oppototo Platform Privacy Notice

This page describes what data we collect when you use oppototo and how we keep that data protected. We collect personal information—such as your email, phone number, and payment details—only to provide our service, process withdrawals, and verify your identity. We do not sell your data to third parties. We store your information on secure servers and follow industry-standard encryption practices.

oppototo operates in jurisdictions where local law permits online gaming. Your personal data is subject to the privacy laws of your jurisdiction and our own data-protection practices. We may transfer your data outside your country for processing (for example, to payment processors or backup storage facilities). We disclose these practices transparently so you understand how your information flows through our platform.

This notice covers what we collect, how we use it, who we share it with, and what rights you have over your data.

Data We Collect on oppototo

We collect personal information in several ways. When you create an oppototo account, you provide your email address, password, and phone number. We also collect your name, date of birth, and ID document number during identity verification (required before your first withdrawal). Your payment details—such as your bank account or e-wallet identifier—are collected when you fund your account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer to mobile banking, local payment, online payment, or e-wallet.

We also collect behavioral data. When you use oppototo, we log your gameplay history (which games you played, wager amounts, outcomes), sportsbook activity (which leagues or matches you viewed), and account changes (login times, password resets, address updates). We collect this data via cookies, server logs, and our app analytics. We do not collect video or audio from your device; we only track your interactions with our platform.

Account data: Email, phone, name, date of birth, ID document, address. Collected at registration and verification.
Payment data: Bank account, e-wallet ID, transaction history. Collected when you deposit or withdraw.
Gameplay data: Wager amounts, game outcomes, session history, balance changes. Collected in real time during play.
Device and location data: IP address, device type, browser version, general location (country/city level). Collected via server logs and analytics.
Cookies: We use cookies to remember your login, preferences, and to prevent fraud. You can disable cookies in your browser settings.

How oppototo Uses Your Data

We use your personal data for several purposes. First, we use it to provide our service: to maintain your account, process your wagers and withdrawals, and settle your bets. Second, we use it to verify your identity and comply with anti-money-laundering laws. Third, we use gameplay data to detect fraud, prevent bonus abuse, and monitor for problem gambling patterns (we do not enforce account restrictions; we only detect and report patterns).

We also use your data to improve oppototo. We analyze gameplay patterns to understand which games and sports markets are popular. We use payment data to optimize our payment processor integrations so deposits and withdrawals remain fast. We may contact you via email or SMS to inform you of new features, tournament schedules (such as Liga 1, Piala Indonesia, Piala AFF updates), or promotional news—you can opt out of marketing emails at any time.

Fraud prevention: We use your data to detect suspicious account activity, such as multiple failed login attempts or unusual withdrawal patterns. If we detect fraud risk, we may freeze your account and contact you to verify your identity.

Third-Party Data Processors

oppototo shares your data with third parties only as necessary to operate our platform. Our payment processors (the e-wallet and bank partners that handle mobile banking, local payment, online payment, e-wallet, mobile banking, and bank transfers) receive your payment details and transaction history to complete deposits and withdrawals. These processors are bound by confidentiality agreements.

We also use cloud hosting providers to store your data. Your account information, gameplay history, and personal details are backed up on secure servers that may be located outside Indonesia (for example, in Singapore or other Southeast Asian data centers). These providers comply with our data-protection requirements and do not access your data for their own purposes.

We do not sell your personal data to marketing companies, data brokers, or any other third parties. We do not share your data with other gaming platforms or betting sites. We share data with law enforcement only if required by court order or applicable law.

How We Protect Your Data on oppototo

We use industry-standard encryption (SSL/TLS) to protect data in transit. All communication between your device and our servers is encrypted. Your payment details are encrypted at rest on our servers and are not stored in plain text. We use firewalls, intrusion-detection systems, and regular security audits to protect against unauthorized access.

We limit employee access to personal data. Only staff members who need your data to provide service—such as support agents handling your withdrawal request or fraud investigators—have access. We require non-disclosure agreements from all employees and contractors.

How Long We Keep Your Data

We retain your account data for as long as you use oppototo plus a reasonable period after account closure (typically two to three years) to comply with anti-money-laundering regulations. We retain gameplay data and transaction history for a minimum of seven years to support audit requirements and dispute resolution. We may retain certain anonymized data indefinitely for analytics purposes (this data cannot be linked back to you).

If you request account deletion, we delete your non-essential personal data (such as marketing preferences) immediately. We retain essential data (account history, transactions) as required by law and for dispute resolution.

Your Rights Over Your Data

You have several rights over your personal data on oppototo. You can request access to all data we hold about you by contacting our support team. You can request correction of inaccurate data (such as an outdated address). You can request deletion of non-essential data once you close your account. You can object to marketing communications by clicking "unsubscribe" in any email or SMS we send.

In some jurisdictions, you have the right to data portability—to receive a copy of your data in a structured format. You also have the right to lodge a complaint with your local data-protection authority if you believe we have mishandled your data.

1

Request access to your dataData access

Email our support team at the address below. We provide a copy of your data within 30 days.
2

Request correction or deletionData correction

Contact support to update inaccurate information or request deletion of non-essential data.
3

Opt out of marketingMarketing preference

Click "unsubscribe" in any marketing email or SMS. You will no longer receive promotional messages.
4

Lodge a complaintData authority

If we mishandle your data, you can file a complaint with your local data-protection authority or regulator.

Cookies and Analytics on oppototo

We use cookies to enhance your experience on oppototo. Session cookies remember your login and preferences during your visit. Persistent cookies (stored on your device for longer periods) help us recognize you on return visits and prevent fraud. Analytics cookies track which pages you visit and which games you play so we understand user behavior.

You can disable cookies in your browser settings, but doing so may limit platform functionality (for example, you may need to log in repeatedly). We do not use third-party tracking cookies from external advertising networks. We do not share cookie data with advertisers or external analytics services.

Jurisdictional Notes and Data Transfers

oppototo operates where local law permits. If you are in Jakarta, Surabaya, Bandung, Medan, or Semarang, or any other jurisdiction where our service is available, your personal data is subject to both your local privacy laws and our privacy practices. Your data may be transferred to other countries for processing, storage, or analysis—especially to countries where our payment processors, cloud hosts, and analytics services are based.

By using oppototo, you consent to the transfer and processing of your data outside your country if necessary to provide our service. We ensure these transfers comply with industry standards and that recipients are bound by confidentiality.

Contact Us About Privacy on oppototo

If you have questions about how we handle your data, or if you wish to exercise your rights (access, correction, deletion, opt-out), contact our support team in English via in-app chat, email, or the contact form on oppototo.id. We respond to privacy requests within 30 days. We also accept requests from your local data-protection authority if you file a complaint.

Policy updates: We may update this privacy notice at any time. We will notify you of material changes by email or by posting an updated notice on oppototo. Continued use of the platform after an update constitutes acceptance of the new terms.

Summary: Your Privacy on oppototo

We at oppototo collect personal data only to operate our service, process payments, and verify your identity. We do not sell your data or share it with unrelated third parties. We encrypt your data in transit and at rest. We retain your data only as long as necessary for legal compliance and dispute resolution.

You have rights over your data: you can request access, correction, and deletion. You can opt out of marketing. You can lodge complaints with data-protection authorities. We are transparent about how we use cookies, transfer data internationally, and partner with third-party processors.

oppototo's services are available only where local law permits. Your use of our platform is subject to your jurisdiction's privacy laws as well as our own practices. If you have privacy concerns or wish to exercise your data rights, contact our support team. We respond to requests within 30 days.