kapaltoto Casino & Sportsbook Data Care
This page describes what we collect when you use kapaltoto and how we keep that data protected. We at kapaltoto take data security seriously — your personal information is encrypted, segregated from our gaming systems, and accessed only by authorised staff or as required by law. When you sign up, deposit, play, or withdraw on kapaltoto, we collect certain information. This document explains what that information is, why we need it, and what rights you have over it.
Our data policy on kapaltoto reflects standard industry practice for online gaming operators. We collect information only for legitimate business reasons: account creation and verification (know-your-customer or KYC), payment processing, fraud and money-laundering prevention, and regulatory compliance. We do not sell your data, share it without your consent (except as legally required), or use it for marketing beyond your own account on kapaltoto.
We understand that privacy is important. If you have questions about how we handle your data, or if you wish to access, correct, or delete your information, contact us directly using the channels listed at the end of this page. Our Data Protection Officer responds to all requests within fourteen calendar days.
What Data We Collect on kapaltoto
When you create an account on kapaltoto, we collect your legal name, date of birth, residential address, and government-issued identification number (ID card, passport, or equivalent). We also collect your email address and mobile phone number for account recovery and communication purposes. This information is mandatory for account creation and is stored securely on encrypted servers.
We at kapaltoto collect payment data when you deposit or withdraw. This includes the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, or direct bank transfer via e-wallet from mobile banking, local payment, online payment, e-wallet), the amount of each transaction, and the date and time of the transaction. We do not store your full payment card or bank account number directly — that information is handled by our payment processors and returned to us only as a transaction confirmation.
We collect gameplay data automatically when you use kapaltoto. This includes which games you access, how long you play, which stakes you choose, your wins and losses, and your account balance at any given time. We also collect device and connection information: your device type (Android, iOS, browser), operating system version, internet service provider, and approximate geographic location (derived from IP address). This data helps us monitor platform performance, detect fraud, and improve our service.
During account verification (required before your first withdrawal), we collect copies of your identification documents and proof of address. We may also collect additional documents if our compliance system flags unusual activity — for example, documentation explaining a large withdrawal or proof of income for frequent high-stake players. These documents are stored separately from your main account data and are deleted once verification is complete, unless we are legally required to retain them.
We do not collect unnecessary data
kapaltoto does not track your web browsing outside our platform, your location in detail, or your personal lifestyle. We collect only what is necessary for account operation and regulatory compliance.
How We Use Your Data
We at kapaltoto use your personal information for several core purposes. First, account creation and operation: we use your name, address, and ID to create your account, verify your identity, and maintain your account securely. We also use your email and phone for account recovery and important notifications (account closure, withdrawal confirmation, suspicious activity alerts).
Second, payment processing: we share your payment details with our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking operators, and bank partners) only to the extent necessary to complete your deposit or withdrawal. These processors have their own privacy policies and data-handling practices — we are not responsible for their data use.
Third, fraud prevention and regulatory compliance: we use your data to detect and prevent money laundering, fraud, and illegal activity. This includes monitoring for suspicious patterns (e.g. rapid deposits and withdrawals, attempts to circumvent account limits, access from multiple jurisdictions simultaneously). We also use your data to comply with legal obligations — if we receive a court order, subpoena, or regulatory request, we will disclose information as required by law.
Fourth, platform improvement: we analyse gameplay data in aggregate (never identifying individual users) to understand how players use kapaltoto, which features are popular, and where we can improve performance or stability. We do not use your individual data for targeted advertising or marketing.
Data Retention & Third-Party Access
We at kapaltoto retain your account data for the entire duration of your account — even after closure. This is required for regulatory compliance, tax purposes, and dispute resolution. If your account is dormant (no login for 12 months), we retain your data but restrict access to certain account functions.
Transaction records (deposits, withdrawals, and gameplay history) are retained for seven years in compliance with financial crime regulations. Payment documents and identity verification records are retained for the same period or longer if required by local law. After the retention period expires, we delete this data securely.
We share your data with third parties only in these circumstances: (a) payment processors (local payment, online payment, e-wallet, mobile banking, local payment, online payment operators, e-wallet, mobile banking, local payment, online payment) for transaction processing; (b) hosting providers and cloud services for data storage and backup; (c) government agencies or law enforcement if required by valid court order, subpoena, or legal process; (d) anti-fraud and anti-money-laundering services we contract with; and (e) our internal compliance and legal teams.
We do not sell, rent, or share your data with marketers, advertisers, or other third parties without your explicit consent. Our payment processors and hosting providers are contractually bound to protect your data and use it only for the purposes we specify.
- Personal data
- Name, address, ID, email, phone — collected at signup and retained for account duration.
- Payment data
- Payment method, amount, date — retained 7 years for regulatory compliance.
- Gameplay data
- Games played, stakes, results — retained during active account and analysed for platform improvement.
- Device data
- Device type, IP address, operating system — retained for fraud detection and performance monitoring.
Your Rights & Data Access
You have the right to access your personal data on kapaltoto at any time. Log in to your account and visit Account Settings → Data & Privacy to view all data we hold about you. You can also request a detailed data export — we will provide this as a downloadable file within fourteen days of your request.
You have the right to correct inaccurate data. If any information in your account (name, address, email) is incorrect, you can update it directly in Account Settings. If you need to change your ID or payment method, contact our support team — we will verify your identity before making changes.
You have the right to request deletion of your data, subject to legal limitations. We cannot delete data that is required by law (e.g. transaction records for 7 years), but we can delete optional data (e.g. profile picture, optional preferences). Request data deletion via the contact channels listed at the end of this page. We respond within twenty-eight calendar days and explain any data we cannot delete and why.
You also have the right to opt out of non-essential processing. For example, if we use your gameplay data to improve platform performance, you can request that we exclude your data from this analysis (though this does not affect your account function). We honor opt-out requests within thirty days.
Cookies & Tracking Technologies
kapaltoto uses cookies and similar technologies (session tokens, local storage) to maintain your login session, remember your preferences, and prevent fraud. These are necessary for the platform to function — you cannot use kapaltoto without accepting these technical cookies.
We do not use cookies for tracking your behavior across the internet or for targeted advertising. We do not share cookie data with ad networks or analytics providers outside our organisation. Our platform analytics are managed internally; we do not use third-party analytics services like Google Analytics.
You can control cookies in your browser settings. If you disable cookies, your kapaltoto account may not function correctly. We recommend enabling cookies for our domain (kapaltoto.app) while blocking them for other sites if you prefer stricter privacy control.
International Data Transfer & Security
Our servers on kapaltoto may be located in jurisdictions outside your own (e.g. data may be stored in Southeast Asia or other regions). By using kapaltoto, you consent to this international data transfer. We maintain the same security standards regardless of server location — all data is encrypted in transit and at rest.
We at kapaltoto use encryption (TLS 1.2 or higher) for all data in transit and AES-256 encryption for data at rest. We regularly audit our infrastructure for security vulnerabilities and maintain detailed access logs. Only authorised staff can access personal data, and they are bound by strict confidentiality agreements.
While we maintain strong security practices, no system is entirely risk-free. If we detect a data breach, we will notify affected users within 72 hours (or as soon as legally possible) and explain what data was exposed, what steps we are taking to remedy it, and what steps you can take to protect yourself.
Children & Minors on kapaltoto
kapaltoto is not intended for users under the legal age of majority in their jurisdiction. We do not knowingly collect data from minors. If we become aware that you are under the legal age of majority, we will suspend your account and delete your data (except as required by law).
If you are a parent or guardian who believes your child has created an account on kapaltoto, contact us immediately at [email protected]. We will investigate and take appropriate action.
Policy Changes & Contact
We may update this privacy policy from time to time. Changes will be posted on this page with an updated publication date. If a change materially affects how we use your data, we will notify you via email to your registered address. Continued use of kapaltoto after a change constitutes acceptance of the updated policy.
If you have questions about our data practices, or if you wish to exercise your rights (access, correction, deletion, opt-out), contact our Data Protection Officer:
Email: [email protected]
In-app support: Access the Help menu in your account and select "Privacy & Data"
Response time: 14 calendar days for data requests; 24 hours for general privacy questions
Operating hours: 09:00–21:00 Jakarta time, seven days a week
We at kapaltoto are committed to protecting your privacy and complying with applicable data protection laws. If you believe we have mishandled your data, you may lodge a complaint with your local data protection authority. We also invite you to raise any concerns directly with us first — we are motivated to resolve privacy issues quickly.
This privacy policy is effective from the date of last publication shown on this page. kapaltoto reserves the right to update this policy at any time. Thank you for trusting us with your data.