Privacy Policy

1. Introduction

Welcome to the mctoto Privacy Policy. This document describes how mctoto ("we", "us", "our", or the "Operator") collects, uses, processes, and protects personal information provided by users ("you", "your", or "Player") of our online gaming platform accessible at https://mctoto.cam and any associated mobile-optimized versions.

mctoto operates an online gaming platform serving Indonesian players with lottery games (togel), sports betting (bandar bola), live casino tables, and slot entertainment. We are committed to protecting your privacy and handling your personal data with transparency, security, and in compliance with applicable data protection regulations.

By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using our platform and close your account if already registered.

2. Information We Collect

mctoto collects various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver a personalized gaming experience.

2.1 Information You Provide Directly

When you register an account with mctoto, we collect personal information you voluntarily provide, including:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers if applicable
• Financial Information: Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet account information (OVO, DANA, GoPay), transaction history, deposit and withdrawal records
• Verification Documents: Government-issued photo identification (KTP - Indonesian identity card, passport, or driving license), proof of address documents, selfie photographs for facial verification, and payment method verification documents
• Communication Data: Correspondence with customer support including live chat transcripts, email exchanges, and feedback submitted through contact forms

2.2 Information Collected Automatically

When you access and use the mctoto platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers
• Connection Information: IP address, internet service provider, approximate geographic location based on IP address, connection type and speed
• Usage Data: Pages visited, time spent on each page, clickstream data, navigation paths, games played, bet amounts and frequencies, login and logout times, feature usage patterns
• Performance Data: Page load times, error messages, crash reports, and other technical performance metrics

2.3 Information from Third-Party Sources

We may receive information about you from third-party services, including:

• Payment Processors: Transaction confirmation, payment success or failure status, fraud risk assessments from Indonesian banks and e-wallet providers
• Identity Verification Services: Results from identity verification checks conducted by third-party KYC (Know Your Customer) providers
• Fraud Prevention Services: Risk scores, device fingerprinting data, and behavior analysis from anti-fraud partners

3. How We Use Your Information

mctoto processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and financial transactions through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Providing access to lottery games (togel), sports betting markets, live casino tables, and slot games
• Calculating winnings, crediting bonuses, and managing account balances
• Maintaining game history, betting records, and transaction logs

3.2 Security and Fraud Prevention

• Verifying your identity and age to ensure compliance with 21+ age restrictions
• Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities
• Identifying duplicate accounts and enforcing single-account-per-person policies
• Monitoring for suspicious betting patterns and unusual account activity
• Protecting against unauthorized access, hacking attempts, and security breaches

3.3 Legal and Regulatory Compliance

• Complying with Indonesian anti-money-laundering (AML) and counter-terrorism financing (CTF) regulations
• Maintaining records required by gaming licenses and regulatory authorities
• Responding to legal requests from law enforcement agencies, courts, or government bodies
• Enforcing our Terms & Conditions and investigating breaches
• Resolving disputes and handling customer complaints

3.4 Customer Support and Communication

• Responding to inquiries, questions, and support requests via live chat, email, or WhatsApp
• Sending transactional communications including deposit confirmations, withdrawal updates, and account notifications
• Providing important service updates, security alerts, and policy changes
• Collecting feedback to improve platform quality and user experience

3.5 Platform Improvement and Personalization

• Analyzing usage patterns to improve website navigation, game selection, and feature design
• Personalizing game recommendations based on play history and preferences
• Testing new features, conducting A/B tests, and optimizing platform performance
• Understanding player behavior to develop better responsible gaming tools

3.6 Marketing Communications (With Consent)

• Sending promotional emails about bonuses, tournaments, and special offers (only if you opted in)
• Notifying you about new games, features, and platform updates
• Sharing personalized offers based on your gaming preferences

You can opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in promotional emails. Transactional and security-related communications cannot be opted out of as they are essential to account operation.

4. Data Sharing and Disclosure

mctoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the limited circumstances described below:

4.1 Service Providers

We share information with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and payment gateway operators who process deposits and withdrawals
• Identity Verification Services: KYC providers who verify government-issued identification documents and perform age verification checks
• Game Providers: Live casino operators, slot game studios, and sports odds providers who deliver gaming content
• Customer Support Tools: Live chat software providers and email service platforms
• Security Services: Fraud detection platforms, anti-money-laundering screening services, and cybersecurity firms
• Cloud Hosting: Data center operators and cloud infrastructure providers who host our platform

All service providers are contractually bound to protect your data, use it only for specified purposes, and maintain confidentiality standards equivalent to those in this Privacy Policy.

4.2 Legal Obligations

We may disclose your information when required by law or in good faith belief that such action is necessary to:

• Comply with legal processes, court orders, subpoenas, or government requests
• Cooperate with law enforcement investigations
• Enforce our Terms & Conditions and investigate violations
• Protect the rights, property, or safety of mctoto, our users, or the public
• Detect, prevent, or address fraud, security breaches, or technical issues

4.3 Business Transfers

In the event that mctoto undergoes a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such disclosure for specific purposes not covered in this Privacy Policy.

5. Data Security Measures

mctoto employs industry-standard technical, physical, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

5.1 Technical Security

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks
• Data Encryption: Sensitive information including passwords and financial data is encrypted at rest using AES-256 encryption
• Secure Payment Gateways: Payment processing routes through PCI DSS-compliant gateways that never expose full bank account or card numbers to our system
• Firewall Protection: Multi-layer firewalls protect our infrastructure from external attacks
• Intrusion Detection: Real-time monitoring systems detect and alert on suspicious access patterns

5.2 Access Controls

• Strict access controls limit employee access to personal data on a need-to-know basis
• Multi-factor authentication required for administrative system access
• Regular access audits to identify and revoke unnecessary permissions
• All database queries logged for accountability and incident investigation

5.3 Security Testing and Audits

• Regular penetration testing by independent security firms
• Vulnerability scanning and patch management programs
• Annual security audits to verify compliance with best practices
• Incident response plans tested through regular drills

6. Data Retention and Storage

mctoto retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, game records, and communications to provide ongoing service and maintain accurate financial records.

6.2 Closed Account Data

After you close your account (voluntarily or due to Terms & Conditions violations), we retain certain information for legal and regulatory compliance:

• Financial Records: Transaction history, deposit records, withdrawal records, and bonus history retained for 7 years to comply with Indonesian financial regulations and anti-money-laundering requirements
• Identity Verification Documents: Copies of KTP, passport, or other identification retained for 7 years for regulatory compliance and fraud prevention
• Account Activity Logs: Login history, IP addresses, bet history retained for 5 years for dispute resolution and fraud investigation
• Marketing Consent Records: Records of marketing opt-ins and opt-outs retained indefinitely to honor your preferences

6.3 Data Storage Location

Your personal information is stored on secure servers located in data centers with physical security, redundancy, and disaster recovery capabilities. We may transfer data to servers in different geographic locations for operational efficiency, backup, or disaster recovery purposes, always maintaining equivalent security standards.

6.4 Data Deletion

After retention periods expire, we securely delete or anonymize personal information using industry-standard data destruction methods. Anonymized data may be retained indefinitely for statistical analysis and platform improvement.

7. Your Privacy Rights

You have certain rights regarding your personal information held by mctoto. We respect these rights and provide mechanisms to exercise them.

7.1 Right to Access

You have the right to request confirmation of what personal information we hold about you and receive a copy of that information. You can access most of your data directly through your account dashboard, including transaction history, bet records, and contact information. For information not available in your dashboard, contact our customer support team.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email address, phone number, residential address) directly in your account settings. For changes to your legal name or date of birth, contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal information, subject to legal retention requirements. We cannot delete information we are legally required to retain for regulatory compliance (financial records, identity verification documents) or information necessary for ongoing legal claims or investigations. After mandatory retention periods expire, we will honor deletion requests.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as while verifying the accuracy of disputed data or pending resolution of a legal claim.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format (such as CSV or JSON) and transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time by adjusting account preferences or clicking unsubscribe links. You may also object to processing based on legitimate interests by contacting customer support with your specific concerns.

7.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection team via email at [email protected] (plain text display) or through live chat. We will respond to requests within 30 days. Identity verification may be required before processing requests to prevent unauthorized access to your information.

8. Cookies and Tracking Technologies

mctoto uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content.

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They enable the website to remember your preferences, recognize your device on return visits, and collect information about how you use the platform.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality including maintaining your login session, remembering items in your bet slip, and enabling secure transactions. These cannot be disabled without severely limiting platform usability.
• Performance Cookies: Collect anonymous information about how visitors use the website, including pages visited most frequently, error messages received, and navigation patterns. This data helps us improve platform performance.
• Functionality Cookies: Remember your preferences such as language settings, display options, and favorite games to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant promotional content and measure advertising campaign effectiveness. Used only with your consent.

8.3 Managing Cookie Preferences

You can control cookie settings through your browser options. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. Note that disabling essential cookies may impact your ability to use certain platform features. Consult your browser's help documentation for specific instructions on managing cookies.

8.4 Other Tracking Technologies

We also use web beacons (small transparent images embedded in web pages or emails), local storage, and device fingerprinting for security purposes and to detect duplicate accounts or fraudulent activity.

9. Third-Party Services

The mctoto platform may contain links to third-party websites, services, or applications (such as payment processors, game providers, or social media platforms) for your convenience. This Privacy Policy applies only to information collected by mctoto. We are not responsible for the privacy practices or content of third-party services.

When you interact with third-party services, their own privacy policies and terms of service apply. We encourage you to read the privacy policies of any third-party service you access through our platform. Providing information to third parties or using their services is at your own risk, and mctoto is not liable for any data breaches, privacy violations, or issues arising from your use of third-party services.

10. Children's Privacy

mctoto's services are strictly intended for adults aged 21 years or older. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21, and we do not knowingly allow such individuals to register accounts or use our services.

If we discover that we have collected personal information from an individual under 21 years of age, we will immediately delete that information, close the account, and permanently ban the individual from the platform. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] (plain text display) so we can take corrective action.

Parents and guardians should monitor their children's internet usage and implement parental control software to restrict access to age-inappropriate websites. We recommend keeping computers and mobile devices in common areas of the home and discussing online safety with minors.

11. Changes to This Privacy Policy

mctoto reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this document
• Send email notification to your registered email address (for significant changes affecting how we use your personal information)
• Display a prominent notice on the platform homepage for a reasonable period
• For particularly significant changes, we may require you to actively accept the new Privacy Policy before continuing to use the platform

Your continued use of mctoto services after changes to the Privacy Policy become effective constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you disagree with any changes, you must stop using the platform and close your account.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy, how we collect or process your personal information, or wish to exercise your privacy rights, please contact our Data Protection team:

• Email: [email protected] (Plain text display - not a clickable link)
• Live Chat: Available 24/7 through the platform interface
• Response Time: We aim to respond to all privacy inquiries within 5 business days, with full resolution within 30 days
• Languages: Support available in English and Indonesian

For formal data protection complaints or concerns not resolved through our customer support channels, you may have the right to lodge a complaint with your local data protection authority, though we encourage you to contact us first so we can attempt to resolve the issue directly.