popototo Privacy Policy

This page describes what we collect when you use popototo and how we keep that data protected. We are transparent about the information we gather during registration, deposit, withdrawal, and gameplay—email addresses, identity documents, payment details, and account activity logs. Our commitment is to store this data securely, use it only for the purposes you authorise, and never share it with unrelated third parties.

popototo operates in selected jurisdictions where online gaming is lawful. Our data handling aligns with standard privacy practices across gaming and financial platforms. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), those payment processors retain their own copies of transaction records. We store encrypted payment references only—full card or account numbers are never visible in our system after the first transaction.

This policy covers personal data collection, storage, use, retention, and your rights regarding that data. If you have privacy questions after reading this page, contact our support team via live chat or email.

What Data We Collect on popototo

We collect data across three phases: registration, verification, and ongoing account activity. During registration, we request your email address, a password of your choice, full name, date of birth, and phone number. This information is stored on our servers and encrypted at rest. We use your email to send account confirmations, withdrawal notifications, and support responses. Your phone number is used only to contact you about account issues if needed.

For identity verification, we request a photo of your ID (KTP, passport, or driving licence) and a selfie. These images are uploaded to our secure servers and reviewed by our compliance team to confirm your identity matches our records. After approval, the images remain encrypted in our database for compliance and anti-fraud purposes. We do not share these photos with external parties except as required by law enforcement or regulatory bodies.

During gameplay and betting on popototo, we record your activity: stakes placed, games accessed, football markets (Liga 1, Piala Indonesia, international tournaments), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games (Aviator, Sweet Bonanza, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We also log your device type (Android, iOS), IP address, browser, and session duration. This data helps us detect fraud, troubleshoot technical issues, and understand platform usage patterns.

How We Use Your Data on popototo

We use your data for account management, payment processing, fraud prevention, and legal compliance. Your email and phone are used to communicate account updates, withdrawal confirmations, and support responses. Your identity verification data is compared against our anti-fraud database and checked for compliance with gaming regulations in your jurisdiction. Your gameplay data is analysed to detect unusual patterns (e.g., multiple logins from different locations in seconds, rapid stake changes, or withdrawal requests immediately after large losses).

We do not sell your personal data to marketers or advertisers. We do not build profiles of you for third-party use. Our only use of your data is to operate popototo's service, settle your bets, process your deposits and withdrawals, and prevent fraud or legal violations. If we are required by court order or regulatory authority to disclose your data, we will comply but will notify you unless prohibited by law.

We may share aggregated, anonymised data with our service providers (e.g., payment processors, hosting providers, analytics tools). These processors sign data-protection agreements stating they will not use your data for their own purposes. For example, when you deposit via mobile banking, popototo sends only the transaction amount and a unique reference ID to local payment—not your full name or ID number. online payment processes that payment and returns a confirmation to us; we do not see e-wallet's internal customer data, and mobile banking does not see your full popototo account details.

Where Your Data Is Stored

popototo's servers are located outside Indonesia. This means your data—including your name, identity documents, and account activity—may physically reside in jurisdictions outside your control. By using popototo, you consent to this offshore storage. We apply standard encryption and access controls to protect that data regardless of server location. Our infrastructure is managed by professional hosting providers who operate data centres with security certifications (e.g., ISO 27001 compliance).

Users across Indonesia—in Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, and other regions—all store data on the same global servers. There is no regional separation of data by city or province. This unified approach simplifies our operations but means your data crosses international borders. We maintain backups in multiple data centres to prevent data loss if one facility experiences outage or disaster.

Data Retention & Deletion

We retain your account data for as long as your account is active. When you close your popototo account, we keep your records for an additional period (typically three years) to comply with anti-money-laundering and gaming regulations. After that retention period expires, we delete personal data (email, phone, identity images) from our active systems. Aggregated, anonymised activity logs may be retained longer for analytics and fraud-prevention purposes.

If you request data deletion before the standard retention window, we will honour your request for non-regulatory data (email, phone). However, we may need to retain identity verification documents, transaction histories, and account activity logs to comply with legal obligations. You can request a copy of your data or submit deletion requests by contacting our support team.

Cookies & Tracking

When you access popototo via browser (Android, iOS, or desktop), we use cookies and similar tracking technology to remember your login session, language preference, and account settings. These cookies do not track you across other websites; they exist only within popototo's domain. If you disable cookies, some features of popototo may not function correctly—for example, you may be logged out after each page refresh.

We also use analytics tools to track aggregate user behaviour (e.g., which game categories are accessed most, how many bets are placed daily during Liga 1 season versus off-season, average session duration). These analytics do not identify you personally; they show patterns across our user base to help us improve the platform.

Your Rights Regarding Your Data

You have the right to access your personal data held by popototo. Contact our support team with your account details, and we will send you a copy of your data. You also have the right to correct inaccurate information—if your name, date of birth, or contact details are wrong, contact support and we will update them. You have the right to request deletion of non-essential data, though we may retain some information to comply with regulations. You cannot request deletion of transaction history or account activity logs, as these are legally required for gaming and anti-money-laundering compliance.

Privacy Policy Updates & Contact

We may update this privacy policy to reflect changes in our data practices or legal requirements. When we make material changes, we will notify all active account holders via email and display a notice on popototo's login page. Your continued use of popototo after the update constitutes acceptance of the revised policy. We recommend reviewing this page periodically for any changes.

If you have privacy concerns, questions about your data, or want to request access or deletion, contact our support team. We respond to privacy inquiries within five business days. You can also refer to our Terms and Conditions for additional information about your rights and our obligations when you use popototo.

Our commitment is to handle your personal data with care, transparency, and respect. We believe privacy is essential to building trust between popototo and our users. By using our platform—whether you deposit via QRIS, place football bets on Liga 1 matches, play live-dealer blackjack, or access esports markets—you are trusting us with your information. We take that responsibility seriously.