jostoto Casino & Sportsbook Data Care

This page describes what we collect when you use jostoto and how we keep that data protected. We handle your personal information—email, payment details, identity documents, and game activity—with care and transparency. Our aim is to explain exactly what happens to your data, who has access to it, and what rights you hold over it.

We operate across multiple jurisdictions, so our data practices reflect the legal requirements of the regions we serve. If you access jostoto from Jakarta, Surabaya, Bandung, Medan, Semarang, or Yogyakarta, your data is subject to applicable Indonesian law and our own privacy commitments. We do not sell your data to third parties for marketing purposes. We share information only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and service providers necessary to operate our platform.

Read on to understand our practices in detail and learn what you can do to manage your account privacy.

What Data We Collect at jostoto

When you create a jostoto account, we ask for your email address and a password. This information uniquely identifies your account and allows you to log in securely. We do not collect this data for advertising or third-party sale; it exists solely to manage your account access and communicate important service updates (such as account verification status or security notices).

When you fund your account, we collect payment method details tied to your chosen payment provider. If you deposit via QRIS, we record the transaction ID and amount. If you use e-wallet, mobile banking, or a bank virtual account, we store your transaction reference for withdrawal matching. We do not store full payment card numbers or passwords; instead, payment processors handle sensitive data encryption and storage.

For account verification, we ask you to upload a government-issued ID photo and a proof-of-address document. We store these files securely and use them only to verify your identity and prevent fraud. Once verification is complete, we retain these documents for our records and comply with applicable retention laws. You can request deletion of your documents after a set retention period by contacting our support team.

We also track your game activity—which games you access, how much you bet, when you played, and your outcomes. This information helps us understand platform usage, detect fraud, and improve our service. Your game history is visible in your account dashboard and is tied only to your account; it is not shared publicly or used for marketing.

How We Use Your Data

Our primary use of your data is operational: authenticating your account, processing deposits and withdrawals, managing your game activity, and responding to your support requests. When you contact our support team about a payment question or game rule, we access your account history to answer your query accurately. This access is logged and monitored to ensure staff are using data appropriately.

We also use aggregated, anonymised data to understand our platform's health. For example, we analyse how many accounts deposit monthly, which games are most popular, and what payment methods users prefer. This information never identifies individual players and is used only to improve jostoto's service.

Third-Party Data Processors on jostoto

We share your payment information only with payment providers and banks essential to process your deposits and withdrawals. When you use local payment, we share your transaction ID and amount with online payment's payment infrastructure. When you use a e-wallet or mobile banking virtual account, we share transaction details with those banks. These processors are bound by their own privacy policies and data-protection laws.

• 1
  Payment processorsEssential partners

  local payment, online payment, e-wallet, mobile banking, local payment, online payment networks, e-wallet, mobile banking, local payment, online payment handle payment data and transaction settlement.

• 2
  Hosting and email servicesInfrastructure partners

  We use cloud infrastructure and email services to store your account data and send you security notifications and support responses.

• 3
  Fraud prevention servicesSecurity partners

  We may share anonymised account behaviour patterns with fraud-detection partners to identify and prevent suspicious activity.

Our servers may sit outside Indonesia. Your data may be transferred to and stored in jurisdictions where data-protection laws differ from those in Indonesia. By using jostoto, you consent to this international data transfer. If you have concerns about cross-border data movement, contact our support team.

Your Rights and Data Security

You have the right to access your personal data. Log into your jostoto account and view your email, payment history, game activity, and verification documents. You also have the right to request correction if your stored information is inaccurate, and the right to request deletion of your data after our retention obligations are satisfied. Contact our support team to exercise these rights, and we will respond within our published timeframe.

We protect your data using standard encryption (HTTPS for web traffic, TLS for payment data). Our servers are secured with firewalls and access controls. Staff access to your personal information is logged and limited to those with a business need. If we discover a data breach or unauthorised access, we will notify affected users and take corrective action within applicable legal windows.

You can manage your account security through your jostoto dashboard. Change your password regularly, enable email-based account notifications, and review your login history to spot unauthorised access. If you suspect your account has been compromised, contact our support team immediately.

Cookies and Tracking on jostoto

Our jostoto website uses cookies to remember your login session and user preferences. These are functional cookies necessary for the platform to work. We do not use cookies to track you across other websites or to build a profile for advertising purposes. When you log out, your session cookie expires.

Our analytics may track page views and button clicks to understand how users navigate our site. This data is aggregated and anonymised, meaning we cannot identify individual users from it. If you wish to disable analytics tracking, you can use your browser's do-not-track setting, though this may affect your experience on jostoto.

Data Retention and Deletion on jostoto

We retain your account data for as long as your jostoto account is active and for a period after closure to comply with payment-processor requirements and fraud-prevention standards. Once our retention obligations end, you can request deletion of your data by submitting a written request to our support team. We will confirm deletion within our standard timeframe.

Payment transaction records are retained to satisfy anti-money-laundering and tax-reporting requirements. Your game history remains in our systems for account auditing and dispute resolution. These records will not be deleted until legal retention periods expire.

Contact Us About Privacy on jostoto

If you have questions about our privacy practices, wish to exercise your data rights, or believe we have mishandled your information, contact our support team through your jostoto account menu. We respond to documented privacy requests in English and Indonesian within our published response window. We take data-protection concerns seriously and investigate all claims of misuse.

Our Commitment to Your Privacy

We at jostoto recognise that your personal information is sensitive and trust us to handle it responsibly. We do not monetise your data through sale or unauthorised sharing. We use what you tell us only to operate our platform, process your payments, and improve your experience. Our practices are designed to be transparent—this page explains exactly what we do, and our support team is available to answer any questions you have.

Our privacy policy applies to all jostoto users regardless of location. If you are outside Indonesia, your access to jostoto services is subject to the jurisdiction-restricted framework we maintain. We do not knowingly collect personal data from individuals in jurisdictions where online gaming is prohibited. If you believe you are accessing jostoto from a location where our services should not be available, contact us immediately.

Your privacy matters to us. If you have feedback on how we handle data or ideas for improving our privacy practices, we welcome your input. Reach out through our support channels, and we will consider your suggestions as we evolve jostoto's data protection measures.