Privacy Policy

1. Introduction

satoto ("we", "us", or "our") operates an online betting platform serving customers primarily in Indonesia. We recognize that privacy is important to our users. This Privacy Policy describes how satoto collects, uses, stores, and protects personal information provided by users of our website, mobile applications, and related services (collectively, the "Platform").

This Privacy Policy applies to all users who access or use the satoto Platform, whether you have registered an account or are simply browsing our website. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy, as well as our Terms and Conditions.

If you do not agree with the practices described in this Privacy Policy, please do not use the satoto Platform. We reserve the right to update this policy at any time, and we will notify you of material changes through email or prominent notices on our Platform.

2. Information We Collect

satoto collects various types of information to provide, maintain, and improve our services, comply with legal obligations, and protect our users. The information we collect falls into the following categories:

2.1 Personal Identification Information

When you register for a satoto account, we collect personal identification information including:

• Full Name: Your legal name as shown on government-issued identification documents.
• Date of Birth: To verify that you meet the minimum age requirement of 21 years.
• Address: Your residential address for account verification and compliance purposes.
• Email Address: Used for account communications, security alerts, and promotional materials.
• Phone Number: For account verification, two-factor authentication, and customer support.
• Government ID: Copies of your Indonesian national ID card (KTP), passport, or other government-issued identification for Know Your Customer (KYC) compliance.
• Selfie Photo: A photograph of you holding your identification document to prevent identity fraud.

2.2 Financial Information

To process deposits and withdrawals, we collect financial information including:

• Bank account details (account number, bank name, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP.
• E-wallet account information for OVO, DANA, GoPay, LinkAja, and other digital payment methods.
• Transaction history including deposit amounts, withdrawal requests, and payment method used.
• Payment card information (if applicable), though card details are processed securely by third-party payment processors and not stored by satoto.

2.3 Betting and Gaming Activity

When you use satoto services, we automatically collect information about your betting and gaming activity:

• Betting history including bets placed, amounts wagered, odds selected, and outcomes.
• Games played, session durations, and gaming preferences.
• Bonus and promotion participation, including claims, usage, and wagering progress.
• Win/loss records and account balance changes over time.

This information helps us improve our services, detect fraudulent activity, comply with responsible gaming obligations, and provide personalized experiences.

2.4 Technical and Device Information

When you access the satoto Platform, we automatically collect technical information including:

• IP Address: Your internet protocol address, which indicates your approximate geographic location.
• Device Information: Type of device (smartphone, tablet, desktop), operating system, browser type and version, screen resolution.
• Usage Data: Pages viewed, features used, time spent on pages, click patterns, and navigation paths through our Platform.
• Log Data: Access times, error logs, and other diagnostic information.
• Cookies and Similar Technologies: See Section 8 for detailed information about our use of cookies.

2.5 Communications and Support Interactions

When you contact satoto customer support or interact with us through any communication channel, we collect:

• Content of your messages, emails, live chat conversations, WhatsApp messages, and Telegram communications.
• Customer support tickets, including your questions, complaints, and our responses.
• Feedback, surveys, and reviews you provide about our services.
• Phone call recordings for quality assurance and training purposes (with advance notice).

3. How We Use Your Information

satoto uses the collected information for various purposes directly related to providing and improving our services. Specifically, we use your information to:

3.1 Provide and Manage Services

• Create, maintain, and manage your satoto account.
• Process deposits, withdrawals, and financial transactions securely and accurately.
• Enable you to place bets, play casino games, and participate in all Platform features.
• Calculate winnings, update account balances, and process payouts.
• Manage bonuses, promotions, and loyalty programs.

3.2 Verification and Compliance

• Verify your identity, age, and eligibility to use our services in compliance with legal requirements.
• Conduct Know Your Customer (KYC) and anti-money laundering (AML) checks as required by international gaming regulations.
• Prevent underage gambling and ensure compliance with the 21+ age restriction.
• Detect and prevent fraud, money laundering, bonus abuse, and other illegal or prohibited activities.
• Comply with legal obligations, court orders, and requests from regulatory authorities.

3.3 Security and Risk Management

• Monitor for suspicious activity, unauthorized access, and security threats.
• Protect against fraud, collusion, hacking, and other malicious activities.
• Investigate and resolve disputes, complaints, and suspected violations of our Terms and Conditions.
• Maintain the integrity and fairness of our betting and gaming platform.

3.4 Customer Support

• Respond to your inquiries, requests, and customer support tickets.
• Provide technical assistance and troubleshoot issues with your account or transactions.
• Offer personalized support based on your account history and preferences.
• Follow up on unresolved issues and ensure customer satisfaction.

3.5 Responsible Gaming

• Implement responsible gaming tools such as deposit limits, loss limits, and self-exclusion features.
• Monitor gaming patterns to identify potential problem gambling behavior.
• Provide warnings, reality checks, and resources to players showing signs of gambling addiction.
• Enforce account restrictions for players who request self-exclusion or show harmful gambling patterns.

3.6 Marketing and Communications

• Send promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers (with your consent).
• Personalize marketing content based on your gaming preferences and betting history.
• Conduct surveys, request feedback, and gauge user satisfaction.
• Inform you about Platform updates, new features, and changes to terms or policies.

You can opt out of marketing communications at any time by adjusting your account settings, clicking "unsubscribe" in emails, or contacting customer support. Opting out of marketing does not affect transactional communications such as deposit confirmations or account security alerts.

3.7 Platform Improvement and Analytics

• Analyze user behavior, preferences, and trends to improve our Platform and services.
• Conduct research and development for new features, games, and betting markets.
• Test and optimize Platform performance, speed, and user experience.
• Generate aggregated statistics and reports for business analysis (data is anonymized and does not identify individuals).

4. Information Sharing and Disclosure

satoto values your privacy and does not sell your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals (e.g., BCA, BRI, OVO, DANA).
• Game Providers: Companies that supply our casino games and slots (e.g., Pragmatic Play, Evolution Gaming, PG Soft, Microgaming).
• Identity Verification Services: Third-party KYC providers that verify your identity documents and conduct fraud checks.
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms used to provide support.
• Marketing and Analytics Services: Email service providers, analytics tools, and advertising platforms (data is shared in anonymized or aggregated form where possible).

All service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection laws.

4.2 Legal and Regulatory Requirements

We may disclose your information when required by law or in response to legal processes, including:

• Court orders, subpoenas, or other legal demands from government authorities.
• Requests from gaming regulators, licensing authorities, or law enforcement agencies.
• Compliance with anti-money laundering, counter-terrorism financing, and other financial crime prevention obligations.
• Protection of satoto's legal rights, property, or safety, or that of our users or the public.

4.3 Business Transfers

If satoto undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity as part of the transaction. We will notify you via email or prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy if we obtain your explicit consent. You have the right to withdraw consent at any time by contacting us.

5. Data Security Measures

satoto implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. Our security practices include:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Secure Servers: Personal data is stored on secure servers hosted in protected data centers with physical security controls, redundant power, and fire suppression systems.
• Firewalls and Intrusion Detection: Advanced firewall systems and intrusion detection software monitor and block unauthorized access attempts.
• Data Encryption at Rest: Sensitive information such as passwords and financial data is encrypted when stored in our databases.
• Regular Security Audits: Independent security experts conduct regular penetration testing and vulnerability assessments of our Platform.

5.2 Access Controls

• Access to personal information is restricted to authorized satoto employees and contractors who need the data to perform their job functions.
• All staff with access to personal data sign confidentiality agreements and undergo security training.
• Multi-factor authentication and role-based access controls limit who can view or modify sensitive information.
• Access logs are maintained and regularly reviewed to detect unauthorized access attempts.

5.3 User Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with others.
• Enable two-factor authentication if available.
• Log out of your account when using shared or public computers.
• Report any suspicious activity or unauthorized access immediately to customer support.
• Keep your email account secure, as it can be used to reset your satoto password.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If we become aware of a data breach that affects your information, we will notify you promptly in accordance with applicable laws.

6. Data Retention

satoto retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of information and its purpose:

• Account Information: Retained for the duration of your account's active status and for a period after account closure as required by gaming regulations (typically 5-7 years).
• Financial Transaction Records: Retained for at least 5 years to comply with anti-money laundering regulations and tax laws.
• Betting and Gaming History: Retained for the period required by gaming licenses and regulatory obligations, typically 5 years.
• KYC and Verification Documents: Retained for the duration required by our licensing authority and applicable regulations.
• Marketing Communications: Retained until you opt out or we determine the data is no longer needed for marketing purposes.
• Technical and Log Data: Typically retained for 12-24 months unless needed for security investigations or legal compliance.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data deletion procedures. Anonymized data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

You have certain rights regarding your personal information under applicable data protection laws. These rights may vary depending on your jurisdiction, but generally include:

7.1 Right to Access

You have the right to request a copy of the personal information satoto holds about you. You can access most of your information directly through your account dashboard. For a comprehensive data export, contact our customer support team.

7.2 Right to Correction

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information through your account settings. For changes to verified information (name, date of birth), you may need to provide supporting documentation.

7.3 Right to Deletion

You may request deletion of your personal information, subject to certain exceptions. We may need to retain some information to comply with legal obligations, resolve disputes, enforce our agreements, or for legitimate business purposes. Account closure does not automatically delete all data; you must specifically request data deletion.

7.4 Right to Restrict Processing

You can request that we restrict how we process your personal information in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.

7.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time by adjusting your account settings or contacting us. You may also object to processing based on legitimate interests.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing before consent was withdrawn.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Some requests may require identity verification to ensure we're communicating with the account holder. There is no fee for exercising your rights unless your request is clearly unfounded, repetitive, or excessive.

8. Cookies and Tracking Technologies

satoto uses cookies, web beacons, and similar tracking technologies to enhance your experience, understand how you use our Platform, and deliver personalized content and advertising.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, recognize you on return visits, and track your activity.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These enable core features like account login, transaction processing, and security.
• Performance Cookies: Collect information about how you use our Platform, such as which pages you visit most often. This data helps us improve performance and user experience.
• Functionality Cookies: Remember your preferences and choices (e.g., language, timezone) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements and measure the effectiveness of our marketing campaigns.

8.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling essential cookies may affect Platform functionality and prevent you from using certain features.

9. Children's Privacy

The satoto Platform is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a user is underage, we will immediately suspend the account, void any bets placed, and delete all associated personal information in accordance with applicable laws.

Parents and guardians are encouraged to monitor their children's internet usage and prevent access to gambling websites. If you believe a minor has provided personal information to satoto, please contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

satoto operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have different data protection laws than Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Transferring data only to countries with adequate data protection laws recognized by international standards.
• Using standard contractual clauses approved by data protection authorities.
• Ensuring third-party service providers comply with international data protection standards.

By using satoto services, you consent to the international transfer of your personal information as described in this Privacy Policy.

11. Changes to This Privacy Policy

satoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Sending an email to the address registered on your account.
• Displaying a prominent notice on our Platform homepage.
• Requiring you to acknowledge the updated policy upon your next login.

The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of satoto services after policy changes constitutes acceptance of the updated terms.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us through any of the following channels:

• Email: [email protected] (Data Protection inquiries: [email protected])
• Live Chat: Available 24/7 through the satoto website
• WhatsApp: Contact details provided in your account dashboard
• Telegram: Official support channel (link available in account area)

Our customer support team is available 24 hours a day, 7 days a week, and can assist you in both Indonesian and English. For privacy-related inquiries, please allow up to 30 days for a complete response as we may need to verify your identity and investigate your request thoroughly.