dutoto Privacy Policy

1. Introduction and Scope

dutoto ("we", "us", "our") is committed to protecting the privacy and security of personal information provided by our users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use the dutoto online gaming platform at dutoto.cam, including our website, mobile applications, and related services (collectively, the "Services").

This Privacy Policy applies to all Indonesian residents who register for, access, or use dutoto Services. By creating an account or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with these practices, you must not use dutoto Services.

dutoto processes personal data in accordance with applicable Indonesian data protection laws and international privacy standards. We take our responsibilities seriously and implement appropriate technical and organizational measures to safeguard your information.

2. Information We Collect

dutoto collects several categories of personal information necessary to provide our Services, comply with legal obligations, and improve user experience. The types of data we collect include:

2.1 Information You Provide Directly

When you register for a dutoto account, you provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, Indonesian national identification number (NIK from KTP), and passport details (if applicable).
• Contact Information: Email address, Indonesian mobile phone number, residential address, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment card details (when applicable).
• Verification Documents: Photographs or scans of your Indonesian national identity card (KTP), passport, proof of address documents (utility bills, bank statements), and selfie photographs for identity verification.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers.
• Communication Content: Messages you send to customer support, feedback surveys, complaints, or any other communications with dutoto.

2.2 Information Collected Automatically

When you use dutoto Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile carrier information.
• Connection Data: IP address, internet service provider (ISP), connection type, and approximate geographic location (city/province level based on IP address).
• Usage Data: Pages visited, features used, games played, bets placed, deposit and withdrawal history, session duration, click patterns, and timestamps of activities.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user preferences, authenticate sessions, prevent fraud, and analyze platform performance. See Section 8 for detailed cookie information.

2.3 Information from Third Parties

dutoto may receive information about you from third-party sources:

• Payment Providers: When you make deposits or withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallets (OVO, DANA, GoPay), we receive transaction confirmation data.
• Identity Verification Services: We use third-party KYC (Know Your Customer) verification services to authenticate your identity documents and detect fraudulent registrations.
• Fraud Prevention Services: We work with specialized security providers to detect and prevent fraud, money laundering, and account abuse.

3. How We Use Your Information

dutoto uses your personal data for the following purposes, all of which are necessary for providing our Services or comply with legal obligations:

3.1 Service Provision and Account Management

• Creating and managing your dutoto account.
• Processing deposits, withdrawals, and internal fund transfers.
• Enabling you to place bets on sports events, casino games, lottery draws, and other gaming products.
• Calculating and paying out winnings.
• Processing bonus claims and applying wagering requirements.
• Providing customer support and responding to your inquiries.
• Managing VIP tier status and loyalty rewards.

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to ensure you are at least 21 years old and eligible to use dutoto Services.
• Complying with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) regulations.
• Detecting and preventing fraud, cheating, collusion, and bonus abuse.
• Investigating suspected illegal activities and cooperating with law enforcement when legally required.
• Maintaining records for audit and regulatory inspection purposes.
• Enforcing our Terms & Conditions and other policies.

3.3 Responsible Gaming and Player Protection

• Monitoring gaming behavior to identify potential problem gambling patterns.
• Implementing and enforcing deposit limits, time-outs, and self-exclusion requests.
• Providing responsible gaming tools and resources.
• Preventing underage gambling through age verification systems.

3.4 Platform Improvement and Personalization

• Analyzing usage patterns to improve website functionality, game selection, and user interface.
• Personalizing your experience by showing relevant promotions, game recommendations, and content.
• Conducting market research and gathering feedback to enhance our Services.
• Testing new features and optimizing platform performance.

3.5 Marketing and Communications

• Sending transactional emails (account confirmations, withdrawal notifications, password resets).
• Notifying you about new bonuses, promotions, and special offers (with your consent).
• Sending important updates about dutoto Services, policy changes, or scheduled maintenance.
• Conducting satisfaction surveys and requesting feedback.

You may opt out of promotional communications at any time by clicking the "unsubscribe" link in any marketing email or adjusting your account preferences. Transactional and legal communications cannot be opted out of while your account remains active.

4. Legal Basis for Processing

dutoto processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing transactions, managing your account).
• Legal Obligation: Processing is required to comply with Indonesian laws and international regulations (KYC/AML requirements, age verification, tax reporting).
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, platform security, service improvement, analytics) while respecting your privacy rights.
• Consent: For marketing communications and certain optional features, we process data based on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

dutoto does not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) process your deposits and withdrawals.
• Game Providers: Companies like Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and PG Soft receive minimal data necessary to deliver games (user ID, bet amounts, game results).
• Identity Verification Services: Third-party KYC providers verify your identity documents and detect fraud.
• Customer Support Tools: Live chat and ticketing systems may process your communication data to deliver support services.
• Analytics Providers: We use analytics services to understand platform usage and improve user experience (data is anonymized wherever possible).

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal Requirements

dutoto may disclose your information when legally required:

• To comply with court orders, subpoenas, or other legal processes.
• To respond to lawful requests from government authorities or law enforcement agencies.
• To report suspected criminal activity, fraud, or money laundering.
• To enforce our Terms & Conditions and protect dutoto's legal rights.
• To protect the safety and security of our users and the public.

5.3 Business Transfers

If dutoto is involved in a merger, acquisition, sale of assets, or bankruptcy proceeding, your personal information may be transferred to the successor entity. You will be notified of any such change via email and prominent notice on our website.

6. Data Retention

dutoto retains your personal data for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Data is retained for the duration of your account's active status.
• Inactive Accounts: If you do not log in for 12 consecutive months, your account may be flagged as inactive. We retain inactive account data for 5 years from the last login.
• Closed Accounts: After account closure, we retain transaction records and identity verification documents for 7 years to comply with financial regulations and AML laws.
• Marketing Communications: If you unsubscribe from marketing emails, we retain your email address on a suppression list to ensure we don't contact you again.

After applicable retention periods expire, we securely delete or anonymize your personal data. Some aggregated, anonymized data may be retained indefinitely for statistical and analytical purposes.

7. Data Security Measures

dutoto implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Passwords are hashed using industry-standard cryptographic algorithms.
• Secure Infrastructure: Our servers are hosted in secure data centers with 24/7 physical security, redundant power supplies, and fire suppression systems.
• Firewalls and Intrusion Detection: Multi-layer firewalls and intrusion detection systems monitor and block unauthorized access attempts.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. All access is logged and audited.
• Employee Training: dutoto staff undergo regular data protection training and are bound by strict confidentiality agreements.
• Regular Audits: Independent security firms conduct regular penetration testing and vulnerability assessments.
• Incident Response: We maintain a comprehensive data breach response plan. In the event of a breach affecting your data, we will notify you and relevant authorities as required by law.

While we implement industry-leading security measures, no system is 100% secure. You also play a crucial role in protecting your account by choosing strong passwords, keeping login credentials confidential, and logging out after each session.

8. Cookies and Tracking Technologies

dutoto uses cookies, web beacons, and similar technologies to enhance your experience and analyze platform usage:

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences, authenticate your session, and track your activity.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can control cookie settings through your browser preferences. However, disabling essential cookies may prevent you from accessing certain dutoto features. Most browsers allow you to:

• View what cookies are stored and delete them individually.
• Block third-party cookies while allowing first-party cookies.
• Block all cookies (this may impair website functionality).
• Delete all cookies when you close your browser.

9. Your Privacy Rights

dutoto respects your privacy rights and provides mechanisms to exercise them:

9.1 Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

9.2 Right to Correction

If any personal information we hold is inaccurate or incomplete, you may request corrections. You can update most information directly from your account dashboard. For identity documents, contact customer support.

9.3 Right to Deletion

You may request deletion of your personal data ("right to be forgotten"), subject to legal exceptions. We must retain certain data for 7 years to comply with AML regulations and financial record-keeping requirements.

9.4 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider. We will provide data in CSV or JSON format upon request.

9.5 Right to Object

You may object to data processing based on legitimate interests (e.g., marketing analytics). You can opt out of promotional communications at any time.

9.6 Right to Restrict Processing

You may request that we temporarily restrict processing of your data in certain circumstances (e.g., while we verify data accuracy).

9.7 Exercising Your Rights

To exercise any privacy rights, contact our Data Protection Officer at [email protected] with "Privacy Request" in the subject line. Provide your full name, account email, and specific request. We will respond within 30 days.

10. International Data Transfers

dutoto primarily operates within Indonesia and stores data on servers located in secure facilities within the Asia-Pacific region. However, some service providers (payment processors, game developers, analytics tools) may be located outside Indonesia, potentially resulting in international data transfers.

When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities.
• Ensuring recipient countries have adequate data protection laws.
• Obtaining your explicit consent where required.

11. Children's Privacy

dutoto Services are strictly for individuals aged 21 and above. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that we have inadvertently collected data from someone underage, we will immediately delete that information and permanently close the account.

Parents or guardians who believe their child has provided personal information to dutoto should contact us immediately at [email protected].

12. Changes to This Privacy Policy

dutoto reserves the right to update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you via email to your registered email address.
• Display a prominent notice on the dutoto website for 30 days.

Your continued use of dutoto Services after such notification constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you must stop using our Services and may request account closure.

13. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or dutoto's data protection practices, please contact us:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through the dutoto website
• WhatsApp: +62 812 3456 7890 (Daily 08:00 - 02:00 WIB)

Our dedicated Data Protection Officer will review your inquiry and respond within 30 days. For urgent privacy concerns, mark your message as "Urgent Privacy Matter" to receive priority handling.