ustoto Privacy Policy

1. Introduction

Welcome to ustoto's Privacy Policy. This document describes how ustoto ("we", "us", "our") collects, uses, processes, and protects the personal information of users ("you", "your") who access and use the ustoto online betting platform located at ustoto.cam.

By creating an account or using ustoto services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this policy, you should discontinue use of the ustoto platform immediately.

ustoto operates under Indonesian law and is committed to complying with applicable data protection regulations in Indonesia, including Law No. 27 of 2022 on Personal Data Protection (UU PDP). We take your privacy seriously and implement robust technical and organizational measures to safeguard your personal data.

2. Data Controller

For the purposes of this Privacy Policy, ustoto acts as the data controller. This means we determine the purposes and means of processing your personal data. If you have questions, concerns, or requests regarding your personal data, you can contact us using the details provided in Section 15 of this policy.

3. What Data We Collect

ustoto collects and processes the following categories of personal data:

3.1. Account Registration Data

• Full Name: Your legal name as it appears on government-issued identification documents.
• Date of Birth: To verify that you are at least 21 years of age, as required by Indonesian law.
• Email Address: For account communications, password resets, and promotional messages (with consent).
• Mobile Phone Number: For account verification, security alerts, and optional SMS notifications.
• Residential Address: To comply with KYC (Know Your Customer) requirements and verify your location within Indonesia.
• Username and Password: Credentials used to access your account (passwords are stored in encrypted form).

3.2. Identity Verification (KYC) Documents

• Scanned or photographed copies of your Indonesian KTP (national identity card), passport, or driver's license
• Proof of address documents such as utility bills or bank statements
• Selfie photographs holding your ID document (for enhanced verification)

3.3. Financial and Transaction Data

• Bank Account Details: Account numbers, bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.) used for deposits and withdrawals.
• E-Wallet Details: Account identifiers for OVO, DANA, GoPay, ShopeePay, LinkAja.
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and other financial activities on the platform.
• Payment Metadata: Transaction timestamps, amounts, currency (Indonesian Rupiah), payment method used, and transaction status.

3.4. Usage and Behavioral Data

• Betting Activity: Details of sports bets, casino games played, lottery tickets purchased (togel draws entered), and other gambling activity.
• Login History: Timestamps, IP addresses, device types, and browsers used to access your account.
• Session Data: Duration of sessions, pages visited, features used, and navigation patterns on the ustoto platform.
• Geolocation Data: Approximate location based on IP address to ensure you are accessing ustoto from within Indonesia.

3.5. Communications and Support Data

• Records of customer service interactions via live chat, email, WhatsApp, or in-app messaging
• Feedback, complaints, and support tickets submitted by you
• Any correspondence related to responsible gaming, self-exclusion, or account disputes

3.6. Marketing Preferences

• Consent status for receiving promotional emails, SMS messages, and push notifications
• Records of which marketing campaigns you have engaged with (email opens, link clicks)

4. How We Collect Your Data

ustoto collects your personal data through the following methods:

• Direct Input: Information you provide when registering an account, completing your profile, uploading KYC documents, or submitting support requests.
• Automatic Collection: Technical data collected automatically via cookies, server logs, and analytics tools when you use the ustoto platform.
• Third-Party Payment Processors: Transaction metadata received from banks and e-wallet providers when you deposit or withdraw funds.
• Game Providers: Betting and gameplay data transmitted by third-party game studios (Pragmatic Play, Evolution Gaming, PG Soft, etc.) integrated into ustoto.
• Affiliate and Referral Sources: Information about how you discovered ustoto (e.g., referral links, marketing campaigns).

5. Why We Collect Your Data

ustoto processes your personal data for the following purposes:

5.1. To Provide Betting Services

We use your data to operate the ustoto platform, process bets, manage your account balance, handle deposits and withdrawals, and deliver the core betting and gaming services you signed up for.

5.2. Identity Verification and Compliance

Indonesian law requires online gambling operators to verify the identity and age of all users. We process KYC documents to confirm you are at least 21 years old, reside in Indonesia, and are not subject to self-exclusion or legal restrictions.

5.3. Fraud Prevention and Security

We monitor account activity, IP addresses, and transaction patterns to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, collusion, and other prohibited activities. This protects both ustoto and our legitimate users.

5.4. Customer Support

We use your contact information and communication history to respond to inquiries, resolve disputes, assist with technical issues, and provide general customer service.

5.5. Marketing and Promotions

With your consent, we send promotional emails, SMS messages, and push notifications about bonuses, tournaments, new games, and special offers. You can opt out of marketing communications at any time.

5.6. Platform Improvement and Analytics

We analyze usage data to understand how users interact with ustoto, identify popular features, detect bugs, and optimize the platform's performance, design, and functionality.

5.7. Responsible Gaming

We process betting activity data to monitor gambling behavior, identify users who may be at risk of problem gambling, and enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion.

5.8. Legal Obligations

We retain and process data as required by Indonesian law, including tax reporting, anti-money laundering (AML) regulations, and cooperation with law enforcement or regulatory authorities.

6. Legal Basis for Processing

Under Indonesian data protection law, ustoto must have a valid legal basis to process your personal data. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill the terms of our agreement with you (i.e., providing betting services).
• Legal Obligation: Processing is required to comply with Indonesian laws regarding age verification, KYC, AML, tax reporting, and licensing requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, analytics, and improving user experience, provided these interests are not overridden by your fundamental rights.
• Consent: For marketing communications and optional features, we process your data based on explicit consent, which you can withdraw at any time.

7. Data Sharing and Third Parties

ustoto does not sell your personal data. However, we may share your data with trusted third parties in the following limited circumstances:

7.1. Payment Processors

When you deposit or withdraw funds, we share necessary transaction details (account number, amount, currency) with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your payment.

7.2. Game Providers

When you play casino games or slots, certain gameplay data (bet amounts, win/loss outcomes, session duration) is transmitted to game studios (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, etc.) for the purpose of delivering live game content and verifying results.

7.3. KYC and Fraud Prevention Services

We use third-party identity verification services to validate KYC documents and detect fraudulent account registrations. These providers operate under strict confidentiality agreements and only access the minimum data necessary to perform verification.

7.4. Analytics and Platform Services

ustoto uses analytics tools (e.g., Google Analytics, server monitoring software) to track platform performance and user behavior. These tools may collect anonymized or aggregated data. We ensure that any third-party analytics providers comply with data protection standards.

7.5. Legal and Regulatory Authorities

We may disclose your personal data to Indonesian law enforcement, tax authorities, or regulatory bodies if required by law, court order, or legal process. This includes cooperation with anti-money laundering investigations and tax audits.

7.6. Business Transfers

In the event of a merger, acquisition, or sale of ustoto's business or assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the acquiring entity will be bound by this Privacy Policy.

8. Data Retention

ustoto retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Active Accounts: Data is retained for the duration of your account's active status and for a reasonable period after account closure to handle pending transactions, disputes, or regulatory inquiries.
• Closed Accounts: After account closure, we retain certain data (identity documents, transaction records) for up to 7 years to comply with Indonesian tax, AML, and financial record-keeping laws.
• Marketing Data: If you unsubscribe from marketing communications, we retain your email address solely to honor your opt-out preference and prevent future marketing messages.
• Anonymized Data: We may retain anonymized or aggregated data indefinitely for statistical analysis and platform improvement, as such data can no longer identify you personally.

9. Data Security

ustoto implements robust technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and ustoto servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial details) is also encrypted.
• Access Controls: Access to personal data is restricted to authorized ustoto employees and contractors who require it to perform their duties. All personnel are bound by confidentiality obligations.
• Secure Infrastructure: ustoto servers are hosted in secure data centers with physical security controls, firewalls, intrusion detection systems, and regular security audits.
• Two-Factor Authentication (2FA): We offer optional 2FA to add an extra layer of security to user accounts.
• Regular Security Audits: ustoto conducts periodic security assessments and penetration testing to identify and address vulnerabilities.

Despite these measures, no system is completely secure. You play a critical role in protecting your account by choosing a strong password, enabling 2FA, and logging out after each session, especially on shared devices.

10. Your Privacy Rights

Under Indonesian data protection law (UU PDP), you have the following rights regarding your personal data:

10.1. Right of Access

You have the right to request a copy of the personal data ustoto holds about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF or CSV file).

10.2. Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction or update. You can update most information directly from your account dashboard or by contacting customer support.

10.3. Right to Erasure (Right to Be Forgotten)

You can request deletion of your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw consent (where consent was the legal basis for processing). Note that we may retain certain data to comply with legal obligations (e.g., financial records for tax purposes).

10.4. Right to Restrict Processing

You can request that ustoto temporarily restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

10.5. Right to Data Portability

You have the right to receive your personal data in a portable format and request that it be transferred to another service provider, where technically feasible.

10.6. Right to Object

You can object to processing of your personal data based on legitimate interests (e.g., direct marketing). We will cease processing unless we have compelling legitimate grounds that override your interests.

10.7. Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you can withdraw consent at any time by clicking "unsubscribe" in emails or adjusting your account preferences.

10.8. How to Exercise Your Rights

To exercise any of these rights, contact ustoto customer support via email at [email protected] or through live chat. We will respond to your request within 30 days. Proof of identity may be required to process your request.

11. Cookies and Tracking Technologies

ustoto uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device when you visit the ustoto website.

11.1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality, such as maintaining your login session and processing transactions. These cannot be disabled.
• Performance Cookies: Collect anonymized data about how users interact with ustoto (e.g., pages visited, time on site) to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (e.g., language settings, currency display) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure the effectiveness of marketing campaigns. These are only used with your consent.

11.2. Managing Cookies

You can control and delete cookies through your browser settings. However, disabling certain cookies may impair the functionality of the ustoto platform. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies upon closing the browser

For more information on cookie management, consult your browser's help documentation.

12. International Data Transfers

ustoto primarily processes and stores data within Indonesia. However, some third-party service providers (game studios, payment processors, analytics tools) may be located outside Indonesia. When data is transferred internationally, we ensure that:

• The recipient country has adequate data protection laws recognized by Indonesian authorities, or
• Contractual safeguards (such as Standard Contractual Clauses) are in place to protect your data, or
• The transfer is necessary to fulfill our contract with you (e.g., processing a withdrawal to an international payment gateway).

13. Children's Privacy

ustoto services are intended solely for individuals aged 21 and above, in accordance with Indonesian law. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that a user is underage, we will immediately suspend the account, void all transactions, and delete associated personal data.

If you are a parent or guardian and believe your child has provided personal data to ustoto, please contact us immediately so we can take appropriate action.

14. Changes to This Policy

ustoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify you via email and display a prominent notice on the ustoto platform.

The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or ustoto's data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on the ustoto platform
• WhatsApp: +62 812-XXXX-XXXX
• Support Hours: 24/7 WIB (Western Indonesia Time)

Our customer support team is fluent in Indonesian and English and is committed to addressing your privacy inquiries promptly and professionally.