet providers) who handle the actual fund transfer. These partners see only the transaction data needed to process your request—not your full account profile. We also use hosting providers outside Indonesia; your data may sit on servers in Singapore or another jurisdiction. We encrypt it in transit and at rest.
Our website and app use cookies to remember your login session and track which games you view. These are first-party cookies (set by investoto, not by ad networks). You can disable cookies in your browser settings, though this may affect your experience on investoto.
Your Data Rights
You have the right to request a copy of your data, ask us to correct errors, or request deletion if you close your account. Contact us at [email protected] with "Data Request" in the subject line.
If you're a user in Jakarta, Surabaya, Bandung, Medan, or Semarang, you may also be subject to local data protection laws. We comply with applicable regulations in each jurisdiction where we operate.
Our data retention policy: we keep account data while your investoto account is active. After closure, we retain transaction records for 7 years (for tax and regulatory audit). Personal documents (ID scans, selfies) are deleted 30 days after account closure unless law requires otherwise.
Contact Us About Your investoto Privacy
If you have questions about how we use your data, want to exercise your rights, or wish to report a data breach, reach out:
- Email: [email protected]
- Subject line: "Privacy Inquiry" or "Data Request"
- Response time: We aim to respond within 10 business days
We may update this policy periodically as our platform evolves. Major changes will be announced on the investoto homepage. Your continued use of our platform after any update means you accept the new terms.