mstoto Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how mstoto ("we," "us," "our") collects, uses, stores, protects, and shares personal information obtained from users ("you," "your") of our online gaming platform accessible at https://mstoto.cam. This policy applies to all personal data processed through our website, mobile applications, customer service interactions, and any other touchpoints where you interact with mstoto services.

By creating an account, accessing our platform, or using any mstoto services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please do not use our services. This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together govern your relationship with mstoto.

mstoto is committed to protecting the privacy rights of Indonesian players and complying with applicable data protection laws and international best practices for online gaming operators. We recognize that your personal information is sensitive and valuable, and we implement comprehensive technical and organizational measures to safeguard it against unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a mstoto account, we collect the following personal information that you provide voluntarily:

• Identity Information: Full legal name as it appears on your Indonesian national identity card (KTP), date of birth, gender, and nationality.
• Contact Information: Email address, mobile phone number registered in Indonesia, and residential address including street, city, province, and postal code.
• Account Credentials: Username and encrypted password for account access.
• Financial Information: Bank account details for deposits and withdrawals including bank name (BCA, BRI, BNI, Mandiri, or others), account number, and account holder name; e-wallet details for OVO, DANA, GoPay, ShopeePay, or LinkAja where applicable.
• Verification Documents: Copies or photos of government-issued identification (KTP), proof of address documents (utility bills, bank statements), and selfie photos for identity verification (KYC) purposes.
• Communication Data: Messages exchanged with our customer support team via live chat, email, WhatsApp, or other channels including support tickets, feedback, complaints, and inquiries.
• Survey and Preference Data: Responses to optional surveys, feedback forms, promotional preferences, and communication preferences.

2.2 Information Collected Automatically

When you access and use mstoto services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Log Data: IP address, access times and dates, pages viewed, links clicked, time spent on pages, referral URLs, and error logs.
• Gaming Activity: Bets placed including bet amounts, odds, selections, and timestamps; games played including game types (sports betting on BRI Liga 1, EPL, La Liga; casino games; slots; togel Indonesia's traditional lottery; live dealer games); gaming session duration; win/loss records; account balance changes; and bonus claims and usage.
• Transaction History: Deposit amounts, methods, and timestamps; withdrawal requests and processing status; payment processing details; and bonus transactions.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to recognize your device, remember preferences, analyze site usage, and improve user experience. You can control cookie settings through your browser, though disabling cookies may affect platform functionality.

2.3 Information from Third-Party Sources

In limited circumstances, we may receive information about you from external sources including payment processors (banks and e-wallet providers) confirming transaction authenticity, identity verification services validating your KYC documents, fraud prevention agencies providing risk assessment data, and marketing partners (only with your explicit consent) providing aggregated demographic insights.

3. How We Use Your Information

mstoto processes your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your user account.
• Processing your deposits and withdrawals through BCA, BRI, BNI, Mandiri, and e-wallet channels.
• Enabling you to place bets on sports events, play casino games, slots, togel lottery, and other gaming products.
• Calculating and crediting winnings to your account balance.
• Processing bonus awards, promotions, and loyalty rewards including VIP program benefits.
• Providing customer support through live chat, email, WhatsApp, and other communication channels in both English and Indonesian.
• Sending transactional notifications including deposit confirmations, withdrawal updates, bet settlements, and account activity alerts.

3.2 Security, Fraud Prevention, and Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures to prevent underage gambling and identity fraud.
• Detecting and preventing fraudulent activities, bonus abuse, multiple account creation, money laundering, and other terms violations.
• Monitoring gaming activity for unusual patterns, collusion, or exploitation of software errors.
• Complying with legal obligations under anti-money laundering regulations, gaming license requirements, and Indonesian applicable laws.
• Cooperating with law enforcement, regulatory authorities, or legal proceedings when legally required.
• Maintaining secure platform infrastructure through security monitoring, penetration testing, and vulnerability assessments.

3.3 Platform Improvement and Analytics

• Analyzing user behavior and gaming preferences to improve game selection, odds competitiveness, and user interface design.
• Conducting research and statistical analysis to understand Indonesian market trends and player demographics.
• Testing new features, games, and payment methods for functionality and user acceptance.
• Optimizing platform performance for Indonesian internet conditions and mobile device usage patterns.
• Developing responsible gaming tools including deposit limits, session timers, and self-exclusion features.

3.4 Marketing and Communications (With Your Consent)

• Sending promotional emails about new games, bonus offers, tournaments, and special events.
• Delivering personalized recommendations based on your gaming history and preferences.
• Notifying you about platform updates, new features, and service improvements.
• Inviting you to participate in surveys, feedback programs, and beta testing opportunities.

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting communication preferences in your account dashboard, or contacting customer support. Opting out of marketing does not affect transactional communications necessary for service provision.

4. Data Sharing and Disclosure

mstoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: BCA, BRI, BNI, Mandiri banks, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive necessary transaction data to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers receive identification documents to verify your identity and age.
• Technology Infrastructure Providers: Cloud hosting services, content delivery networks, and database management providers store and process data on our behalf under strict confidentiality agreements.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools used by our support team to assist you.
• Game Providers: Sports data feeds, casino game developers, and live dealer studios receive minimal data necessary to deliver gaming services.

All third-party service providers are contractually obligated to process your data only for specified purposes, maintain appropriate security measures, and comply with applicable data protection laws. We conduct regular due diligence to ensure partners meet our privacy and security standards.

4.2 Legal and Regulatory Obligations

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to comply with legal process or court orders, enforce our Terms and Conditions and detect violations, protect the rights, property, or safety of mstoto, our users, or the public, prevent fraud, money laundering, or illegal activities, or cooperate with regulatory authorities overseeing gaming licenses and compliance.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy involving mstoto, your personal information may be transferred to the successor entity. We will notify you via email and platform announcement before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

mstoto implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Personal data is accessible only to authorized personnel who require access to perform their duties. Access is granted based on role-based permissions and regularly reviewed.
• Secure Infrastructure: Data is stored on secure servers in protected facilities with physical access controls, environmental monitoring, and 24/7 security surveillance.
• Network Security: Firewalls, intrusion detection systems, and anti-malware tools protect our network infrastructure from external threats.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and address potential weaknesses.
• Incident Response: We maintain a data breach response plan to quickly contain, investigate, and remediate any security incidents, with notification to affected users as required by law.
• Employee Training: All mstoto staff receive regular training on data protection principles, security best practices, and privacy obligations.

While we implement robust security measures, no system is completely invulnerable. You also play a critical role in protecting your account by choosing a strong, unique password, not sharing login credentials with others, logging out after each session, especially on shared devices, keeping your registered email and phone number secure, and promptly reporting any suspicious account activity.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: While your account remains active, we retain all account information, gaming history, and transaction records to provide ongoing services.
• Closed Accounts: After account closure, we retain certain data for regulatory compliance, typically five (5) to seven (7) years, including identity verification documents, transaction history, and records required under anti-money laundering regulations.
• Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again.
• Legal Disputes: If you are involved in a dispute or legal proceeding with mstoto, we retain relevant data until the matter is fully resolved and any appeal periods have expired.

After the retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you personally.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal data we hold about you, including account details, transaction history, and gaming activity records.
• Right to Rectification: You can request correction of inaccurate or incomplete personal information through your account dashboard or by contacting support.
• Right to Erasure: You can request deletion of your personal data, subject to our legal retention obligations. Account closure may be required for full data deletion.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances, such as while we verify data accuracy or assess a legal claim.
• Right to Data Portability: You can request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by explaining your specific situation.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw that consent at any time, though this does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact our privacy team through your account dashboard, email us at [email protected], or reach out via WhatsApp (details available in your account). We will respond to your request within thirty (30) days and may request verification of your identity before processing requests involving access to or deletion of personal data.

8. Cookies and Tracking Technologies

mstoto uses cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our services. Cookies are small text files stored on your device that allow us to recognize you on return visits and remember your preferences. We use the following types of cookies:

• Essential Cookies: Required for basic platform functionality including user authentication, session management, and security features. These cannot be disabled without preventing platform use.
• Functional Cookies: Remember your preferences such as language selection, display settings, and customization choices to improve usability.
• Analytics Cookies: Collect aggregated data about site usage, popular games, navigation patterns, and performance metrics to help us optimize the platform.
• Marketing Cookies: Track your activity across sessions to deliver personalized recommendations and measure effectiveness of promotional campaigns (used only with your consent).

You can control cookie settings through your web browser by blocking all cookies, deleting existing cookies, receiving notifications when cookies are set, or accepting cookies from specific sites only. Note that disabling certain cookies may limit platform functionality, prevent personalization, or require repeated logins.

9. Third-Party Links and Services

The mstoto platform may contain links to third-party websites, social media platforms, or external services for your convenience. We are not responsible for the privacy practices, content, or security of these external sites. This Privacy Policy applies only to information collected directly by mstoto. We encourage you to review the privacy policies of any third-party sites you visit through links on our platform.

10. Children's Privacy

mstoto services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and terminate the associated account. Parents or guardians who believe their child has provided personal information to mstoto should contact us immediately.

11. International Data Transfers

While mstoto primarily serves the Indonesian market, your personal data may be transferred to and processed in countries outside Indonesia where our service providers, payment processors, or technology infrastructure are located. These countries may have different data protection laws than Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place including contractual data protection clauses, Privacy Shield certification where applicable, or other legally recognized transfer mechanisms to protect your data rights.

12. Changes to This Privacy Policy

mstoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date, sending an email notification to your registered address for significant changes, and displaying a prominent notice on the platform homepage for thirty (30) days.

Your continued use of mstoto services after the effective date of the updated Privacy Policy constitutes acceptance of the changes. If you do not agree with the modified policy, you should discontinue use of our services and may request account closure.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, our data processing practices, or your privacy rights, please contact us through the following channels:

• Email: [email protected] (monitored 24/7, response within 24-48 hours)
• Live Chat: Available 24/7 through your account dashboard for real-time assistance
• WhatsApp: Contact details available in your account settings

For specific data protection inquiries, privacy rights requests, or complaints, you may also contact our Data Protection Officer who oversees compliance with privacy regulations and investigates privacy-related concerns. We take all privacy inquiries seriously and will work to address your concerns promptly and thoroughly.