javatoto Platform Privacy Notice
This page describes what we collect when you use javatoto and how we keep that data protected. We collect your email, phone number, identity documents for verification, payment account details (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet transfers), and activity logs (market engagement, fixture views, settlement records). We store this data securely on encrypted servers and share it only with payment processors and legal authorities where applicable law requires.
Our privacy commitments centre on data encryption, third-party transparency, and your right to access or delete your information. We do not sell your data to advertisers. We do not use your identity documents for any purpose beyond KYC verification and regulatory compliance. We do not store passwords in plain text. When you request account deletion, we remove your personal information within 30 days, subject to legal retention obligations.
This notice applies to all javatoto users, whether you access from Jakarta, Surabaya, Bandung, Medan, or any other region where our service is available under applicable law. If you have questions about how we handle your data, our contact details appear at the end of this page.
What we collect on javatoto
We collect data in three categories: registration, verification, and activity. During registration, we collect your email address, phone number, and password. We use your email to send account notifications, verification codes, and password reset links. Your phone number is used for SMS-based two-factor authentication and transaction confirmations.
For KYC verification, we ask you to upload a photo of your identity document (KTP, passport, or similar). We process this document to confirm your age, name, and address. We store the document securely and never share it with third parties except as required by applicable law. Once verification is approved, we retain the document in an encrypted archive for regulatory compliance; if your account is inactive for over two years, we delete the document.
For payments, we collect your bank account number or e-wallet identifier depending on your chosen method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking / local payment / online payment / e-wallet virtual account details). We do not store your full bank credentials; instead, we store a reference ID that our payment processor uses to route deposits and withdrawals. Your actual bank login credentials are never transmitted to our servers.
We also collect usage data: your IP address, device type, browser version, and pages you visit on javatoto. We use this data to diagnose technical issues, prevent account takeover, and understand which Liga 1 fixtures, Champions League markets, or payment flows are most commonly used. This data is kept separate from your identity and is anonymised after 90 days.
How we use, store, and protect your data on javatoto
We use your data to provide javatoto services: to process your deposits and withdrawals, verify your identity, settle market outcomes, and send you notifications about fixture updates and account activity. We do not use your data for marketing to third parties. We do not share your identity documents with anyone except payment processors (when required to comply with anti-money-laundering rules) and law enforcement (when legally required).
Our payment processors (the companies we partner with to handle DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet transfers) may store copies of your account details on their own servers. Those processors have their own privacy policies, which we recommend you review. We require all processors to encrypt data in transit and at rest, and to comply with applicable data-protection law.
We keep your data encrypted, share it only when legally required or operationally necessary, and grant you full rights to access, correct, and delete your information.
Our servers are located in the Southeast Asian region. This means your data may be stored in a jurisdiction outside your country of residence. By using javatoto, you consent to this cross-border storage. If you are concerned about data residency, contact us before registering.
We protect your data with industry-standard encryption (TLS 1.3 for data in transit, AES-256 for data at rest). We restrict access to your personal information to javatoto staff who need it to process your account or investigate disputes. We conduct security audits annually and maintain penetration-testing protocols. If a breach occurs, we will notify affected users within 72 hours and provide free identity-protection monitoring where applicable law requires.
-
Your right to access your data
You can request a copy of all data we hold about you. We provide this within 30 days at no cost. Use the contact form at the end of this page.
-
Your right to correct inaccurate data
If your name, address, or payment account details are incorrect, update them in javatoto account settings. We will verify changes within one business day.
-
Your right to delete your account
You can request account closure and data deletion. We delete personal information within 30 days, except where law requires us to retain transaction records for seven years.
-
Your right to withdraw consent
If you no longer consent to our data practices, you can withdraw consent in account settings. This may prevent you from using javatoto services.
Cookies and tracking on javatoto
We use cookies to maintain your login session, remember your language preference, and track which parts of javatoto you use most (e.g., Liga 1 fixtures vs live-dealer tables). These cookies are stored on your device; we do not sell cookie data to advertisers. You can disable cookies in your browser settings, but doing so may prevent javatoto from functioning properly.
We do not use third-party analytics tools (like Google Analytics) on javatoto. We collect usage data only through our own server logs and session tracking. This data is anonymised and used only to improve platform performance and security.
Data retention and deletion on javatoto
We retain your personal data (name, email, phone, identity document) for as long as your account is active. If your account is inactive for three years, we may archive and eventually delete it. However, we retain transaction records (deposits, withdrawals, market outcomes) for seven years to comply with anti-money-laundering and tax law. If you close your account, transaction records remain in our archive but are de-linked from your identity.
Your jurisdiction and javatoto's service area
javatoto services are available only where applicable law permits. We do not operate in jurisdictions where online wagering is prohibited. If your country or region has laws restricting access to javatoto, we encourage you to verify compliance before registering. This privacy notice applies to all javatoto users regardless of location, but the laws protecting your data may differ. We comply with data-protection law where we operate, but we cannot guarantee the same level of protection in all jurisdictions.
Contact us about your data
If you have questions about this privacy notice, want to access your data, or want to request deletion, contact our privacy team:
- Email: [email protected]
- Response time: We aim to respond within 10 business days
- Reference: Include your javatoto email and account ID so we can locate your record quickly
This privacy notice was last updated in 2025. We may update it at any time. Significant changes will be announced on javatoto, and continued use of the platform implies acceptance of the updated notice. We will not reduce your privacy protections without giving you at least 30 days' notice.