sukutoto Platform Privacy Notice

Digital payment adoption across Indonesia has grown significantly over the past three years, with DANA, e-wallet, mobile banking, and other local wallets now used by millions. As a platform that accepts these payment methods, sukutoto collects and stores payment-related data to process your transactions securely. This page describes what we collect when you use sukutoto and how we keep that data protected.

We at sukutoto take data privacy seriously. When you register an account, deposit funds, or place markets on our platform, you provide us with personal information. We collect this data only to operate sukutoto, verify your identity, prevent fraud, and process your payments. We do not sell or rent your data to third parties. Our policy outlines what we collect, how long we retain it, and what rights you have over your information on sukutoto.

sukutoto operates under jurisdiction-restricted access, meaning our servers may hold your data outside your immediate region for redundancy and legal compliance. If you have questions about our privacy practices, you can contact our team through in-app messaging or email. We respond to data requests within 14 days.

Details

What we collect on sukutoto

We collect your email address and phone number when you register a sukutoto account. During identity verification, we also request your national ID number, date of birth, and full name. This information is mandatory to comply with local anti-money-laundering requirements and to confirm that you are eligible to use sukutoto in your jurisdiction (e.g., based in Jakarta, Surabaya, Bandung, Medan, or Semarang where our service is available).

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, sukutoto receives transaction confirmations that include the amount, timestamp, and your account reference. We do not store your bank account number or payment card details; those are handled directly by your payment provider using encrypted channels. Our servers record only that a successful deposit occurred.

sukutoto tracks your gameplay activity—which games you access, your bet sizes, outcomes, and withdrawal requests. We retain this data to help you review your account history, dispute claims, and for regulatory compliance. We also collect your device information (phone model, OS version, browser type) to diagnose technical issues and optimize sukutoto's performance on different devices.

How we use your data on sukutoto

We use your email and phone to send you account notifications—login alerts, deposit confirmations, and withdrawal status updates. We may also send you service updates if sukutoto undergoes maintenance. We do not send promotional emails without your opt-in; you can manage your notification preferences in your sukutoto account settings.

Your ID number and name are used exclusively for identity verification and to comply with anti-money-laundering (AML) rules in our jurisdiction. sukutoto verifies this information against official records and then segregates it from your gameplay activity. Your identity data is stored separately from your betting history to limit access.

sukutoto uses your gameplay history to calculate your account balance, generate your activity statements, and investigate disputes. If you claim that a bet outcome was incorrect, our support team references your history to verify the claim. We also use aggregated (anonymized) gameplay data to detect fraud patterns and improve our platform—for example, identifying unusual withdrawal requests that may indicate account compromise.

Data storage and encryption on sukutoto

We at sukutoto encrypt your data in transit using TLS 1.3. Your passwords are hashed using bcrypt with unique salts, so sukutoto staff cannot read them. Your account balance and betting history are stored in encrypted databases accessible only to authorized systems. Our servers are located in secure facilities with redundant backups.

Data retention on sukutoto follows these rules: we keep your account information (email, phone, ID, name) for as long as your account is active, plus 7 years after closure for regulatory record-keeping. Your gameplay history is retained for 5 years. Payment confirmations are archived for 7 years to comply with tax and AML regulations. Temporary data like session cookies are deleted automatically after 30 days of inactivity.

Third parties and data processors on sukutoto

We share your data only with the payment providers you select—e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and mobile banking. They process your deposit and withdrawal requests but do not have access to your sukutoto betting history. They see only the transaction amount and your request.

We may also disclose data to law enforcement or regulatory bodies if required by local law. sukutoto does not voluntarily share data with third parties for advertising or analytics. If we ever partner with a third-party service provider (e.g., a backup provider), we will update this page and notify you via email.

Cookies and tracking on sukutoto

sukutoto uses session cookies to keep you logged in across pages. These cookies are encrypted and expire after 30 days of inactivity. We use non-tracking analytics (aggregate counts of page views and error rates) to monitor sukutoto's technical health, but we do not track individual user behavior across external websites. You can disable cookies in your browser settings, but doing so may limit sukutoto's functionality.

Policy

Your rights over data on sukutoto

You have the right to access, correct, or delete your personal data from sukutoto. To request access, email our support team with your account email. We will provide you with a copy of your data within 14 days. You can correct your email or phone number directly in your sukutoto account settings. Deletion requests are honored after your account has been closed for 30 days and all disputes resolved.

We cannot delete your betting history or payment records if doing so would violate legal record-keeping requirements. However, we can anonymize your history (remove your name and ID) upon request, leaving only transaction records.

Contact and disputes

If you believe sukutoto has mishandled your data, or if you have questions about this privacy policy, contact our team through in-app messaging or email support. We investigate concerns within 14 days. If you are not satisfied with our response, you may escalate to local regulatory authorities in your jurisdiction.

Policy updates

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. sukutoto will notify you of material changes via email and on this page. Your continued use of sukutoto after an update means you accept the revised policy. This notice was last updated in 2026 and applies to all users on sukutoto.