kodaltoto Platform Privacy Notice
This page describes what we collect when you use kodaltoto and how we keep that data protected. We collect personal information to verify your identity, process your deposits and withdrawals, and comply with anti-money-laundering regulations. We do not sell your data to third parties. We encrypt all data in transit and at rest.
Our privacy practices are designed around account security and regulatory compliance. When you open an account on kodaltoto, we ask for your name, date of birth, address, and government-issued ID. We verify this information against official records before you can withdraw funds. We also collect transaction history, IP addresses, and device information to detect fraud and prevent unauthorised access.
We operate in jurisdictions where online gaming and sportsbook services are permitted by local law. Our data handling practices comply with applicable privacy and data-protection regulations in those jurisdictions. This notice explains our commitments and your rights.
What We Collect and Why
We collect several categories of data when you use kodaltoto. Identity data includes your name, date of birth, address, phone number, and government-issued ID. We use this to verify your identity before your first withdrawal and to comply with anti-money-laundering (AML) regulations. Account data includes your email address, username, password hash, and security settings. We use this to authenticate you and protect your account.
Transaction data includes all deposits, withdrawals, and wagers. We record the amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), timestamp, and outcome. We use this to settle your account, detect fraud, and comply with financial reporting requirements. Device and network data includes your IP address, device type, browser, and operating system. We use this to detect suspicious login attempts and prevent account takeover.
- Identity verification
- We collect government ID to verify your identity before first withdrawal. This is required by law.
- Transaction records
- We keep a complete history of all deposits, withdrawals, and wagers for account settlement and fraud detection.
- Device fingerprinting
- We record IP address and device information to detect unauthorised access and prevent account compromise.
- Cookies and tracking
- We use cookies to maintain your session and remember your preferences. You can disable cookies in your browser settings.
We do not collect sensitive data such as your full credit card number or bank account number. Payment processors handle this information directly. We do not collect biometric data, health information, or any data unrelated to account management and regulatory compliance.
We retain your data for as long as your account is active, plus a retention period required by law. After account closure, we keep transaction records for regulatory purposes but delete personal data according to applicable privacy laws.
How We Protect Your Data and Your Rights on kodaltoto
We encrypt all data transmitted between your device and our servers using industry-standard TLS encryption. Our servers are located in secure data centres with physical access controls and redundant backups. We use role-based access controls so only authorised staff can view your data. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.
We do not share your personal data with third parties except where required by law or to process your transactions. Our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks) receive only the information necessary to complete your deposit or withdrawal. Our fraud-detection service may receive transaction data to identify suspicious patterns. Our customer-support team can access your account history to resolve disputes, but they cannot see your password or full ID number.
We operate across multiple jurisdictions including Jakarta, Surabaya, Bandung, Medan, and Semarang. Our servers may sit outside your jurisdiction. By using kodaltoto, you consent to your data being processed and stored in these locations. If you do not consent, you should not use our platform.
We update this privacy notice periodically to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of kodaltoto after such notice constitutes your acceptance of the updated policy.
If you have questions about our privacy practices or wish to exercise your rights, contact our support team. We are available via live chat, email, and phone. Our support team operates in English and Indonesian and can assist you with any privacy-related concerns.