Privacy Policy

1. Introduction

yoto12 ("we," "us," "our") operates an online betting and casino platform serving users across Indonesia. We recognize that privacy is critically important to our users, and we are committed to protecting your personal information in accordance with international data protection standards and best practices.

This Privacy Policy explains what personal data we collect when you use yoto12, why we collect it, how we use it, who we share it with, how long we retain it, and what rights you have regarding your data. By creating an account on yoto12, depositing funds, placing wagers, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

If you do not agree with this Privacy Policy, you must not use yoto12's services. For specific questions about how yoto12 handles your data, please contact our Data Protection Officer at [email protected].

2. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal information is yoto12, an internationally licensed online gaming operator. Our registered business address and licensing details are available upon request by contacting [email protected].

yoto12 determines the purposes and means of processing your personal data and is responsible for ensuring that all data handling complies with applicable privacy laws and regulations.

3. Data We Collect

yoto12 collects several categories of personal data to provide our services, verify your identity, process transactions, prevent fraud, and comply with legal and regulatory obligations. The specific data we collect includes:

3.1 Account Registration Data

When you register an account on yoto12, we collect:

• Full Legal Name: As it appears on your Indonesian National ID (KTP) or other government-issued identification.
• Date of Birth: To verify that you are at least 21 years of age, as required by our eligibility criteria.
• Residential Address: Your current place of residence in Indonesia, used for KYC verification and regulatory compliance.
• Email Address: For account notifications, password resets, promotional communications (if opted in), and customer support correspondence.
• Mobile Phone Number: For account security (two-factor authentication), SMS notifications, and customer support via WhatsApp.
• Username and Password: Your chosen login credentials for accessing your yoto12 account.

3.2 Know Your Customer (KYC) Verification Data

To comply with anti-money-laundering (AML) regulations and verify your identity, we collect:

• Government-Issued ID: A clear photograph of your Indonesian National ID (KTP), passport, or driver's license showing your name, photograph, date of birth, ID number, and expiration date.
• Proof of Address: A recent utility bill, bank statement, or government correspondence (issued within the last three months) confirming your residential address.
• Selfie Photograph: A photograph of you holding your ID next to your face for liveness verification and to prevent identity fraud.

3.3 Financial and Transaction Data

When you deposit funds, place wagers, or request withdrawals, we collect:

• Payment Method Details: Bank account number (for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) or e-wallet account information (for OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full credit card numbers if card payments are used.
• Transaction History: Records of all deposits, withdrawals, wagers, wins, losses, bonuses claimed, and account balance changes.
• Transaction Metadata: Date, time (in WIB), amount (in IDR), payment method used, and transaction status for each financial operation.

3.4 Usage Data and Device Information

When you access yoto12, we automatically collect certain technical data, including:

• IP Address: Your internet protocol address, which indicates your general geographic location and internet service provider.
• Device Information: Device type (mobile, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution.
• Session Data: Login timestamps, session duration, pages visited, games played, bets placed, clicks, and navigation paths through the yoto12 platform.
• Referral Source: How you arrived at yoto12 (direct visit, search engine, referral link, advertising campaign).

3.5 Communications Data

When you contact yoto12's customer support via live chat, email, or WhatsApp, we collect and retain:

• The content of your messages, questions, complaints, or feedback.
• Attachments you send (such as screenshots for troubleshooting).
• Chat transcripts and email correspondence for quality assurance, training, and dispute resolution purposes.

3.6 Marketing Preferences

If you opt in to receive promotional communications, we record your consent and preferences for:

• Email newsletters and bonus offers.
• SMS notifications about promotions and loyalty rewards.
• Push notifications through the yoto12 mobile app (if installed).

Data Category	Examples	Legal Basis
Account Registration	Name, email, phone, address, date of birth	Contractual necessity (to provide services)
KYC Verification	ID photo, proof of address, selfie	Legal obligation (AML/KYC compliance)
Financial Transactions	Bank account, e-wallet, deposit/withdrawal records	Contractual necessity + Legal obligation
Usage & Device Data	IP address, browser, session logs	Legitimate interest (security, fraud prevention, platform improvement)
Communications	Support tickets, live chat transcripts, emails	Contractual necessity (customer support)
Marketing Preferences	Email/SMS consent for promotions	Consent (opt-in required)

4. How We Use Your Data

yoto12 uses the personal data we collect for the following purposes:

4.1 Service Provision

• To create and manage your yoto12 account.
• To process deposits, withdrawals, and payment transactions in Indonesian Rupiah (IDR).
• To enable you to place wagers on sports betting markets (bandar bola, BRI Liga 1, EPL, La Liga, Champions League, badminton, MotoGP, E-sports), play live casino games, participate in togel (lottery) draws, and access slot gacor (slot games).
• To calculate and credit winnings, deduct losses, and maintain accurate account balances.
• To deliver bonuses, promotions, and loyalty rewards (Bronze, Silver, Gold, Platinum tiers).

4.2 Identity Verification and Compliance

• To verify that you are at least 21 years of age and meet our eligibility criteria.
• To confirm your identity and prevent multiple accounts (multi-accounting).
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations imposed by our licensing jurisdiction.
• To detect and prevent fraudulent activity, bonus abuse, collusion, and other prohibited conduct.

4.3 Customer Support

• To respond to your questions, complaints, and support requests via live chat, email, or WhatsApp.
• To troubleshoot technical issues and resolve disputes regarding bet settlements, game outcomes, or withdrawal delays.
• To provide personalized assistance to Gold and Platinum VIP members through dedicated account managers.

4.4 Security and Fraud Prevention

• To monitor account activity for suspicious behavior, including unusual betting patterns, coordinated play, or attempts to exploit software vulnerabilities.
• To detect and block access from prohibited jurisdictions or sanctioned entities.
• To protect yoto12 and our users from hacking, phishing, identity theft, and other cyber threats.

4.5 Marketing and Communications (With Consent)

• To send you promotional emails about new games, bonuses, free spins, cashback offers, and exclusive events (only if you have opted in).
• To deliver SMS notifications about limited-time promotions and loyalty rewards (only if you have opted in).
• To send transactional messages (e.g., deposit confirmations, withdrawal approvals, password reset links) regardless of marketing preferences, as these are necessary to operate your account.

4.6 Platform Improvement and Analytics

• To analyze how users interact with yoto12 in order to improve user experience, identify popular games, and optimize platform performance.
• To conduct A/B testing on new features, interface designs, and promotional campaigns.
• To generate aggregated, anonymized reports on platform usage, betting trends, and demographics for internal business purposes.

4.7 Legal and Regulatory Obligations

• To respond to lawful requests from government authorities, regulatory bodies, or law enforcement agencies.
• To cooperate with investigations into money laundering, terrorist financing, fraud, or other criminal activity.
• To enforce our Terms & Conditions and protect yoto12's legal rights.

5. Data Sharing and Third-Party Disclosure

yoto12 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with carefully selected third parties under the following circumstances:

5.1 Payment Processors

We share necessary financial data (bank account numbers, e-wallet IDs, transaction amounts) with Indonesian payment service providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection standards.

5.2 Game Providers

When you play games on yoto12, limited session data (username, bet amounts, game outcomes) is shared with our game providers — Evolution Gaming, Pragmatic Play, Pocket Games Soft, NetEnt, Microgaming, Spribe — to deliver live casino streams, slot gameplay, and accurate RNG results. Game providers do not receive your full personal information (such as your real name, address, or ID documents).

5.3 KYC Verification Services

We use third-party identity verification services to authenticate the government-issued IDs and proof-of-address documents you submit. These services perform facial recognition, document validation, and anti-fraud checks. Verified data is returned to yoto12 and is not retained by the verification provider beyond what is necessary to complete the check.

5.4 Regulatory Authorities

yoto12 may disclose your personal data to licensing authorities, gaming regulators, or law enforcement agencies when required by law or in response to valid legal requests (subpoenas, court orders, regulatory investigations). We will only disclose the minimum data necessary to comply with the request.

5.5 Legal and Professional Advisors

We may share your data with our legal counsel, accountants, auditors, and compliance consultants when necessary to protect yoto12's legal rights, defend against claims, or ensure regulatory compliance. These advisors are bound by professional confidentiality obligations.

5.6 Business Transfers

In the event yoto12 is involved in a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity as part of the business transaction. You will be notified of any such change in ownership and given the opportunity to delete your account before the transfer if you object.

6. Data Retention

yoto12 retains your personal data for as long as your account remains active and for a period thereafter as required by legal, regulatory, and business obligations. Specific retention periods include:

• Account Data (name, email, phone, address): Retained for the duration of your active account plus 7 years after account closure, as required by AML and financial record-keeping regulations.
• KYC Documents (ID photos, proof of address): Retained for 7 years after your last transaction, in compliance with international KYC and AML standards.
• Transaction History (deposits, withdrawals, wagers): Retained for 7 years after the transaction date for financial auditing, tax compliance, and dispute resolution purposes.
• Usage Logs (IP addresses, session data): Retained for 12 months for security monitoring and fraud prevention, then anonymized or deleted.
• Communications (support tickets, live chat transcripts): Retained for 3 years for quality assurance, training, and dispute resolution purposes.
• Marketing Communications (promotional emails, SMS): Retained until you unsubscribe or withdraw consent, after which your email/phone is added to a suppression list to prevent further marketing messages.

After the applicable retention period expires, personal data is either permanently deleted from yoto12's systems or anonymized so that it can no longer be associated with an identifiable individual.

7. Security Measures

yoto12 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• 256-Bit SSL Encryption: All data transmitted between your device and yoto12's servers is encrypted using SSL/TLS protocols, the same encryption standard used by banks and financial institutions.
• Secure Data Storage: Personal data is stored on secure, access-controlled servers located in data centers with 24/7 physical security, redundant power supplies, and fire suppression systems.
• Access Controls: Only authorized yoto12 personnel with a legitimate business need (such as compliance officers, customer support supervisors, and senior management) can access your personal data. All access is logged and audited.
• Two-Factor Authentication (2FA): Users can enable 2FA on their yoto12 accounts to add an extra layer of security beyond username and password.
• Regular Security Audits: yoto12 undergoes annual third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Employee Training: All yoto12 employees receive mandatory data protection and information security training and are bound by strict confidentiality agreements.

8. Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request a copy of the personal data yoto12 holds about you. This includes your account details, KYC documents, transaction history, and usage logs. To request your data, contact [email protected]. We will provide your data in a structured, commonly used, machine-readable format (typically PDF or CSV) within 30 days of your request.

8.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that yoto12 correct or update it. You can update most account information (email, phone, address) directly through your yoto12 account settings. For changes to your legal name or date of birth, contact support with updated KYC documentation.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for data processing. However, yoto12 may be legally required to retain certain data (KYC documents, transaction records) for 7 years even after account closure to comply with AML regulations and financial record-keeping laws. In such cases, we will restrict processing of your data to the minimum necessary for compliance purposes.

8.4 Right to Restrict Processing

You have the right to request that yoto12 limit how we use your data in certain situations, such as when you contest the accuracy of your data or object to processing based on legitimate interests. During the restriction period, we will store your data but not actively process it except to comply with legal obligations.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to request that yoto12 transfer it directly to another service provider (if technically feasible). This right applies only to data you provided to us with consent or under a contract.

8.6 Right to Object

You have the right to object to processing of your personal data when that processing is based on legitimate interests (such as direct marketing, fraud prevention, or platform analytics). If you object, yoto12 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

8.7 Right to Withdraw Consent

If yoto12 processes your data based on your consent (such as sending promotional emails), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. You can unsubscribe from marketing communications by clicking the "Unsubscribe" link in any promotional email or by contacting support.

8.8 Right to Lodge a Complaint

If you believe yoto12 has violated your data protection rights, you have the right to lodge a complaint with the data protection authority in the jurisdiction where yoto12 is licensed or where you reside. Contact details for the relevant authority will be provided upon request.

Exercising Your Rights: To exercise any of the above rights, please contact yoto12's Data Protection Officer at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. We will respond to your request within 30 days. If we need additional time or information, we will notify you.

9. Cookies and Tracking Technologies

yoto12 uses cookies and similar tracking technologies to enhance your user experience, remember your preferences, and analyze platform usage. A cookie is a small text file stored on your device by your web browser. Cookies do not contain personal data themselves but may be linked to your account.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These cookies enable you to log in, navigate the site, place bets, and access secure areas. Essential cookies cannot be disabled without preventing you from using yoto12.
• Performance Cookies: Collect anonymized data on how you use yoto12, such as which pages you visit most often and whether you encounter errors. This helps us optimize platform performance.
• Functionality Cookies: Remember your preferences, such as language settings (if multilingual support is added in the future), display settings, and bet slip configurations.
• Advertising Cookies: Track your browsing behavior across yoto12 and other websites to deliver personalized advertisements. You can opt out of advertising cookies through your browser settings.

9.2 Managing Cookies

Most web browsers automatically accept cookies by default. You can configure your browser to reject all cookies, accept only certain cookies, or notify you when a cookie is set. However, disabling essential cookies will prevent you from using yoto12. For instructions on managing cookies in your browser, visit the help section of your browser's website (Chrome, Firefox, Safari, Edge).

10. Changes to This Privacy Policy

yoto12 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this document.
• Notify registered users via email and/or a prominent notice on the yoto12 homepage.
• Require users to review and accept the updated policy before placing new wagers (for significant changes affecting user rights).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of yoto12 after a policy update constitutes acceptance of the revised terms.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how yoto12 handles your personal data, please contact us:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the yoto12 website
• WhatsApp: +62 811 0000 1212 (08:00 – 24:00 WIB daily)

Our Data Protection Officer will respond to privacy-related inquiries within 5 business days and resolve requests within 30 days. For urgent data protection matters, please mark your email "URGENT: Data Privacy Request" to expedite review.