sriwijayatoto Casino & Sportsbook Data Care
This page describes what we collect when you use sriwijayatoto and how we keep that data protected. Payment adoption across Southeast Asia has accelerated—DANA, e-wallet, mobile banking, and other mobile wallets now handle billions of transactions annually. Protecting personal data during payments, account access, and gameplay is core to what we do. We collect data only when you interact with our platform, and we share it only with services needed to operate sriwijayatoto.
Our sriwijayatoto privacy policy applies to all account holders and users who visit our site. We process data according to local law and international standards. We do not sell your data. We do not track your behaviour outside sriwijayatoto. We encrypt sensitive information and store identity documents securely. This page explains what we collect, how long we keep it, who has access, and what rights you have.
If you have questions about our privacy practices or want to exercise your rights (access, correction, or deletion), contact our data team through the app or email support. We respond within seven business days.
What We Collect on sriwijayatoto
We collect data in two categories: what you provide, and what we generate from your use of sriwijayatoto. You provide: email address, phone number, full name, date of birth, government-issued ID (KTP, passport, or driver's licence), and residential address. During account verification, we may ask for a recent selfie to match your ID. We generate: login timestamps, bet histories, payment transactions, device information (phone model, OS version), IP address, and browser type. We also track which games you view, which tables you join, and how long you stay on the platform.
We collect payment data indirectly. When you deposit via DANA, e-wallet, mobile banking, local payment, or online payment, the payment processor (e-wallet, mobile banking, etc.) sends us confirmation of the transfer—amount, timestamp, and your payment-account ID. We do not store your local payment or online payment password, PIN, or card details. Your bank (e-wallet, mobile banking, local payment, online payment) also confirms transfers to us, but we don't receive your banking credentials.
We delete identity documents 90 days after account closure
Your KTP photo and selfie are not stored indefinitely. Once your sriwijayatoto account is closed, we delete these documents within 90 days to minimize data retention.
How We Use Your Data on sriwijayatoto
We use your data for five purposes. Account verification: we confirm your identity before you can withdraw. Payment processing: we pass your deposit and withdrawal instructions to e-wallet, mobile banking, local payment, online payment, or your bank. Fraud prevention: we monitor for unusual activity (rapid deposits and withdrawals, large bets after signup, access from different countries in short timeframes) and flag suspicious patterns to our compliance team. Service operation: we improve sriwijayatoto—analysing which games crash, which tables are slow, which payment methods fail. Legal compliance: if a court or regulator requests information, we comply.
We do not use your data for marketing beyond in-app notifications about promotions you've already enrolled in. We do not sell your email or phone to third parties. We do not use your gaming history to target you with external advertising. We do not combine your sriwijayatoto data with data from other sites to build a profile of you.
Third Parties and Data Sharing on sriwijayatoto
Our sriwijayatoto platform shares data with trusted services only. Payment processors: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and the four major Indonesian banks (local payment, online payment, e-wallet, mobile banking) receive your name, account number (or phone number for mobile wallets), and transaction amount when you deposit or withdraw. Fraud and compliance: we may share anonymized account patterns with third-party fraud-detection services. Hosting: our servers may be located outside Indonesia; data stored there is encrypted and contractually protected. Legal requests: if a court orders us to disclose data, or if a regulator investigating financial crime requests information, we comply. We notify you of such requests unless legally prevented.
We do not share data with advertisers, data brokers, or marketing platforms. We do not use your information for profiling or automated decision-making that affects your account status (e.g., we don't automatically close accounts based on betting patterns alone). If we suspect fraud, we investigate manually and contact you before taking action.
Your identity documents and payment history remain yours. We keep them secure, never sell them, and delete them when you leave sriwijayatoto.
Cookies and Tracking
We use cookies to keep you logged in and to remember your preferences (language, favourite games, stake levels). Our cookies do not track you across other websites. When you visit sriwijayatoto, we set session cookies (deleted when you log out) and optional persistent cookies (stored for 30 days to speed up login). You can disable cookies in your browser, but some features may not work. We do not use third-party tracking pixels or analytics cookies that link your behaviour to external services.
Your Rights and Data Retention on sriwijayatoto
You have the right to access, correct, and delete your personal data. Access: request a copy of all data we hold about you by contacting support. Correction: if your name, email, or phone is wrong, update it in Account Settings or ask support to help. Deletion: close your sriwijayatoto account to request data deletion. We delete your profile, login history, and game history. We retain transaction records (deposits, withdrawals, bets) for seven years to comply with financial regulations. We delete identity documents (KTP, passport, selfie) 90 days after closure.
We keep data for different periods depending on its purpose. Active account data (balance, transaction history) stays as long as your account is open. Closed-account transaction records are archived for seven years. Email and phone for account recovery are kept until deletion. Marketing consent is tracked separately—you can opt out of promotional messages at any time through the app. During major events like Idul Fitri or Piala AFF, we may retain temporary activity logs to investigate abuse, then delete them within 30 days.
Contact and Dispute
If you believe our sriwijayatoto team has mishandled your data, contact our privacy officer through the app's Help menu. Include: what data concern you have, when it occurred, and what outcome you seek. We investigate within 14 days and respond. If you're not satisfied, you may file a complaint with your local data-protection authority (if your jurisdiction has one). We cooperate with regulators and may be required to disclose information during official investigations in Jakarta, Surabaya, Bandung, Medan, or Semarang.
We update this privacy policy occasionally. Material changes (new data uses, new third parties, longer retention) are announced via in-app notification or email. Your continued use of sriwijayatoto after a policy update means you accept the new terms. If you disagree with a change, you can close your account.