omantoto Privacy Policy - Data Protection & Your Rights
This page describes what we collect when you use omantoto and how we keep that data protected. We collect personal information only for account verification, payment processing, fraud prevention, and regulatory compliance. Every piece of data we hold is encrypted, access-controlled, and handled according to this policy.
omantoto operates under jurisdiction-restricted terms. Players in supported regions like Jakarta, Surabaya, Bandung, Medan, and Semarang can create accounts and deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers to mobile banking, local payment, online payment, or e-wallet. Our data practices align with the laws of the jurisdictions where we operate. This policy applies to everyone who uses omantoto.
We believe transparency builds trust. This policy is plain-language, specific about what we do, and clear about your rights. If you have questions about how omantoto handles your data, contact our support team through your account dashboard or email.
What We Collect and How We Use It
We collect your personal information in three categories: account data, payment data, and activity data. Account data includes your email, full name, national ID (KTP) or passport scan, proof of address, date of birth, and phone number. We collect this for identity verification (KYC) before any deposit or gameplay. We do not complete account verification during holidays like Idul Fitri or Nyepi if our team is unavailable; processing resumes the next business day.
Payment data includes transaction records—amount, method (DANA, e-wallet, or bank), timestamp, and confirmation code. We log every deposit and withdrawal so you can audit your own history and we can prevent fraud. We do not store your payment credentials (card numbers, passwords, or mobile banking PINs) on our servers. Payment processors handle that data under their own encryption standards.
Activity data includes your IP address, device type, browser, login timestamps, and gameplay history. We use this to detect unusual access patterns (e.g., logins from multiple countries within hours) and trigger additional verification if needed. This is a security measure, not surveillance.
Third-Party Processors and Data Locations
omantoto relies on third-party services to operate. Our servers may be located outside your jurisdiction (for example, data centres in Singapore, Australia, or other regions). These processors access your data only to provide services—payment gateways process deposits, cloud providers host our databases, and email services send confirmations. All processors sign data-processing agreements that limit their use of your data.
When you deposit via local payment or online payment, those services receive your transaction details as part of payment settlement. You're subject to their privacy policies as well. We don't control how they use your data beyond what's necessary for payment clearing. Withdrawals to bank accounts (e-wallet, mobile banking, local payment, online payment) pass through banking networks over which we have limited control. Your bank receives your account details to process the transfer.
Your Rights and Data Deletion
You have the right to request access to your personal data held by omantoto. You can view your KYC documents, payment history, and account activity anytime in your dashboard. You also have the right to request correction if your name, address, or contact details are wrong—submit a support ticket with proof of correction, and we'll update your account within 3 business days.
You have the right to request deletion of your data, with limited exceptions. If you close your omantoto account, we retain records for anti-money-laundering compliance (typically 5 years). We cannot delete transaction history that's required by law. Personal documents like your ID scan can be deleted after your account closure period expires. Contact support to request deletion and we'll provide a timeline.
Cookies and Tracking
omantoto uses cookies to keep you logged in, remember your preferences, and prevent fraud. Cookies are small files stored on your device. Essential cookies are required for omantoto to function—login sessions, CSRF tokens, and security flags. Analytical cookies help us understand how players use omantoto so we can improve the platform. You can disable cookies in your browser, but omantoto may not work properly without them.
We do not use cookies for targeted advertising or tracking across other websites. We don't sell cookie data to advertisers. If you clear your browser cookies, you'll be logged out and will need to log in again on your next visit.
International Data Transfers
omantoto operates across multiple regions. Your data may be transferred, stored, or processed in countries outside Indonesia. These countries may have different data-protection laws than your jurisdiction. By using omantoto, you consent to this transfer. We ensure all processors protect your data with encryption and access controls regardless of location.
Policy Updates and Contact
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. If we make material changes—for example, if we start sharing data with new third parties—we'll notify you by email and ask for your consent before implementing the change. Your continued use of omantoto after an update means you accept the updated policy.
If you have questions about how omantoto handles your data, privacy rights, or concerns about data security, contact our support team. You can reach us through the support form in your omantoto account dashboard, via email, or through live chat. We aim to respond to privacy inquiries within 5 business days. We take data protection seriously and will work with you to resolve any concerns.
omantoto respects your privacy and operates under the principle that your data is yours. We collect only what's necessary, protect it with encryption, restrict access to authorized staff, and give you control over your account information. This policy reflects our commitment to transparent, secure data handling.