Privacy Policy

1. Introduction

catoto ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our online betting platform at catoto.cam, including all sports betting, live casino, slot games, togel lottery, and other gaming services.

By creating an account or using catoto's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, please do not use our services.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the catoto platform. We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email or prominent notice on our website.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a catoto account, use our services, or communicate with us, we collect personal information that you voluntarily provide, including:

• Account Registration Data: Full name, date of birth, email address, phone number, residential address, username, and password.
• Identity Verification Documents: Government-issued identification (Indonesian National Identity Card / KTP, passport, driver's license), proof of address (utility bills, bank statements), selfie photographs, and other documents required for Know Your Customer (KYC) compliance.
• Payment Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Communication Records: Emails, live chat transcripts, customer support tickets, feedback, survey responses, and any other correspondence with catoto.
• Preferences and Settings: Language preferences, notification settings, time zone, game favorites, betting limits, and responsible gaming tool configurations.

2.2 Information Collected Automatically

When you access the catoto platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IP address, MAC address), and mobile network information.
• Usage Data: Pages visited, features used, games played, bets placed, time spent on the platform, clickstream data, referral sources, and navigation paths.
• Location Data: Approximate geographic location based on IP address to verify compliance with jurisdictional restrictions and provide localized content.
• Log Files: Server logs recording access times, page requests, error messages, and system activity for security monitoring and troubleshooting.

2.3 Information from Third Parties

catoto may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Processors: Transaction verification data from banks, e-wallet providers, and payment gateway partners.
• Identity Verification Services: Background checks, age verification, and fraud screening data from specialized providers.
• Game Providers: Gameplay data, bet history, and results from Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and other third-party game suppliers.
• Marketing Partners: Analytics and attribution data from advertising platforms (where legally permitted and with your consent).

3. How We Use Your Information

catoto uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your catoto account
• Process deposits, withdrawals, and internal fund transfers
• Enable betting on sports, casino games, togel lottery, and other gaming products
• Calculate and credit winnings, bonuses, and promotional rewards
• Provide customer support and respond to inquiries
• Send transactional notifications (deposit confirmations, withdrawal updates, bet settlements)

3.2 Legal Compliance and Security

• Verify your identity and age to comply with Indonesian gambling regulations and international standards
• Conduct KYC and anti-money laundering (AML) checks
• Detect, prevent, and investigate fraudulent activity, cheating, collusion, and terms violations
• Monitor platform security and protect against unauthorized access, cyberattacks, and data breaches
• Comply with legal obligations, court orders, and requests from regulatory authorities
• Enforce our Terms and Conditions and resolve disputes

3.3 Platform Improvement and Analytics

• Analyze user behavior to improve website functionality, game selection, and user experience
• Conduct internal research and development to enhance services and develop new features
• Optimize platform performance, load times, and mobile responsiveness
• Generate aggregated, anonymized statistics and reports (no personally identifiable information)

3.4 Marketing and Communications (With Your Consent)

• Send promotional offers, bonus announcements, and marketing materials via email or SMS (you may opt out at any time)
• Personalize content and recommendations based on your gaming preferences
• Invite you to participate in tournaments, VIP programs, and special events
• Conduct surveys and solicit feedback to improve our services

4. How We Share Your Information

catoto does not sell your personal information to third parties. However, we may share your data with trusted partners and service providers under the following circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other studios to deliver gaming content and record gameplay data.
• Identity Verification Services: Specialized KYC and AML compliance providers to verify your identity and age.
• Customer Support Tools: Live chat software and helpdesk platforms to provide technical assistance.
• Cloud Hosting and Data Storage: Secure server providers to store your data with encryption and access controls.
• Analytics and Marketing Platforms: Tools to analyze website traffic and measure marketing campaign effectiveness (anonymized where possible).

All third-party service providers are contractually obligated to protect your data, use it only for the purposes specified by catoto, and comply with applicable data protection laws. We conduct due diligence to ensure our partners maintain adequate security standards.

4.2 Legal and Regulatory Obligations

We may disclose your personal information if required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from government agencies, regulatory bodies, or law enforcement authorities
• Investigations into suspected fraud, money laundering, or other illegal activities
• Protection of catoto's rights, property, or safety, or that of our users or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if we obtain your explicit consent at the time of collection or sharing.

5. Data Security Measures

catoto employs industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

Security Measure	Description
SSL/TLS Encryption	All data transmitted between your device and catoto servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by banks.
Data Encryption at Rest	Personal information and financial data stored on our servers are encrypted using AES-256 encryption to prevent unauthorized access.
Two-Factor Authentication	Optional 2FA for account login and withdrawal requests adds an extra layer of security beyond passwords.
Access Controls	Strict role-based access controls ensure that only authorized personnel can access sensitive data, and all access is logged.
Regular Security Audits	Independent third-party security audits and penetration testing identify and remediate vulnerabilities proactively.
Firewalls and Intrusion Detection	Advanced firewall systems and real-time intrusion detection monitor network traffic for suspicious activity and block attacks.
Employee Training	All catoto staff undergo mandatory data protection and security awareness training to prevent internal breaches.

Despite our comprehensive security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any unauthorized access.

6. Data Retention

catoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Personal and transactional data are retained for the duration of your account's active status.
• Closed Accounts: After voluntary account closure, we retain your data for a minimum of 5 years to comply with anti-money laundering regulations, tax laws, and dispute resolution requirements.
• Inactive Accounts: Accounts with no activity for 12 consecutive months may be deemed inactive. We will send reminder emails before permanently deleting inactive accounts and associated data.
• Self-Excluded Accounts: Data from self-excluded accounts is retained for the duration of the exclusion period plus 5 years to prevent circumvention and comply with responsible gaming obligations.
• Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to honor your request.

After the applicable retention period expires, your personal information will be securely deleted or anonymized so that it can no longer be associated with you.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request confirmation of whether catoto processes your personal data and to obtain a copy of the information we hold about you. To request access, contact our customer support team with your account details.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings or by contacting customer support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw consent. However, we may retain data if required by law or for legitimate business purposes (fraud prevention, dispute resolution, legal compliance).

7.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in specific situations, such as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing emails via the unsubscribe link in each message or by updating your communication preferences in your account settings.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact catoto customer support at [email protected] with your account details and a description of your request. We will respond within 30 days of receiving your request and may require additional information to verify your identity before processing.

8. Cookies and Tracking Technologies

catoto uses cookies, web beacons, and similar technologies to enhance your user experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for website functionality, such as maintaining your login session and enabling core features. These cookies cannot be disabled.
• Performance and Analytics Cookies: Collect aggregated, anonymized data on how visitors use the website to improve performance and user experience.
• Functionality Cookies: Remember your preferences (language, currency, time zone) to provide a more personalized experience.
• Marketing and Advertising Cookies: Track your browsing activity across websites to deliver targeted advertisements and measure campaign effectiveness (used only with your consent).

You can manage cookie preferences through your browser settings. However, disabling cookies may affect your ability to use certain features of the catoto platform. Most browsers accept cookies by default, but you can configure your browser to reject cookies or alert you when cookies are being sent.

9. International Data Transfers

catoto primarily serves customers in Indonesia. However, some of our service providers and data processing facilities may be located outside Indonesia. When we transfer your personal information internationally, we ensure adequate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements requiring recipients to maintain equivalent data protection standards
• Compliance with EU-US Privacy Shield framework or similar international data transfer mechanisms (where applicable)

By using catoto's services, you consent to the transfer of your personal information to countries outside Indonesia that may have different data protection laws than your jurisdiction.

10. Children's Privacy

catoto's services are intended exclusively for individuals who are at least 21 years of age or the legal age of majority in their jurisdiction, whichever is higher. We do not knowingly collect personal information from individuals under the age of 21.

If we become aware that we have inadvertently collected information from a person under 21, we will take immediate steps to delete that information and close the associated account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

11. Third-Party Websites and Services

The catoto platform may contain links to third-party websites, including payment processors, game providers, and social media platforms. This Privacy Policy applies only to catoto's services and does not cover third-party websites or services.

We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party sites you visit through links on our platform. Providing information to third-party websites is at your own risk.

12. Changes to This Privacy Policy

catoto reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email to the address registered on your account
• Display a prominent notice on the catoto website homepage
• Request your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of catoto's services after changes to this policy constitutes acceptance of the updated terms.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or catoto's data protection practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the catoto website
• Customer Support: Available 24 hours a day, 7 days a week

For data protection inquiries, please include "Privacy Policy" in the subject line and provide your account details to help us respond efficiently.