dnatoto Casino & Sportsbook Data Care

What we collect and why

When you register on dnatoto, we collect your email address, full name, national identification number, phone number, and date of birth. We use this information to verify your identity (KYC compliance), communicate with you, and prevent fraud. We store this data securely and do not share it with third parties except where required by law enforcement or payment processors.

When you deposit through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we record the transaction amount, date, and payment method. We retain this record for accounting and dispute resolution. Payment processors may also retain transaction data according to their own privacy policies.

Account activity and game records on dnatoto

Our dnatoto platform logs your session activity: login times, games played, bets placed, and outcomes. We use this data to manage your account, calculate payouts, and detect suspicious patterns (fraud prevention). Your game history and balance are visible in your account at any time. We retain this data for the duration of your account and for a period beyond account closure as required by regulatory obligations.

Device and connection data

When you access dnatoto via our Android app or iOS browser, we collect limited technical data: your device type, operating system version, and IP address. We use this information to optimize performance, troubleshoot issues, and enforce security (e.g., detecting unauthorized login attempts from new locations). We do not track your location beyond the IP address; we do not access your contacts, photos, or other files. Our app requests only the permissions necessary to function: network access, push notifications, and local storage for game cache.

Cookies and tracking

We use session cookies to maintain your login state and store your preferences (language, notification settings). These cookies are not used for advertising tracking and expire when you log out or close your browser.

Third-party processors

Our servers may sit outside your jurisdiction. Payment processors, hosting providers, and fraud-detection vendors may access limited data to provide services. We require these vendors to comply with privacy standards equivalent to our own.

Data retention windows

We retain active account data for the duration of your membership. After closure, we retain transaction records, identity documents, and activity logs for regulatory compliance periods (typically 5–7 years for financial records).

Your rights and our obligations on dnatoto

We at dnatoto recognize your right to access, correct, and delete your personal data. You can request a copy of all information we hold about you by contacting our support team. We will provide a downloadable export of your account data, payment history, and activity records within a standard processing window (typically one to two weeks). If you notice inaccuracies—a wrong name spelling or outdated phone number—you can update these details directly in your account or request our team to assist.

You also have the right to request deletion of your account and associated data. We will close your account and remove active records. We may retain transaction records and identity documents beyond closure for regulatory compliance; we will notify you of this retention when you request deletion. Users in jurisdictions with specific data-protection laws (e.g., GDPR equivalents) may have additional rights; we recommend reviewing your local regulations.

Security and cross-border transfers on dnatoto

We encrypt your data in transit (HTTPS) and at rest (encrypted database storage). Our servers use industry-standard security protocols. However, no system is entirely secure; we cannot guarantee absolute protection against all threats. We maintain incident response procedures and notify users if a breach occurs and personal data is compromised.

Our dnatoto infrastructure may transfer your data across borders. Your data may be processed by servers in jurisdictions different from your own. By using dnatoto, you consent to this transfer. If you are based in a jurisdiction with strict data-residency requirements, you may not be able to use our platform; we recommend verifying local regulations before creating an account.

Policy updates and contact information

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of dnatoto after a policy update constitutes acceptance of the new terms. We recommend reviewing this page periodically.

If you have questions about how we handle your data, wish to exercise your rights, or suspect a privacy violation, contact our support team. We respond to data requests and privacy inquiries in English and Indonesian. For urgent security concerns (e.g., suspected unauthorized access to your dnatoto account), contact support immediately—we prioritize security matters above standard response timelines.

Our jurisdiction-restricted service model means we do not operate in regions where our data practices would violate local law. If you are unsure whether dnatoto services comply with your jurisdiction's privacy regulations, check with local authorities or contact our team before opening an account.