Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all users of the cvtoto platform accessible at https://cvtoto.cam, including our website and any associated mobile applications. This policy governs the collection and processing of personal data from Indonesian residents who register accounts and use our sports betting, live casino, slot games, and togel (traditional Indonesian lottery) services. cvtoto operates as a data controller in relation to the personal information we collect and process through our platform.

We are committed to complying with applicable Indonesian data protection regulations and international best practices for privacy and data security. This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of cvtoto services. If you have any questions or concerns about how we handle your personal data, please contact our Data Protection Officer using the contact information provided at the end of this document.

2. Information We Collect

cvtoto collects various types of personal information to provide, maintain, and improve our services. The categories of data we collect include:

2.1 Information You Provide Directly

When you register for a cvtoto account, you voluntarily provide us with the following personal information:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document
• Contact Information: Email address, mobile phone number, and residential address within Indonesia
• Account Credentials: Username, password, and security questions/answers used to access your account
• Financial Information: Bank account details, e-wallet account information, payment card details (where applicable), and transaction history
• Verification Documents: Copies of government-issued identification (Indonesian KTP, passport), proof of address documents (utility bills, bank statements), and payment method verification documents
• Communication Data: Records of your interactions with our customer support team via live chat, email, WhatsApp, or other communication channels, including the content of your inquiries and our responses

2.2 Information We Collect Automatically

When you access and use the cvtoto platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information
• Connection Data: IP address, geographic location (country, city), internet service provider, and connection timestamps
• Usage Data: Pages visited, features used, time spent on different sections of the platform, betting patterns, game preferences, search queries, and clickstream data
• Transaction Data: Complete history of deposits, withdrawals, bets placed, bet outcomes, bonus claims, and account balance changes
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar tracking technologies to enhance user experience and analyze platform performance

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions confirming transaction details and payment method verification
• Identity verification services providing confirmation of your identity and age
• Fraud prevention agencies and credit reference agencies for security and risk assessment purposes
• Marketing partners (only with your consent) providing information about your interaction with promotional campaigns

3. How We Use Your Information

cvtoto uses your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and managing your cvtoto account
• Processing your deposits, withdrawals, and betting transactions
• Providing access to sports betting markets, casino games, and togel lottery betting
• Calculating and settling bets according to official results
• Managing bonuses, promotions, and loyalty rewards
• Responding to your customer support inquiries and resolving disputes

3.2 Verification and Compliance

• Verifying your identity, age, and residency to ensure compliance with legal requirements
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Preventing fraud, collusion, money laundering, and other illegal activities
• Complying with legal obligations and regulatory requirements
• Responding to lawful requests from government authorities and law enforcement agencies

3.3 Platform Improvement and Analytics

• Analyzing user behavior and preferences to improve our platform design and functionality
• Developing new features, games, and betting markets based on user demand
• Conducting statistical analysis and research to understand market trends
• Testing platform performance and identifying technical issues
• Optimizing mobile experience and load times for Indonesian internet infrastructure

3.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and marketing communications (with your consent)
• Personalizing content and recommendations based on your preferences and betting history
• Informing you about platform updates, new features, and important service announcements
• Conducting customer satisfaction surveys and gathering feedback

3.5 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions and account takeover attempts
• Monitoring for suspicious betting patterns that may indicate match-fixing or collusion
• Protecting against cyber attacks, hacking attempts, and other security threats
• Investigating violations of our Terms and Conditions and Responsible Gaming policies
• Implementing account restrictions for users exhibiting problem gambling behaviors

4. Legal Basis for Processing

cvtoto processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to provide betting and gaming services as outlined in our Terms and Conditions
• Legal Compliance: Processing is required to comply with Indonesian laws and regulations, including age verification, anti-money laundering requirements, and tax reporting obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests in operating a secure, efficient, and profitable online betting platform, preventing fraud, and improving our services
• Consent: For marketing communications and optional data collection, we rely on your explicit consent, which you may withdraw at any time

5. Data Sharing and Disclosure

cvtoto does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes outlined in this Privacy Policy:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing deposits and withdrawals
• Game Providers: Third-party software providers who supply casino games and slots (processed under strict confidentiality agreements)
• Verification Services: Identity verification and age verification service providers
• Hosting and Infrastructure Providers: Cloud hosting companies and content delivery networks that store and serve our platform data
• Customer Support Platforms: Live chat, email, and ticketing system providers that help us deliver customer service
• Analytics and Marketing Services: Analytics platforms and marketing automation tools (with your consent for marketing purposes)

5.2 Legal and Regulatory Requirements

We may disclose your personal information to government authorities, law enforcement agencies, regulators, and courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Protect our legal rights and enforce our Terms and Conditions
• Prevent fraud, money laundering, or other illegal activities
• Protect the safety and security of our users and the public

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transfer. We will notify you of any such change in ownership or control of your personal data.

6. Data Security

cvtoto implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption, the same standard used by major financial institutions worldwide
• Secure Storage: Personal data is stored on secure servers located in facilities with physical security controls, including 24/7 monitoring, biometric access controls, and fire suppression systems
• Access Controls: Strict internal policies limit access to personal data to authorized employees who require access to perform their job functions. All access is logged and monitored
• Authentication: Multi-factor authentication and strong password requirements protect account access
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential weaknesses
• Employee Training: All staff members receive regular training on data protection, privacy practices, and security protocols

While we implement robust security measures, no method of electronic storage or internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should never share your password with anyone. If you suspect unauthorized access to your account, contact our support team immediately.

7. Data Retention

cvtoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and tax obligations. Our retention periods vary depending on the type of data:

• Account Information: Retained for the duration of your active account plus 7 years after account closure to comply with Indonesian financial regulations and tax requirements
• Transaction Records: Retained for 7 years after the transaction date for financial auditing, tax reporting, and dispute resolution purposes
• Identity Verification Documents: Retained for 7 years after account closure for anti-money laundering compliance
• Marketing Communications: Retained until you withdraw consent or for 2 years of inactivity, whichever comes first
• Technical Logs: Retained for 90 days for security monitoring and troubleshooting purposes

After the applicable retention period expires, we will securely delete or anonymize your personal data so that it can no longer identify you. Some anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Your Privacy Rights

As a cvtoto user, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal information we hold about you, along with information about how we use it
• Right to Rectification: You may request correction of inaccurate or incomplete personal data through your account settings or by contacting support
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain information for regulatory compliance
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format
• Right to Object: You may object to our processing of your personal data for direct marketing purposes at any time
• Right to Withdraw Consent: Where we rely on your consent to process your data, you may withdraw that consent at any time

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 13. We will respond to your request within 30 days. Please note that some requests may require identity verification to protect your privacy.

9. Cookies and Tracking Technologies

cvtoto uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences. We use the following types of cookies:

• Essential Cookies: Required for basic platform functionality, including user authentication and security features. These cannot be disabled without affecting platform operation
• Performance Cookies: Collect anonymous information about how users interact with our platform to help us identify and fix issues
• Functionality Cookies: Remember your preferences and settings to provide a more personalized experience
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements (only with your consent)

You can manage cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some platform features. For more information about cookies and how to manage them, visit your browser's help documentation.

10. International Data Transfers

Your personal information is primarily processed and stored on servers located within secure data centers. Some of our service providers may be located outside Indonesia, which may involve transferring your personal data to countries with different data protection laws. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives adequate protection, including:

• Standard contractual clauses approved by regulatory authorities
• Ensuring service providers maintain appropriate data security certifications
• Conducting due diligence on third-party data protection practices

11. Children's Privacy

cvtoto's services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such information and close the account. Parents or guardians who believe their child has provided personal information to cvtoto should contact us immediately using the information provided in Section 13.

12. Changes to This Privacy Policy

cvtoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by posting a prominent notice on our platform and updating the "Last Updated" date at the top of this document. We may also send you an email notification if the changes significantly affect your rights or how we handle your personal data. Your continued use of cvtoto services after such notification constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

• Email: [email protected] (please copy this address and paste it into your email client; do not click as a mailto link)
• Live Chat: Available 24/7 through the cvtoto platform for immediate assistance
• WhatsApp: +62 812-3456-7890 (available daily 08:00-23:00 WIB)

We aim to respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Indonesian data protection authority.