sontoto Platform Privacy Notice
This page describes what we collect when you use sontoto and how we keep that data protected. We gather personal information—your name, date of birth, phone number, email, and payment details—to verify your account, process deposits and withdrawals, and comply with anti-money-laundering regulations. We also collect game activity logs, IP addresses, and device information to operate our platform securely and detect fraud.
We do not sell your personal data to third parties. We share data only with licensed payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), regulatory authorities, and necessary service providers. Your data may be stored on servers located outside your jurisdiction; all transfers are encrypted. You have the right to access, correct, or request deletion of your personal data, subject to legal retention obligations.
This privacy notice applies to all sontoto account holders. It outlines your rights and our responsibilities regarding data handling across Jakarta, Surabaya, Bandung, Medan, Semarang, and other supported jurisdictions.
What Data We Collect on sontoto
We collect personal data in several categories. Account information includes your full legal name, date of birth, national ID number, phone number, and email address. Payment information includes the payment method you provide (e.g., your DANA wallet ID, e-wallet account, or bank account number). We do not store full credit card numbers; payment gateways handle this. Gaming activity includes all bets placed, games played, withdrawals requested, and deposits made—timestamped and linked to your account.
Technical data includes your IP address, device type (mobile, desktop), browser type, and approximate geographic location. We use this to detect fraud and suspicious access patterns. Cookies and similar tracking technologies help us remember your login preferences and analyze how you navigate sontoto. You can control cookie settings in your browser; disabling them may limit platform functionality.
We do not deliberately collect sensitive personal data (health, religion, political views). If such information is voluntarily provided in support communications, we treat it as confidential and do not use it for profiling or marketing.
How We Use Your Data on sontoto
We use your personal data for five primary purposes. Account verification ensures you are who you claim to be and are eligible to use sontoto in your jurisdiction. Payment processing requires your details to accept deposits via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or bank transfer and to send withdrawals. Regulatory compliance—anti-money-laundering (AML) and know-your-customer (KYC) requirements—is mandatory in our operating jurisdictions.
Fraud detection uses your IP, device, and transaction history to identify abnormal activity. For example, if someone attempts to log into your sontoto account from an unusual location immediately after a withdrawal, we flag and investigate. Customer support uses your data to resolve issues, answer questions about game rules, and respond to withdrawal inquiries. We do not use your data for marketing or profiling without explicit consent.
Third-Party Processors and Data Sharing
We do not sell your data to third parties. We share data only with processors essential to operating sontoto. Payment gateways (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your payment information directly to process transactions. Regulatory authorities in our operating jurisdictions may request user data to verify compliance; we comply with legal requests. Our live-dealer studio providers receive minimal data (account ID, session duration) to deliver broadcasts; they do not receive your personal identification.
Service providers—hosting companies, analytics platforms, email services—may see your data as part of normal operations, but they are contractually required to protect it and use it only for sontoto's benefit. We audit these processors quarterly to ensure they meet our security standards.
Data Security and Encryption on sontoto
We protect your data with industry-standard encryption (TLS 1.2 or higher for data in transit). Your password is hashed—meaning we store a mathematical derivative, not the password itself—so even if our servers were compromised, your password would not be readable. Payment information flows through PCI-DSS compliant gateways, which are audited annually. Your sontoto account is protected by two-factor authentication (2FA), requiring a password plus a one-time code sent to your phone or email.
Our data centers are physically secured and monitored 24/7. Access to servers is restricted to authorized personnel. We conduct regular security audits and penetration testing. If we discover a data breach, we notify affected users within the timeframe required by law and provide guidance on protective steps.
Key takeaways
- We collect personal data only for account verification, payment processing, and regulatory compliance
- We do not sell your data; sharing is limited to licensed payment processors and legal authorities
- Data is encrypted in transit and at rest; passwords are hashed, not stored in plain text
- Two-factor authentication protects your sontoto account from unauthorized access
- You have the right to access, correct, or request deletion of your personal data
Your Rights and Data Requests on sontoto
You have the right to access your personal data. Log into your sontoto account and view your profile information, account history, and transaction records. If you want a complete copy of all data we hold about you, contact our support team in writing with your user ID and a request for a data access report. We will provide this within 30 days, in a portable format (e.g., CSV or PDF).
You have the right to correct inaccurate data. If your phone number or address has changed, update it in your sontoto account settings immediately; this ensures withdrawal confirmations reach the right number. If you cannot correct data yourself, request correction through support. You have the right to request deletion of your account and associated data, subject to legal retention obligations. For example, we must retain transaction records for 5 years for regulatory purposes. After the retention period, we will delete or anonymize your data upon request.
To exercise these rights, contact us at the email address provided in our Terms & Conditions or through the support form on sontoto. Include your user ID and a clear description of your request. We will respond within 30 days; if we need more information to verify your identity, we will contact you.
Cookies and Tracking Technologies
We use cookies to remember your login preferences, language choice, and account settings. These are essential for sontoto to function. We also use analytics cookies to understand how users navigate the platform—which pages are visited most, where users drop off, and which games are popular. This helps us improve our platform. Third-party analytics services (such as Google Analytics) may place cookies on your device; you can disable these in your browser settings without losing access to sontoto.
We do not use cookies for behavioral advertising. We do not sell browsing data to advertisers. If you clear your browser cookies, you will be logged out of sontoto and will need to log in again. Most browsers allow you to control cookie settings; consult your browser's help menu for instructions.
International Data Transfers on sontoto
Your personal data may be stored on servers located outside your country of residence. For example, our hosting infrastructure may include facilities in Singapore, the Philippines, or other regions. All international transfers are encrypted using TLS 1.2 or higher. We comply with data-protection laws in your jurisdiction; if your region prohibits certain transfers, we will not perform them.
When you provide data to sontoto, you acknowledge that we may transfer it across borders as described above. If you object to international transfer, you may delete your account; we will delete or anonymize your data after the retention period ends.
Contact Us About Privacy on sontoto
If you have questions about our privacy practices, how we use your data, or how to exercise your rights, contact our support team. We are available 24/7 via email, live chat, and in-app messaging. Specify your inquiry—for example, "data access request" or "privacy concern"—and include your sontoto user ID. We will respond within 30 days.
This privacy notice is effective as of the date published on sontoto. We may update it to reflect changes in our practices or applicable law. We will notify you of material changes by email or by displaying a notice on the platform. Your continued use of sontoto after any update indicates your acceptance of the revised notice.
We at sontoto take your privacy seriously. We collect only the minimum data needed to operate our platform, process payments, and comply with law. We encrypt and protect that data rigorously. We do not sell it. We respect your rights to access, correct, and delete your information. If you have concerns, contact support immediately.