leatoto Privacy Policy

This page describes what we collect when you use leatoto and how we keep that data protected. Our privacy practice is straightforward: we collect the minimum information needed to open your account, process payments, settle games, and comply with financial regulations in the jurisdictions where we operate. We do not sell your data to advertisers or brokers. We do not track your behaviour beyond our platform.

When you use leatoto—whether you are in Jakarta, Surabaya, Bandung, Medan, or Semarang—your personal information is stored on encrypted servers and accessed only by leatoto staff and the specific third-party processors we name in this policy. We retain your data only as long as required by law or to fulfil our service obligations. If you close your account, we retain your transaction history for seven years as required by gaming and financial regulations, but we do not use it for any other purpose.

We take account security seriously. We require two-factor authentication on login, enforce strong password standards, and conduct compliance reviews on withdrawals. Your data is our responsibility, and we treat it as such. This page explains what we collect, how we use it, and what rights you have over it.

Data We Collect and How We Use It

We collect your email address, full name, date of birth, and identity document (passport, KTP, or driver's licence) when you open an account. We also collect proof of address—a utility bill or bank statement—to complete Know Your Customer (KYC) verification. These documents are required by Indonesian gaming law and are not optional. We store scanned copies in an encrypted vault and delete them after seven years.

We collect your banking information when you deposit or withdraw. If you use DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the transaction reference and timestamp but do not store your e-wallet credentials. If you deposit via mobile banking, local payment, online payment, or e-wallet bank transfer, we record your account number, branch, and transfer amount. We do not record your PIN or password.

Game Activity and Cookies

We record every bet you place, every game you play, and the outcome of each round. This data helps us settle disputes, detect fraud, and comply with audit requirements. We keep this record for seven years. We do not use it to profile your behaviour or sell it to marketing partners.

Our website uses session cookies to keep you logged in and to remember your language preference. We do not use tracking cookies or third-party analytics pixels. We do not set cookies that follow you across the internet.

Third-Party Processors

Our payments processor is a licensed financial service company that handles mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank-transfer settlements. They see your transaction amount and account reference but not your game activity. Our email provider sends you account notifications and password-reset links. Our hosting provider stores our servers, including your encrypted data, in data centres outside Indonesia. These processors are bound by contract to keep your data confidential and use it only to provide the service we request.

Your Rights and Our Jurisdiction

You have the right to request a copy of all data we hold about you. You may ask us to correct information if it is inaccurate. You may request deletion of your account and associated data, except for transaction records, which we must keep for seven years under Indonesian law. Send any request to our support team with your account email and a description of what you need. We respond within 30 days.

Our servers are located outside Indonesia. If you use leatoto from inside Indonesia, you accept that your data may be processed and stored overseas. Our data-handling practices comply with the laws of the jurisdictions where we operate. If you object to overseas storage, do not use our platform.

We update this privacy policy from time to time to reflect changes in our service or law. We notify you of material changes via email. Your continued use of leatoto after a change means you accept the new policy. If you have questions about how we handle your data, contact our support team. We are here to explain our practice clearly.