punyatotoPrivacy Policy

This page describes what we collect when you use punyatoto and how we keep that data protected. When you register an account, deposit via DANA or e-wallet, or play a slot game on our platform, we gather personal information necessary to operate our service and comply with financial regulations. Our privacy commitments explain how we store, use, and share this data.

We at punyatoto treat your personal information as confidential and apply industry-standard encryption and access controls. Our servers may sit outside your jurisdiction; however, we apply the same protection standards regardless of server location. We do not sell your data to third parties. We share information only with payment processors, compliance partners, and service providers who assist us in running punyatoto, and only to the extent necessary.

This policy is effective as of 2026 and may be updated from time to time. Material changes will be notified via email or in-app notice. Your continued use of punyatoto indicates acceptance of this privacy policy.

What data we collect on punyatoto

When you register an account with us on punyatoto, we collect your legal name, date of birth, phone number, and email address. We use this information to verify your identity, contact you about account activity, and comply with Know Your Customer (KYC) regulations. We also record your IP address and device information (browser type, operating system) to detect unauthorized access and prevent fraud.

When you deposit on punyatoto via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we collect transaction details: the amount, timestamp, payment method, and settlement status. We retain this information for accounting and dispute resolution. We do not store raw credit-card or bank-account numbers; instead, we use encrypted tokens and references provided by payment gateways. Our payment partners (mobile banking, local payment, etc.) handle raw payment data according to their own privacy policies.

When you play games on punyatoto — slots, live-dealer tables, or sportsbook markets — we record your session data: which games you play, your stakes, outcomes, and timestamps. We use this information to calculate winnings, settle payouts, and detect unusual betting patterns. We also collect KYC documents (KTP, passport, driving license, NPWP photos) when you withdraw above thresholds; we store scanned copies encrypted and delete them after retention periods set by Indonesian financial regulations (typically 5–7 years).

Registration data

Legal name, date of birth, email, phone number. Required to open and maintain your punyatoto account.

Payment data

Deposit and withdrawal amounts, timestamps, payment method, and settlement status. Retained for accounting and dispute resolution.

Game session data

Games played, stakes, outcomes, timestamps. Used to calculate winnings and settle payouts.

KYC documents

Identity document scans (KTP, passport, etc.). Encrypted, retained per regulatory requirements, deleted after expiry.

Device and access data

IP address, browser type, operating system, login timestamps. Used to detect fraud and unauthorized access.

How we use your data on punyatoto

We at punyatoto use your personal data to operate and improve our platform. Specifically, we use your information to: verify your identity during account registration and KYC review; process deposits and withdrawals; calculate game winnings and tournament payouts; communicate account updates, promotional offers, and support responses; detect and prevent fraud and unauthorized access; comply with financial regulations and anti-money-laundering (AML) laws; and analyze usage patterns to improve user experience and game offerings.

We do not use your data for marketing or promotional purposes without your consent. If we wish to send you marketing communications (e.g., tournament announcements, seasonal promotions), we will request opt-in permission via email or SMS. You can unsubscribe from marketing communications anytime by clicking the "Unsubscribe" link in emails or contacting our support team.

Our punyatoto platform uses cookies and similar tracking technologies to remember your login session, store your preferences (language, theme), and track site usage. Most cookies expire when you close your browser or log out; some session cookies may persist across visits to improve user experience. You can disable cookies in your browser settings, though this may limit punyatoto functionality. We do not use cookies to track your activity across external websites.

Third-party data sharing on punyatoto

We share your data with third parties only when necessary to operate punyatoto or comply with law. These third parties include: payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) who process your deposits and withdrawals; compliance and KYC partners who verify your identity; live-dealer studios who operate our multi-camera gaming tables; and cloud infrastructure providers who host our servers and databases.

All third-party processors are contractually obligated to protect your data according to our privacy standards. We audit their security practices and require them to comply with data protection regulations. We do not sell or share your data with marketing firms, data brokers, or advertisers. We may share anonymized, aggregated data (e.g., "non-specific info of punyatoto members in Jakarta played Aviator in November") for analytics and research, but this data cannot identify individuals.

We may disclose your data to law enforcement or government agencies if required by court order, legal process, or regulation. We will attempt to notify you of such disclosure unless legally prohibited from doing so.

Your privacy rights on punyatoto

Under Indonesian data protection regulations and punyatoto's privacy commitment, you have the right to access, correct, and delete your personal data. You can update your account information (name, email, phone number) through your punyatoto account settings anytime. If you wish to request a copy of all data we hold about you, contact our support team with your account ID; we will provide a data export within 10 business days.

You have the right to request deletion of your personal data. However, we may retain data as required by financial regulations (typically 5–7 years) or to resolve disputes. Upon account closure, we delete non-essential data and retain only what is legally mandated. If you believe we mishandled your data, you can contact our data protection officer or file a complaint with Indonesia's data protection authority.

Data retention and security on punyatoto

We at punyatoto retain personal data only as long as necessary to provide our service and comply with regulations. Registration data (name, email, phone) is retained for the life of your account plus 5 years after closure. Payment data is retained for 7 years per Indonesian financial law and is deleted thereafter. Game session data is retained for 2 years for dispute resolution and analysis; after 2 years, we delete detailed session logs while retaining only summary statistics.

Our punyatoto platform protects data through multiple security layers. We encrypt all data in transit using SSL/TLS certificates (verified by your browser as "secure"). Our databases are encrypted at rest using AES-256 encryption; encryption keys are managed separately and accessible only to authorized staff. Our servers are hosted in secure data centers with physical access controls, redundant power, and fire suppression systems. We conduct regular security audits and penetration testing to identify and remediate vulnerabilities.

We limit access to your data to punyatoto employees who have a legitimate business need (e.g., support staff responding to your inquiry). All staff sign non-disclosure agreements and undergo privacy training. We maintain audit logs recording who accessed your data and when. If we detect a data breach, we will notify affected users and regulators within timeframes required by law.

International data transfer and cookies

Our punyatoto servers may be located outside Indonesia, including in Singapore, Australia, or other jurisdictions. When we transfer your data internationally, we apply the same encryption and protection standards as domestic transfers. We comply with data transfer regulations and do not transfer data to jurisdictions known for weak data protection unless you explicitly consent.

We use cookies and similar tracking technologies on punyatoto to maintain your login session, remember your preferences, and analyze site usage. Essential cookies (session tokens, CSRF protection) are necessary for platform security. Optional cookies track your behavior on punyatoto to improve user experience. You can disable cookies in your browser settings; however, disabling essential cookies may prevent you from logging in or accessing punyatoto functionality.

Contact and complaints on punyatoto

If you have privacy concerns or wish to exercise your rights on punyatoto, contact our support team via email or live chat. Our support team responds within one business hour during standard business hours (09:00–17:00 Jakarta time, weekdays). For data access requests, include your account ID and specify what data you wish to access; we provide a response within 10 business days.

If you believe we violated your privacy rights, you can file a complaint with Indonesia's data protection authority or contact our data protection officer directly through our Legal Notice page. We take all privacy complaints seriously and will investigate within 10 business days. Our commitment on punyatoto is to protect your personal information and respond transparently to your concerns.