Privacy Policy

1. Introduction

This Privacy Policy describes how iitoto ("we", "us", "our", "the Company") collects, uses, processes, stores, and protects your personal information when you access and use our online gaming platform at https://iitoto.cam (the "Website" or "Platform"). This policy applies to all users who register accounts, visit our website, or interact with our services.

At iitoto, we recognize that privacy is a fundamental right and that protecting your personal data is essential to maintaining your trust. We are committed to transparent data practices and full compliance with applicable data protection regulations. By using iitoto services, you consent to the data practices described in this Privacy Policy.

We encourage you to read this Privacy Policy carefully and contact us with any questions or concerns. If you do not agree with our data collection, use, or protection practices, please do not use the iitoto platform.

2. Information We Collect

iitoto collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, prevent fraud, and improve user experience. The specific data we collect includes:

2.1 Information You Provide Directly

When you register an account with iitoto, we collect the following personal information that you provide directly:

• Identity Information: Full legal name as it appears on your Indonesian government-issued identification document, date of birth, gender, nationality, and citizenship status
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account information), payment transaction history, deposit amounts, withdrawal requests, and bonus claims
• Verification Documents: Copies of government-issued photo ID (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification (KYC compliance)
• Communication Data: Content of customer support inquiries, live chat transcripts, email correspondence, and feedback submissions

2.2 Information Collected Automatically

When you access and use the iitoto platform, we automatically collect certain technical and behavioral information through cookies, server logs, and analytics tools:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IP address, device ID), and language preferences
• Usage Data: Pages visited, features used, time spent on each page, click patterns, navigation paths through the website, game play history, betting patterns, win/loss records, and session duration
• Location Data: IP address-based geolocation to verify you are accessing the platform from Indonesia as required by our Terms of Service
• Technical Logs: Server logs recording access times, error messages, system diagnostics, and security events

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources including:

• Payment processors and banks confirming transaction authenticity and fraud screening results
• Identity verification services providing enhanced due diligence and anti-money laundering (AML) screening
• Game providers supplying game play records and technical performance data
• Marketing partners and affiliate networks (if you arrived at iitoto through a referral link)

3. How We Use Your Personal Data

iitoto processes your personal information for specific, legitimate business purposes that are necessary to deliver our gaming services and comply with legal requirements. We use your data for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Processing deposits and withdrawals to Indonesian bank accounts and e-wallets
• Enabling gameplay on sports betting, casino games, and other gaming products
• Recording betting history and calculating winnings
• Crediting bonuses and promotional offers to eligible accounts
• Providing customer support and responding to inquiries

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to comply with 21+ age restrictions
• Conducting Know Your Customer (KYC) checks and enhanced due diligence
• Preventing fraud, money laundering, and other financial crimes
• Detecting and preventing underage gambling
• Maintaining records as required by gaming regulations and financial laws
• Cooperating with law enforcement and regulatory authorities when legally required

3.3 Platform Security and Fraud Prevention

• Monitoring for suspicious activity, collusion, and bonus abuse
• Detecting multiple accounts and unauthorized access attempts
• Protecting against hacking, data breaches, and cyber attacks
• Identifying and blocking restricted users and self-excluded individuals
• Investigating disputes and resolving player complaints

3.4 Service Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Testing new features and optimizing platform performance
• Understanding gaming preferences to enhance product offerings
• Conducting statistical analysis and market research

3.5 Marketing and Communications

• Sending promotional offers, bonus notifications, and special event announcements
• Delivering personalized game recommendations based on playing history
• Providing account updates, transaction confirmations, and important service notices
• Conducting customer satisfaction surveys

Note: You may opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in emails. Service-related communications (transaction confirmations, security alerts) cannot be disabled as they are essential to account operation.

4. Data Sharing and Disclosure

iitoto does not sell your personal information to third parties. However, we may share your data in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist in operating our platform, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Identity Verification Services: KYC/AML screening providers to verify player identities and prevent fraud
• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt, and other software suppliers to deliver gaming content
• Cloud Hosting Services: Secure data center operators who host our servers and databases
• Customer Support Tools: Live chat and helpdesk software providers to deliver support services

All service providers are contractually bound to protect your data and use it only for the specific purposes we authorize.

4.2 Legal Requirements

We may disclose your information when required by law or to protect legal rights, including:

• Responding to valid legal requests from law enforcement or government authorities
• Complying with court orders, subpoenas, or regulatory investigations
• Enforcing our Terms and Conditions or investigating Terms violations
• Protecting the safety, rights, or property of iitoto, our users, or the public
• Detecting and preventing fraud, money laundering, or other illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and prominent website notice before such transfer occurs.

5. Data Security Measures

iitoto implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Stored data is encrypted using AES-256 encryption
• Firewalls: Advanced firewall systems protect our infrastructure from external attacks
• Intrusion Detection: Real-time monitoring systems detect and respond to potential security threats
• Secure Authentication: Multi-factor authentication options and secure password requirements protect account access
• Regular Security Audits: Independent security firms conduct periodic penetration testing and vulnerability assessments

5.2 Organizational Safeguards

• Access Controls: Employee access to personal data is restricted based on job responsibilities using principle of least privilege
• Staff Training: All personnel receive regular training on data protection and security best practices
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements
• Incident Response Plan: Documented procedures for responding to data breaches and security incidents

6. Data Retention

iitoto retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

6.1 Active Accounts

While your account remains active, we retain all associated personal data to provide ongoing services, maintain transaction records, and comply with regulatory requirements.

6.2 Closed Accounts

When you close your account, we retain certain information for legal and regulatory compliance purposes:

• Financial Records: Deposit and withdrawal history retained for 7 years to comply with financial regulations and tax laws
• Identity Verification Documents: KYC documents retained for 7 years for anti-money laundering compliance
• Betting History: Game play records retained for 5 years for dispute resolution and regulatory audits
• Communications: Support inquiries and account correspondence retained for 3 years

6.3 Deletion After Retention Period

Once the legal retention period expires, we securely delete or anonymize your personal data. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

Under applicable data protection laws, you have several rights regarding your personal information. iitoto respects these rights and provides mechanisms to exercise them:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To request access, contact our Data Protection Officer at [email protected]. We will provide your data in a commonly used electronic format within 30 days.

7.2 Right to Correction

If you believe any information we hold about you is inaccurate or incomplete, you can update most details directly through your account settings or by contacting customer support. We will correct verified errors promptly.

7.3 Right to Deletion

You may request deletion of your personal data, subject to our legal obligations to retain certain records. To request deletion, close your account and contact [email protected]. Note that we must retain financial and identity records for the periods specified in section 6.2.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as while we verify data accuracy or assess whether we have legitimate grounds for processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your data for direct marketing purposes at any time. You can opt out of marketing emails by clicking unsubscribe links or adjusting account preferences. You may also object to other types of processing based on legitimate interests.

7.7 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We may require verification of your identity before processing requests. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

8. Cookies and Tracking Technologies

iitoto uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content.

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences, maintain login sessions, and collect usage analytics.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login authentication, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with our website and identify technical issues.
• Functional Cookies: Remember your preferences such as language selection and display settings to enhance user experience.
• Marketing Cookies: Track your activity across websites to deliver personalized promotions and measure advertising effectiveness. You can opt out of marketing cookies through browser settings.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may limit platform functionality and prevent access to certain features.

9. International Data Transfers

While iitoto primarily serves Indonesian residents and stores data within secure facilities, some of our service providers and technology partners operate globally, which may involve transferring your data outside Indonesia.

When we transfer data internationally, we implement appropriate safeguards to ensure your information receives adequate protection, including:

• Contractual clauses requiring foreign service providers to protect data to the same standards as required in Indonesia
• Limiting data transfers to countries with adequate data protection frameworks
• Encryption of data during transmission
• Regular audits of third-party data handling practices

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

11. Changes to This Privacy Policy

iitoto reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the iitoto website homepage
• In-platform notification upon next login

We encourage you to review this Privacy Policy periodically. Your continued use of iitoto services after policy changes constitutes acceptance of the updated terms. The "Last Updated" date at the top of this document indicates when changes were last made.

12. Children's Privacy

iitoto services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under the minimum age, we will delete that information immediately and permanently close the associated account. If you believe a minor has provided personal information to iitoto, please contact us immediately at [email protected].

Acknowledgment: By using iitoto services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein.