oppatoto Privacy Policy

This page describes what we collect when you use oppatoto and how we keep that data protected. We collect your personal information — email, password, identity documents, payment details — to verify your account, process deposits and withdrawals, and comply with anti-money-laundering regulations. We encrypt all data between your mobile device and our servers, monitor your account for fraud, and never sell your information to third parties.

Our privacy commitment is straightforward: we use your data only to operate oppatoto and deliver the services you've signed up for. We don't profile you for marketing purposes, we don't share your account details with game providers, and we don't use your location data beyond confirming your jurisdiction eligibility. This policy explains our data practices in detail — what we collect, how long we keep it, and what rights you have.

If you're accessing oppatoto from your Android phone via our APK or browsing on iOS through Safari, this policy applies to both paths. Your account data syncs across devices, and we apply the same security and privacy standards whether you're on mobile or desktop.

What We Collect and Why

When you register on oppatoto, we collect your email address and a password you create. We use email to verify your account, send you transaction confirmations, and contact you about account events — never for marketing unless you explicitly opt in.

For KYC (Know Your Customer) verification, we request a government-issued ID and proof of address. We collect your name, date of birth, document number, and registered address from these documents. This verification is how we comply with Indonesian and international anti-money-laundering law. Your identity documents are encrypted and stored securely; we don't share them with third parties except where law requires (such as regulatory authorities investigating fraud).

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we collect transaction records showing the amount, date, payment method, and source account. We retain this data for accounting, tax compliance, and fraud detection. We also log your game activity — which games you play, when you played, how much you wagered, and the outcome — so your transaction history is complete and auditable within your account dashboard.

We don't collect behavioral data beyond gaming activity

We log your game sessions for account history, but we don't track your web browsing, location movements, or interactions outside oppatoto. Your IP address is recorded for security purposes — to detect unauthorized logins — but we don't use it to build a profile of you.

How We Use Your Data

Your email and password authenticate your account. Your identity documents verify that you're the account holder. Your payment records confirm deposits and process withdrawals. Your game history provides you with a complete audit trail of your activity on oppatoto.

We use your data to:

We do not use your data to:

Data Storage and Security

We encrypt all communication between your mobile device and oppatoto's servers using TLS (Transport Layer Security). Your password is hashed, not stored in plain text. Your identity documents are encrypted at rest in our database.

Our servers are located outside Indonesia, typically in data centers across Asia. This means your data may be processed in jurisdictions outside Indonesia's direct regulatory reach. By using oppatoto, you acknowledge this data transfer. If you have concerns about where your data is stored, contact us before opening an account.

We keep your account secure through encryption, monitoring, and regular security audits — your balance, your identity, and your transaction history are protected.

oppatoto team

Third Parties and Data Processors

We work with payment processors, banks, and identity-verification services to operate oppatoto. When you deposit via online payment or e-wallet virtual account, mobile banking and local payment process the transaction and see your transaction details. When you request identity verification, our verification service sees your ID photos. These third parties are bound by confidentiality agreements and process your data only to complete the service you've requested.

We do not share your account balance, game history, or personal information with advertising networks, analytics providers, or marketing partners. We may share anonymized, aggregated data (such as "many active users used Liga 1 markets in Jakarta during Idul Adha") with business partners, but this data identifies no individual.

Your Rights and Data Requests

You have the right to request a copy of all data we hold about you. You can request correction of inaccurate data. You can request deletion of your account and associated data, though we may retain records for tax and anti-money-laundering compliance. To exercise these rights, contact our support team with your account email address. We'll respond within 30 days.

If you believe oppatoto has mishandled your data, you can file a complaint with Indonesia's data-protection authority. We're committed to resolving concerns quickly — contact us first, and we'll investigate.

Cookies and Device Data

Our Android APK stores a session token on your device so you stay logged in between sessions. Your iOS browser stores cookies for the same purpose. These tokens expire after 30 days of inactivity, and you can clear them by logging out.

We use minimal analytics to understand how oppatoto is performing — for example, how many users open the app on Android versus iOS, or how often the Dragon Tiger tables are accessed. This data doesn't identify you personally; it helps us optimize the platform.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or to comply with new laws. We'll notify you by email if material changes occur. Your continued use of oppatoto after we post changes means you accept them.

Contact oppatoto

If you have questions about oppatoto's privacy practices, your data, or this policy, contact us at our support email. Our team responds during business hours in Indonesian and English. We're available to discuss your concerns or clarify how we handle your information.

This privacy policy applies to all oppatoto users in supported jurisdictions. oppatoto services are available only where local law permits. If you have questions about whether oppatoto operates in your jurisdiction, we recommend checking with local authorities before creating an account.