jawatoto Platform Privacy Notice

When you open a jawatoto account and fund it via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we collect personal and financial information. This page describes what data we gather, how we use it, who we share it with, and what rights you have over your information. We take data protection seriously because trust in jawatoto depends on knowing your information is handled responsibly.

We at jawatoto collect only what is necessary to operate our platform, comply with anti-money-laundering (AML) regulations, and keep your account secure. We do not sell your data to advertisers or third-party marketers. Your gaming history, account balance, and payment information are encrypted and accessible only to you and our core operations team.

This notice explains our data practices in plain language, starting with what we collect during account opening, how we process payments, and how we handle your information over time. We also cover your rights to access, correct, and delete your data, and how you can contact us about privacy concerns. Our services are available only where applicable law permits; by using jawatoto, you agree to these practices.

What Data We Collect When You Open a jawatoto Account

We collect information in three stages: account opening, identity verification, and ongoing play.

During account opening: We ask for your email address, phone number, legal name, and date of birth. This information is required to create your jawatoto login and verify you are at least 18 years old. We also record your IP address and device type (mobile, tablet, desktop) for security and fraud detection.

During play: We record every transaction—deposits, withdrawals, game stakes, and outcomes. We also log your chat messages on live-dealer tables, your betting patterns, and your session timestamps. This data helps us detect fraud, resolve disputes, and understand user behavior for platform improvement.

How We Use Your Data on jawatoto

We use your information for six main purposes:

• Account management: We maintain your login credentials, balance, and transaction history so you can access jawatoto securely and track your account activity.
• Payment processing: We send your deposit and withdrawal requests to DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet payment networks. These providers process your transactions and may retain data according to their own privacy policies.
• Compliance and anti-fraud: We use your data to detect unauthorized access, prevent account takeover, identify money-laundering patterns, and comply with local regulations. This includes cross-referencing your information against sanctions lists and fraud databases.
• Customer support: Our support team accesses your account data to resolve disputes, answer questions about withdrawals, and troubleshoot technical issues. Your chat messages on live-dealer tables are reviewed if a dispute arises.
• Platform improvement: We analyze anonymized, aggregated data (never individual records) to understand which games are popular, which payment methods are preferred, and where we can improve user experience.
• Legal and regulatory obligation: We may disclose your information to law enforcement, tax authorities, or financial regulators if required by court order or legal process.

We do not use your data for marketing email campaigns, targeted advertising, or third-party profiling. We do not sell your email or phone number to other companies.

Third Parties and Data Processors We Work With

Our servers and data centers are located internationally, including outside Indonesia. This means your data may be stored or processed in jurisdictions other than yours. We ensure all processors meet strict data protection standards comparable to Indonesian law.

We work with:

• Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banking partners receive your account details necessary to process deposits and withdrawals. They operate under their own privacy policies and PCI-DSS (payment card security) standards.
• Cloud hosting providers: We use cloud servers to store account data, game records, and server logs. These providers are contractually bound to maintain confidentiality and cannot use your data for their own purposes.
• Fraud detection services: We use third-party services to screen transactions against sanctions lists and fraud databases. These services receive transaction data (amount, payment method, timing) but not your personal identity.
• Support and chat logging: Live-dealer chat messages are logged on our servers and may be reviewed by our support team to resolve disputes or investigate complaints.

Your Rights and Data Requests

We at jawatoto recognize your rights over your own data. You may:

• 1
  Access your dataRight of access

  Request a complete copy of your personal data held on jawatoto. We provide this in a portable format (CSV or PDF) within 15 business days.

• 2
  Correct inaccurate dataRight of correction

  If your name, address, or other information is incorrect, contact our support team to update it. We correct records within five business days.

• 3
  Delete your accountRight of deletion

  Request permanent deletion of your jawatoto account. We delete your account profile and personal data within 30 days, except where we must retain records for legal or regulatory reasons (tax, fraud investigation).

• 4
  Opt out of non-essential data useRight to object

  You may opt out of behavioral analytics and platform-improvement studies. Essential compliance and payment processing cannot be opted out.

To exercise any of these rights, contact our support team via in-app chat, email, or phone with your request. Provide sufficient information so we can identify your account. We will not charge a fee for reasonable requests.

Cookies and Tracking on jawatoto

We use cookies (small text files stored on your device) to maintain your login session, remember your preferences, and analyze how you use jawatoto. Cookies are essential for platform functionality (for example, keeping you logged in across page reloads). We also use cookies to track which games you play most often and which payment methods you prefer, so we can improve recommendations.

Our cookies do not track you across other websites. We do not use third-party advertising cookies. You can delete cookies from your browser settings at any time, though this may affect your ability to access jawatoto.

Data Retention and Deletion

We retain your account data for as long as your account is active. If you close your jawatoto account, we delete your personal data (name, ID, address) within 30 days, except where we are legally required to retain it.

We retain transaction records (deposits, withdrawals, game stakes) for up to seven years to comply with Indonesian tax and anti-money-laundering regulations. We also retain chat logs from live-dealer tables for up to one year in case disputes arise. After the retention period, we anonymize or delete these records.

If law enforcement requests your data (via valid court order or legal process), we may retain relevant records beyond the standard retention period. We will notify you of such requests unless prohibited by law.

Contact Us About Privacy

If you have questions about how we handle your data, or if you want to exercise any of your privacy rights, contact our support team:

• In-app chat: Message us directly from your jawatoto account. Response time is typically under 24 hours.
• Email: Send a detailed request to our support email address. Include your account email and a clear description of your privacy concern or data request.
• Phone: Call our support line during business hours. An agent can discuss your privacy rights and help you submit a formal request.

We at jawatoto commit to responding to all privacy requests within the timeframe specified by law. If you are unhappy with our response, you may file a complaint with your local data protection authority. Our privacy practices comply with this notice and applicable law in the jurisdictions where we operate.