inatoto Platform Privacy Notice

This page describes what we collect when you use inatoto and how we keep that data protected. We take your privacy seriously and operate under clear principles: we collect only the information necessary to verify your identity, process your payments, and comply with local law. We do not sell your data to third parties, and we do not use your personal information for marketing without your consent.

When you create an account on inatoto, you provide us with your email address, phone number, and identity documents as part of our Know-Your-Customer (KYC) verification process. We also collect information about your transactions—deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers through mobile banking, local payment, online payment, and e-wallet—and your gameplay activity. This information helps us detect fraud, prevent money laundering, and ensure compliance with applicable law in your jurisdiction.

Our servers may sit outside your jurisdiction, but we apply the same data-protection standards regardless of where your data is stored. We use encryption, access controls, and regular security audits to protect your information. If you have questions about how we handle your data, you can contact our support team at any time.

What data we collect on inatoto

We collect your email address and phone number when you register an account. We use these to verify your identity and send you account notifications, such as login alerts or withdrawal confirmations. We also collect your full name, date of birth, and identity document number (such as your national ID or passport) as part of our KYC verification. This information is mandatory to comply with anti-money-laundering regulations and to prevent fraud.

When you deposit funds into your inatoto account, we record the payment method you used, the amount, and the timestamp. We do not store your full payment card details or e-wallet credentials; instead, we store only a reference token that allows us to process future transactions. We also collect information about your gameplay—which games you play, how much you stake, and when you play—to understand user behaviour and improve our platform.

How we use your data on inatoto

We use your data to verify your identity, process your deposits and withdrawals, and comply with local law. Our KYC verification process ensures that we know who you are and that your funds come from a legitimate source. We also use your data to detect suspicious activity—for example, if we notice multiple login attempts from different countries in a short time, we may ask you to verify your identity again.

We analyse gameplay data to improve our platform and understand which games are most popular. We may also use your data to send you account notifications, such as reminders about unclaimed winnings or updates to our terms. We do not use your data for marketing purposes unless you have explicitly opted in. If you live in Jakarta, Surabaya, Bandung, Medan, Semarang, or Yogyakarta and have opted in to marketing communications, we may send you information about new games or promotions relevant to your region.

Third-party processors and data sharing

We share your data with third-party payment processors to handle your deposits and withdrawals. When you use DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers through mobile banking, local payment, online payment, and e-wallet, those payment providers receive your transaction information directly. We do not control how those providers use your data, but we require them to maintain the same level of confidentiality as we do.

We may also share your data with law enforcement or regulatory authorities if we are required to do so by law. For example, if we receive a court order or a request from a financial regulator, we will disclose the information necessary to comply. We do not share your data with marketing companies, data brokers, or any other third parties except as described in this notice.

Payment processors

We share transaction data with mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment to process your deposits and withdrawals.

Law enforcement

We may disclose your data to authorities if required by law or court order.

Service providers

We use third-party vendors for hosting, analytics, and customer support, all bound by confidentiality agreements.

Your rights and data access on inatoto

You have the right to access, correct, or delete your personal data. You can log into your inatoto account and update your email, phone number, or other account details at any time. If you want to request a copy of all the data we hold about you, or if you want to request deletion of your account, contact our support team. We will respond to your request within 30 days.

You also have the right to object to certain uses of your data. For example, if you do not want to receive marketing communications, you can opt out in your account settings. If you believe we have misused your data or violated your privacy rights, you can file a complaint with your local data-protection authority.

Cookies and tracking on inatoto

We use cookies to remember your login session and to track your activity on our platform. Cookies are small files stored on your device that allow us to recognize you when you return to inatoto. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a longer period). You can disable cookies in your browser settings, but this may affect your ability to use inatoto.

We also use analytics tools to understand how users interact with our platform. These tools collect information about which pages you visit, how long you stay on each page, and which games you play. This information helps us improve our platform and identify technical issues. We do not use this data to identify you personally; it is aggregated and anonymised.

Our commitment to data security

We protect your data using industry-standard encryption and access controls. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). We store your data on secure servers with firewalls and intrusion-detection systems. We also conduct regular security audits and penetration tests to identify and fix vulnerabilities.

Our staff can access your data only if they have a legitimate business reason to do so. We require all employees to sign confidentiality agreements and to complete data-protection training. If we discover a data breach, we will notify you within 72 hours and take steps to mitigate the damage.

Changes to this privacy notice

We may update this privacy notice from time to time to reflect changes in our practices or in applicable law. If we make material changes, we will notify you by email or by posting a notice on our platform. Your continued use of inatoto after such changes constitutes your acceptance of the updated notice.

Contact us about your privacy

If you have questions about how we handle your data, or if you want to exercise your rights under this privacy notice, contact our support team. We are available to help and will respond to your inquiry within 30 days. Our services are available only where local law permits; users are responsible for verifying that access and use comply with their own jurisdiction's law.