sartoto Platform Privacy Notice

This page describes what we collect when you use sartoto and how we keep that data protected. We at sartoto collect personal information only to operate our platform, process your deposits and withdrawals, verify your identity, and comply with financial regulations in supported jurisdictions. We do not sell your data to third parties, and we encrypt all information in transit.

Our privacy practices apply to all users accessing sartoto via Android, iOS browser, or desktop web. When you open an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or place a bet on Liga 1, Piala AFF, or live-dealer tables, you provide us with information that we store securely and use only as described in this notice.

We are committed to being transparent about how we handle your information. You have the right to request access to your data, request deletion (where applicable), and object to certain uses. Contact our support team at any time to exercise these rights.

What Data We Collect on sartoto

When you create an account on sartoto, we collect your email address, phone number, and username. To verify your identity before your first withdrawal, we collect a government-issued ID (KTP or passport), your date of birth, and your full name. We may also collect your residential address and proof of address (utility bill or bank statement). These details are required by financial regulations and help us prevent fraud and money laundering.

When you deposit funds, we record the amount, payment method, date, and time. This information is stored alongside your account and transaction history. When you place a bet, we log your stake, the game or match, the outcome, and your resulting balance change. When you request a withdrawal, we record the amount, payment method, and settlement status.

We may collect your IP address, browser type, device model, and operating system when you access sartoto. This technical data helps us diagnose connection issues and detect unauthorized access attempts. We also log your login times and account activity to maintain security and comply with anti-money-laundering obligations.

How We Use Your Data on sartoto

We use your email and phone number to send account notifications (login alerts, withdrawal confirmations, promotional updates). You can manage your notification preferences in your account settings. We use your identity documents to verify your age and confirm that you are not on a financial sanctions list. We use your payment method details to process deposits and withdrawals — these details are passed securely to our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and are not stored on sartoto's servers in plain text.

We use your betting history and account activity to detect fraud, bonus abuse, and collusion. If we detect unusual patterns (such as multiple accounts using the same IP address, or large bets placed immediately before withdrawals), we investigate and may suspend your account pending review. We use your technical data to maintain platform stability and prevent cyberattacks.

Third-Party Processors on sartoto

We share your data only with processors necessary to operate sartoto. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and Indonesian banks) receive your payment method details to process transactions. Our identity verification service (third-party KYC provider) receives your name, ID number, and date of birth to confirm your identity. Our hosting provider stores your account data on secure servers; these servers may be located outside your jurisdiction, but our provider is contractually obligated to maintain the same security standards as sartoto.

We do not share your data with advertisers, data brokers, or marketing companies. During account suspension or termination investigations, we may share limited information with law enforcement or financial authorities if required by law. We will notify you of such disclosures unless legally prohibited.

Your Rights on sartoto

You have the right to request access to all personal data we hold about you. We will provide this information in a readable format within 30 days of your request. You have the right to request deletion of your account and associated data once your account is closed and any pending transactions are resolved. You have the right to object to certain processing — for example, if we use your data for marketing, you can opt out by updating your notification preferences.

If we process your data unlawfully or retain it longer than necessary, you have the right to lodge a complaint with your jurisdiction's data protection authority. To exercise any of these rights, contact our support team with your account reference and the specific right you wish to exercise.

Right to access

We provide a copy of your personal data upon request within 30 days.

Right to deletion

You may request deletion once your account is fully closed and no pending transactions remain.

Right to object

You can opt out of marketing emails and certain profiling activities.

Right to complain

You may file a complaint with your local data protection authority if you believe we have violated your rights.

Cookies and Tracking on sartoto

We use cookies to authenticate your session, remember your preferences, and analyze how you use sartoto. Essential cookies are required for the platform to function — these store your login token and prevent unauthorized access. Analytics cookies help us understand which games are popular (slots, live-dealer, sportsbook), which payment methods are most used (online payment, e-wallet, mobile banking, local payment), and which features need improvement. We use this aggregated data to optimize sartoto but do not share it with third parties in personally identifiable form.

You can manage cookies through your browser settings. Disabling essential cookies will log you out and prevent you from accessing sartoto. Disabling analytics cookies is optional and does not affect functionality. We do not use cross-site tracking or retargeting cookies.

Data Retention on sartoto

We retain your account data as long as your account is active. After you close your account, we retain your transaction history, identity verification documents, and betting records for seven years to comply with financial regulations and prevent fraud. After this retention period, we delete or anonymize your data. We retain technical logs (IP addresses, login times) for 90 days and then delete them unless an investigation is ongoing.

If you request account deletion before the standard retention period, we will anonymize your personal identifiers but may retain aggregated transaction data for regulatory purposes. We will honor your deletion request within 30 days of receiving it, subject to outstanding verification windows or legal holds.

Our Commitments on sartoto

We at sartoto commit to processing your data only for the purposes outlined in this notice. We will not use your data for purposes outside of account management, withdrawal processing, fraud prevention, and regulatory compliance. We will not sell, rent, or trade your personal information. We will respond to all data-access requests within 30 days and will handle deletion requests promptly.

We maintain industry-standard security practices, including encryption, access controls, and regular security audits. If we discover a data breach affecting your sartoto account, we will notify you and affected authorities as required by law. We encourage you to use a unique, strong password and enable two-factor authentication if available.

We do not offer our services in jurisdictions where online wagering is prohibited. Users are responsible for verifying that their access to sartoto complies with their own jurisdiction's law. Our privacy practices are subject to the laws of the jurisdiction governing our license. If you have questions about this notice or wish to exercise your rights, contact our support team during standard business hours. We serve users across Jakarta, Surabaya, Bandung, Medan, and Semarang, and maintain support in English.