patoto Privacy Policy

This page describes what we collect when you use patoto and how we keep that data protected. We collect personal information during account registration, Know Your Customer (KYC) verification, and ongoing platform use. Our privacy practices centre on safeguarding your data, complying with applicable law in supported jurisdictions, and being transparent about how third-party processors access your information.

When you open an account on patoto, we collect your name, date of birth, email, phone number, and identity documents. During deposits and withdrawals, we collect payment method details and transaction records. We use this information to verify your identity, process payments via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet, prevent fraud, and comply with legal obligations.

Our servers store your data in secure, encrypted form. Your data may be processed outside your jurisdiction — we work with international payment processors and cloud providers to maintain platform stability. We do not sell your personal information to marketers or advertisers. We share data only with service providers who assist us in delivering patoto services and with legal authorities when required by applicable law.

What We Collect When You Use patoto

We collect data in several categories. During account creation, we collect your full name, date of birth, email address, and phone number. For KYC verification, we collect copies of your photo ID (passport, national ID, or driver's license) and proof of address (utility bill or bank statement). We store these documents securely and retain them for the duration of your patoto account plus any retention period required by applicable law.

When you deposit funds on patoto, we collect your chosen payment method and transaction amount. If you use DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we receive data from those payment providers confirming the transaction. If you transfer funds via mobile banking, local payment, online payment, or e-wallet, we collect your bank account details and transaction reference numbers. We do not store your full payment card or account numbers; instead, we store tokenized references that allow us to process future transactions.

We collect your account activity — markets you engage with, games you play, amounts wagered, outcomes, and withdrawal requests. We track your login times, IP addresses, and device information. We use this information to detect fraud, prevent abuse, and understand platform usage patterns.

Account data
Name, date of birth, email, phone number, stored upon account creation
KYC documents
Photo ID and address proof scans; retained for account duration plus legal hold period
Payment details
Transaction amounts, payment method tokens, bank reference numbers
Activity logs
Login times, IP addresses, device info, engagement history, withdrawals

How We Use Your Data on patoto

We use your personal data for several purposes. First, we verify your identity through KYC to comply with applicable regulations in supported jurisdictions. This protects both patoto and our members from fraud and illegal activity. Second, we process your deposits and withdrawals — this requires us to hold and transmit your payment information to our processors.

Third, we detect and prevent fraud. We analyze your account activity for suspicious patterns — unusual withdrawal requests, multiple accounts from the same device, or transfers to new payment methods. If we detect fraud, we may place a temporary hold on your account while we investigate. Fourth, we provide customer support — your account information allows our team to assist with login issues, payment problems, and dispute resolution.

Data retention: We retain your account data for as long as your patoto account is active. After account closure, we retain data for a legal hold period determined by applicable law in your jurisdiction — typically 5–7 years for financial records. We do not retain data longer than necessary.

Third-Party Processors and Data Sharing on patoto

We work with third-party service providers to operate patoto. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banks online payment, e-wallet, mobile banking, local payment) receive your transaction data directly. Cloud hosting providers store our database servers; your data may be stored on servers physically located outside your jurisdiction. Fraud-prevention services analyze your account activity to detect suspicious patterns.

We do not share your personal information with advertisers, marketers, or data brokers. We do not sell your email or phone number. We share data with legal authorities only when required by court order, government directive, or applicable law — for example, if authorities investigate suspected money laundering or fraud.

Your Rights and Data Subject Requests on patoto

Under applicable data protection law, you have certain rights regarding your personal data. You can request access to the data we hold about you — we will provide a copy in a structured, portable format. You can request correction of inaccurate data — if your address or phone number is wrong, you can update it directly in your patoto account settings. You can request deletion of your data, though we may need to retain some information for legal compliance or dispute resolution.

To exercise any of these rights, contact our support team through your patoto account dashboard. Describe your request clearly, and we will respond within a standard timeframe. If you believe we have processed your data unlawfully, you may lodge a complaint with your jurisdiction's data protection authority.

Cookies and Tracking Technology on patoto

We use cookies — small text files stored on your device — to remember your login session, remember your language preference, and track your use of patoto. Session cookies expire when you close your browser. Persistent cookies remain on your device for up to one year. We use cookies to improve your experience and to gather analytics about how members use patoto.

You can disable cookies in your browser settings, but this may affect your ability to stay logged in or access certain patoto features. We do not use cookies to track you across unrelated websites — our cookies apply only to patoto.bet.

Collection
Account & KYC
Use
Verification & payments
Sharing
Processors & law
Security
Encrypted storage

Data Security and Encryption on patoto

We protect your data using industry-standard security measures. All data transmitted between your device and our patoto servers is encrypted using SSL/TLS technology — the same standard used by banks. Your password is hashed and salted; we do not store plain-text passwords. Stored data is encrypted at rest on our servers.

We limit access to your data to patoto employees and service providers who need it to perform their jobs. We require all staff to sign confidentiality agreements. We conduct regular security audits and vulnerability testing. However, no security system is perfect — we cannot guarantee absolute protection against all cyber threats.

Cross-Border Data Transfers on patoto

Your data may be transferred to and stored on servers located outside your jurisdiction. Our cloud hosting provider maintains data centres in multiple regions. Payment processors for Liga 1 engagement, Piala Indonesia markets, Piala AFF coverage, and Champions League trading may hold your transaction data on servers outside Indonesia or your home country. We ensure that all international transfers comply with applicable data protection law by implementing standard contractual clauses and other safeguards required by your jurisdiction.

Policy Changes and Contact on patoto

We may update this Privacy Policy at any time. Changes take effect when we publish them on our website. Continued use of patoto after a change means you accept the updated policy. We recommend reviewing this page periodically to stay informed of any updates.

If you have questions about our privacy practices, data handling, or wish to exercise your data subject rights, contact our support team through your patoto account dashboard. You can also send a written request to the contact address listed in our legal noticeWe aim to respond to all privacy inquiries within a standard timeframe.

Regional Privacy Compliance on patoto

We comply with applicable data protection regulations in each jurisdiction where we operate. Our privacy practices are designed to meet requirements across supported regions including Jakarta, Surabaya, Bandung, and Medan. If your jurisdiction has specific data protection laws or requirements, we accommodate those requirements in our processing.

Our services are available only where local law permits. Your use of patoto confirms that you understand and accept our privacy practices and that you have verified compliance with your jurisdiction's data protection and online gaming laws.

Legal and Jurisdiction Information

Service availability

We at patoto offer our services only in jurisdictions where local law permits online gaming and sportsbook engagement. Our platform is not available in jurisdictions where online wagering is prohibited. We do not knowingly accept users from regions where our services are illegal or restricted by applicable law. Service availability depends on your location and the legal framework governing online entertainment in your jurisdiction. We do not name specific jurisdictions as legal or illegal; instead, we require all members to verify independently that their access to patoto complies with local law before opening an account or making a deposit. If you are uncertain whether patoto is available in your location, we recommend contacting our support team through your account dashboard or reviewing your jurisdiction's current regulations. Our commitment is to operate transparently within the legal boundaries of each region we serve. We maintain awareness of changing regulations and adjust our service availability accordingly. If your jurisdiction introduces new restrictions on online gaming, we will take appropriate steps to ensure compliance, which may include suspending service to that region or closing affected user accounts. We take this responsibility seriously and work with legal counsel in each jurisdiction to ensure full compliance.

Account eligibility

Eligibility to open and maintain an account on patoto is determined by applicable law in your jurisdiction. We do not set a specific age requirement in our policy; instead, we defer to the legal age of majority and the minimum age for gaming participation as defined by your local jurisdiction's law. Account holders must be of legal age to enter into binding contracts and participate in online gaming activities as permitted by their jurisdiction. During account creation, you confirm that you meet all eligibility requirements under your local law. Our KYC verification process — which requires a photo ID and proof of address — helps us confirm that account holders are who they claim to be and meet age and residency requirements applicable to their jurisdiction. We do not offer account controls, account preferences, or other responsible-gambling features as part of our standard account setup, because these are regulatory requirements in some jurisdictions but not others. If your jurisdiction requires such tools or features, we recommend contacting our support team to discuss your account options and any additional measures we can provide. We reserve the right to verify age and eligibility at any time, including requesting additional documentation if we have concerns about an account's legitimacy.

Local-law responsibility

Users of patoto are solely responsible for verifying that their access to and participation on our platform comply with the laws and regulations of their own jurisdiction. We do not provide legal advice, and we do not warrant that our services are legal in your location. Before opening an account, making a deposit, or engaging with any game or market on patoto, you must independently verify that online gaming and sportsbook engagement are permitted under your local law. The legal status of online gaming varies significantly across regions and can change, and it is your responsibility to understand the rules that apply to you at all times. If you are unsure about the legal status of patoto in your jurisdiction, we recommend consulting with a local legal professional or contacting your jurisdiction's gaming regulator before proceeding. By opening an account on patoto, you confirm that you have verified compliance with your local law and that you accept full responsibility for any legal consequences of your participation. We reserve the right to suspend or terminate accounts if we determine that a user is accessing patoto from a jurisdiction where our services are prohibited or if we detect activity suggesting non-compliance with local law.

Data and privacy scope

We collect personal data from all patoto account holders for Know Your Customer (KYC) verification and account security purposes. This data includes your full name, date of birth, photo ID number, address, email, and phone number. We also collect transaction history, account activity logs, device information, and payment method details. Our KYC process requires a photo ID scan and proof of address to verify your identity and confirm that you meet eligibility requirements under applicable law. We retain this data in accordance with applicable data protection regulations and legal requirements of jurisdictions where we operate. Your data is stored securely using industry-standard encryption and access controls. We do not sell or share your personal data with third parties for marketing purposes. We may share data with payment processors, fraud-prevention services, and legal authorities as required by law or valid court order. For a comprehensive explanation of how we collect, use, store, and protect your data, please review our complete privacy policyIf you have questions about your data or wish to request access, correction, or deletion of your personal information, contact our support team through your patoto account dashboard.

Contact for legal inquiries

If you have legal questions, compliance inquiries, or concerns about patoto's operations and practices, you can contact our team through multiple channels. Our primary support channel is the help section within your patoto account dashboard, where you can submit inquiries in English and receive responses from our multilingual support team. Response times vary depending on the complexity of your inquiry and current support volume, but we aim to acknowledge all legal and compliance questions within a standard business window. For urgent legal matters or formal compliance inquiries, you may also reach out through the contact information provided in our legal noticeWe maintain records of all legal inquiries and responses to ensure transparency and accountability in our operations. If you are a legal representative, regulator, or government authority seeking information about patoto, please use the formal inquiry channels listed in our legal notice. We take all legal and compliance matters seriously and commit to responding to legitimate inquiries in a timely, professional, and thorough manner. Our legal team reviews all formal requests and ensures that we comply fully with applicable law and regulatory requirements in each jurisdiction where we operate.