cumatoto Platform Privacy and Data Protection Notice
This page describes what we collect when you use cumatoto and how we keep that data protected. We operate cumatoto as an online platform offering slot tournaments, sportsbook markets, and live-dealer tables in supported jurisdictions. To provide these services, we collect certain personal information from you — your identity, payment details, account activity, and device information. We handle all of it under a standard data-protection framework, and we're transparent about how and why we do so.
We do not sell your data to marketing firms or data brokers. We do not use your account activity to build behavioural profiles for external sale. Our use of your information is strictly limited to: running your account, processing withdrawals, complying with local law, detecting fraud, and improving our platform's reliability. This notice explains each category, who we share it with, and your rights over it.
If you have questions about how we handle your data after reading this notice, our support team is available during business hours (08:00–23:00 daily, local time) via live chat, email, or in-app help. We respond to data-protection inquiries within 5 business days.
What We Collect and Why
When you register for cumatoto, we ask for your full name, date of birth, email address, and phone number. These form the core of your identity on our platform. We also ask for a valid government ID (passport, national ID, or driver's license) and proof of address — a utility bill, lease agreement, or bank statement dated within the last three months. This process, called Know Your Customer (KYC) verification, is a legal requirement in all jurisdictions where we operate. We do not store high-resolution scans of your ID indefinitely; after verification completes, we retain a record of what we verified (name, ID number, expiry date) but delete the image within 30 days unless local law requires us to keep it longer.
When you fund your account, we collect payment details — the wallet name or bank account you use, the amount transferred, and the date. We do not store your full banking credentials; payment processing is handled by third-party gateways (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and banks including mobile banking, local payment, online payment, e-wallet). These processors hold the encryption keys for your banking data, not us. We store only confirmation that a payment arrived and a reference number linking it to your account.
As you play, we log your tournament entries, bets, wins, and withdrawals. We track which games you access, how long you spend on each, and timestamps of your activity. We also log your IP address, browser type, device model, and operating system. This data helps us detect suspicious activity (multi-accounting, stolen credentials, payment reversals), troubleshoot technical issues, and identify which features users engage with most.
Third-Party Processors and Your Rights
We share your data with the following third parties only as necessary to operate cumatoto: payment gateways (for withdrawal processing), KYC verification providers (for identity confirmation), email and SMS providers (for account notifications and password resets), and our hosting provider (for server operation and backup). None of these processors are permitted to use your data for their own marketing. We have Data Processing Agreements in place with each.
You have the right to request access to all personal data we hold about you. You may ask us to correct inaccurate information or to delete data we no longer need — though some data (transaction records, KYC documents) may be retained for 5–7 years to comply with anti-money-laundering and tax obligations. To exercise these rights, contact our support team with your account email and a description of your request. We respond within 10 business days, or within the timeframe required by local law if longer.
We use cookies and similar tracking technologies (pixels, local storage) to remember your login session, store your language preference, and measure site performance. We do not use third-party cookies for behavioural tracking or retargeting advertisements. If you disable cookies in your browser, cumatoto may not function correctly; we explain this on the login page. You can clear cookies from your browser settings at any time.
Your Rights on cumatoto and Our Commitment
You own your account data. You may download a copy of everything we hold about you — your KYC documents, transaction history, gameplay logs, and withdrawal records — at any time via your account settings or by asking our support team. We provide this in a common format (CSV or JSON) within 5 business days of request.
If you believe we've mishandled your data, you have the right to lodge a complaint with your local data-protection authority. In Indonesia, that is the Ministry of Communication and Information Technology. We cooperate fully with such inquiries and provide evidence of our data-protection practices.
We update this notice periodically to reflect changes in how we operate or changes to local law. Major changes (for example, a new third-party processor or a shift in data retention policy) are announced via in-app alert at least 14 days before they take effect. Continued use of cumatoto after that notice period means you accept the updated terms. We track changes with a version number and date at the bottom of this page.
If you have a data-protection question, contact us: [email protected]or use the in-app support form under Account Settings. Our team in JakartaSurabayaBandungMedanand Semarang handles inquiries in Indonesian and English, and we respond within one business day during operating hours.