sasatoto Privacy Policy

This page describes what we collect when you use sasatoto and how we keep that data protected. We at sasatoto take your privacy seriously. When you register an account, deposit funds, play slot games like Aviator or Sweet Bonanza, access our live-dealer tables, or browse sportsbook markets covering Liga 1 and Piala AFF, we collect certain information to provide our service, comply with legal requirements, and improve your experience.

Our privacy commitments centre on transparency: we tell you exactly what data we collect, who we share it with, and how long we keep it. We do not sell your personal information to third parties. We use your data only to operate sasatoto, process your payments, verify your identity, and respond to your support requests. Your data is encrypted in transit and at rest on secure servers.

If you have questions about how we handle your information, contact our privacy team through the Help section in your account. We respond to data requests within 14 days of receipt. You have the right to request a copy of your data, correct inaccurate information, or request account closure and data deletion.

What Data We Collect at sasatoto

We collect your information in three main categories: account details, payment information, and behavioural data. When you register on sasatoto, we ask for your email address, phone number, full legal name, date of birth, and residential address. We require a government-issued ID (passport, national identity card, or driver's licence) and proof of address (utility bill, bank statement, or rent agreement) to verify your identity and comply with anti-money-laundering regulations.

We collect payment information when you deposit or withdraw funds. We do not store your full banking credentials or credit card numbers on our servers. When you choose DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), you are directed to your payment provider's secure interface. We receive only a confirmation of the transaction and the amount transferred; your banking details remain with your payment provider.

We automatically collect behavioural data: your login history, IP address, device type (Android phone, iOS device, desktop), browser type, and pages you visit on sasatoto. We use this data to detect fraudulent activity, prevent account hijacking, and understand how users navigate our platform. We also log your game activity—which slots you play, live-dealer games you join, sportsbook bets you place—to calculate your wagering history and ensure fair play.

We do not collect data unnecessarily

We only ask for information we need to provide our service and meet legal obligations. We do not track your location, access your contacts, or monitor your activity outside sasatoto.

How We Use Your Data on sasatoto

We use your account details and identity documents to verify your eligibility for our platform and comply with Know-Your-Customer (KYC) regulations. We are legally required to confirm your identity and ensure you are not on any sanctions list before allowing access to sasatoto. If your address cannot be verified, we may request additional documentation or suspend your account temporarily.

Payment information is used solely to process your deposits and withdrawals. We use your phone number and email to send you confirmation messages when you deposit funds via mobile banking, local payment, online payment, e-wallet, or bank transfer. We also use these contact details to notify you of account security alerts, support responses, and promotional messages (which you can opt out of at any time).

Behavioural data helps us prevent fraud, detect unusual account activity, and comply with our internal risk management policies. If we detect multiple login attempts from different countries in a short timeframe, or a sudden large withdrawal following small deposits, we may freeze your account temporarily and request verification. This protects both you and sasatoto from unauthorized access.

Account verification
We use your ID and proof of address to comply with anti-money-laundering rules and prevent fraud.
Payment processing
We share minimal payment details with your chosen payment provider to process deposits and withdrawals.
Fraud prevention
We analyse login patterns, IP addresses, and transaction history to detect suspicious activity.
Support and communication
We use your email and phone to respond to your account inquiries and notify you of important updates.

Third Parties and Data Sharing

We do not sell or rent your personal information to third parties. However, we share data with select service providers who help us operate sasatoto. Your payment data is shared with payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment partners) to complete transactions. Your identity documents may be shared with our KYC provider to verify your information. Our hosting provider stores our servers and databases; your data sits on servers that may be located outside Indonesia but are protected by encryption and contractual agreements.

We may share data with law enforcement or regulatory authorities if required by law—for example, if we receive a court order or a request from anti-money-laundering agencies. We will not voluntarily disclose your data to government entities unless legally compelled. If we receive such a request, we will notify you unless prohibited by law.

Data Retention and Deletion

We keep your account data for as long as your sasatoto account is active. Once you close your account, we retain certain information for legal and compliance purposes: transaction records are kept for 5 years (to comply with financial regulations), and identity documents are archived for 2 years. Personal contact details (email, phone) may be retained longer if we are investigating a dispute or potential fraud.

You have the right to request deletion of your personal data beyond what we are legally required to keep. To exercise this right, contact our privacy team via email provided in the Help section. We will review your request and delete non-essential data within 30 days, provided there are no outstanding disputes or legal holds on your account.

Cookies and Tracking Technology

We use cookies to remember your login session and provide a smooth browsing experience on sasatoto. Cookies are small text files stored on your device. When you access sasatoto via Android, iOS, or desktop browser, we set a session cookie so you do not need to log in on every page. We also use analytics cookies to understand which games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways) are most popular and how users navigate our sportsbook and live-dealer sections.

You can control cookies through your browser settings. Disabling cookies may affect your ability to use sasatoto; for example, you may be logged out more frequently. We do not use third-party tracking scripts (such as Facebook Pixel or Google Analytics) that would identify you across the internet. Analytics data we collect is anonymized and used only to improve sasatoto's performance and user experience.

Your Rights on sasatoto

You have several rights regarding your data on sasatoto. You can request a copy of all information we hold about you; we will provide this within 14 days in a standard electronic format. You can request correction of inaccurate data—for example, if your address changed. You can request deletion of data we no longer need to operate your account, subject to legal retention requirements. You can withdraw consent to receive marketing emails at any time by clicking the unsubscribe link in our messages.

If you believe we have mishandled your data, you can lodge a complaint with our privacy team or, if applicable, with your local data protection authority. We are committed to addressing legitimate privacy concerns within 14 days of receipt.

Data Security and Encryption

We protect your data using industry-standard encryption: all communication between your device and sasatoto's servers is encrypted using HTTPS and TLS 1.3. Your identity documents and payment information are encrypted at rest on our servers. We do not store unencrypted passwords; instead, passwords are hashed using a secure algorithm. Our servers are protected by firewalls and intrusion-detection systems.

Despite these protections, no system is completely secure. We cannot guarantee absolute protection against data breaches. If we discover a breach that may affect your sasatoto account, we will notify you via email within 72 hours and advise you to change your password. We will also inform you of steps you can take to protect your account.

Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our data practices or applicable laws. We will notify you of material changes via email or a prominent notice on sasatoto. Continued use of your account after such notice constitutes acceptance of the updated policy. If you do not agree with any change, you may close your account and request deletion of your data according to our retention policy.

For privacy inquiries, contact our data protection team through the Help menu in your account or via email. We are available to answer questions about how we collect, use, protect, and delete your data. Requests are handled during standard business hours and responses are sent within 14 days.