Bank-Grade Encryption
All personal data transmitted to and from rptoto is protected by 256-bit SSL encryption, the same standard used by major financial institutions worldwide.
Minimal Data Collection
We collect only the information necessary to provide our services, verify your identity, and comply with regulatory obligations. No excessive or irrelevant data is stored.
Your Data, Your Rights
You have the right to access, correct, or request deletion of your personal data at any time. Contact our support team to exercise your data rights.
No Third-Party Sales
rptoto will never sell, rent, or trade your personal information to third parties for marketing purposes. Your data remains confidential within our secure systems.
Secure Storage
Member data is stored on secure servers with restricted access controls, regular security audits, and automated backup systems to prevent unauthorized access or data loss.
Transparent Practices
This Privacy Policy clearly outlines what data we collect, why we collect it, how long we retain it, and who may access it. No hidden clauses or ambiguous language.
Table of Contents
- Introduction
- Data Controller
- Information We Collect
- How We Collect Data
- Purposes of Data Processing
- Legal Basis for Processing
- Data Sharing & Disclosure
- Data Retention
- Data Security
- Cookies & Tracking
- Your Privacy Rights
- Protection of Minors
- International Data Transfers
- Changes to This Policy
- Contact Us
1 Introduction
Welcome to rptoto's Privacy Policy. This document sets out how rptoto ("we", "us", "our") collects, uses, discloses, and protects the personal information of individuals ("you", "Member", "User") who register for and use our online gaming platform at https://rptoto.cam.
rptoto is committed to safeguarding your privacy in accordance with internationally recognized data protection principles. By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the rptoto platform. In the event of any conflict between this Privacy Policy and the Terms and Conditions, the Terms and Conditions shall prevail with respect to matters of contract, and this Privacy Policy shall prevail with respect to matters of data protection.
2 Data Controller
For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:
rptoto
Operating at: https://rptoto.cam
Email: [email protected]
As the data controller, rptoto determines the purposes and means of processing your personal data. If you have questions or concerns regarding how your data is processed, please contact us using the details provided in the Contact Us section at the end of this document.
3 Information We Collect
rptoto collects several categories of personal information necessary to provide our gaming services, verify your identity, process transactions, and comply with legal obligations. The types of information we collect include:
3.1 Identity and Registration Information
- Full legal name as it appears on your government-issued ID (KTP for Indonesian residents)
- Date of birth (to verify age eligibility — all Members must be 21 or older)
- Gender (optional, used for demographic analysis and personalization)
- Nationality and country of residence
- A copy of your Indonesian National Identity Card (KTP) or other government-issued identification, submitted during the KYC (Know Your Customer) verification process
- Selfie photograph holding your ID, submitted during KYC
3.2 Contact Information
- Email address (used for account notifications, password resets, promotional communications, and customer support)
- Mobile telephone number (used for account security, two-factor authentication, and transactional SMS notifications)
- Residential address (required during KYC for proof of identity and address verification)
3.3 Financial Information
- Bank account details (account holder name, bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, account number) used for processing deposits and withdrawals
- E-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account details)
- Transaction history including deposit amounts, withdrawal requests, bet placement records, win/loss records, and bonus claims
- Payment verification documents (bank statements, mobile banking screenshots) submitted to verify ownership of payment methods
3.4 Technical and Usage Information
- IP address and geolocation data (used to verify your location, prevent multi-accounting, and detect fraudulent activity)
- Device information including device type, operating system, browser type, and unique device identifiers
- Session information such as login timestamps, session duration, pages visited, and games played
- Gameplay data including bet amounts, game choices, win/loss outcomes, and betting patterns (analyzed for responsible gaming monitoring and fraud detection)
- Cookies and similar tracking technologies (see the Cookies & Tracking section for full details)
3.5 Communications and Support Records
- Correspondence with our customer support team, including email exchanges, live chat transcripts, and any documentation you submit in relation to a complaint or query
- Responses to surveys, feedback forms, or promotional offers
4 How We Collect Your Data
rptoto collects personal information through the following methods:
4.1 Information You Provide Directly
The majority of the data we hold is provided by you voluntarily when you:
- Register for a new account and complete the registration form
- Submit documents during the KYC verification process
- Make a deposit or request a withdrawal
- Contact our customer support team via email, live chat, or telephone
- Participate in surveys, promotions, or marketing campaigns
- Update your account settings or profile information
4.2 Information Collected Automatically
When you access and use the rptoto platform, certain data is collected automatically through technical means:
- Technical data is collected via server logs, cookies, and similar tracking technologies each time you visit our website or use our mobile application
- Gameplay data is recorded automatically during active gaming sessions to maintain game integrity, calculate payouts, and enforce fair play policies
- Device and browser fingerprinting technologies may be used to detect duplicate accounts and prevent fraudulent registrations
4.3 Information from Third Parties
In limited circumstances, rptoto may receive information about you from third-party sources:
- Payment processors and banks provide transaction confirmation data when you deposit or withdraw funds
- Identity verification service providers may confirm the authenticity of documents submitted during KYC
- Fraud prevention and security vendors may provide risk scores or alerts if suspicious activity is detected on your account
5 Purposes of Data Processing
rptoto processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | To create, maintain, and administer your rptoto account; to authenticate your identity when you log in; to manage your account settings and preferences. |
| Transaction Processing | To process deposits, withdrawals, bet placements, winnings payouts, and bonus credits; to maintain accurate financial records; to reconcile payment discrepancies. |
| Identity Verification (KYC) | To verify that you are at least 21 years of age; to confirm your identity and prevent identity theft; to comply with anti-money laundering (AML) and counter-terrorist financing (CTF) regulations; to verify ownership of payment methods. |
| Fraud Prevention & Security | To detect and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, and other prohibited conduct; to monitor for unusual betting patterns; to protect the integrity of our platform and other Members. |
| Responsible Gaming | To monitor gameplay behavior for signs of problem gambling; to enforce deposit limits, loss limits, and self-exclusion requests; to provide reality checks and session reminders; to fulfill our duty of care to vulnerable Members. |
| Customer Support | To respond to your inquiries, complaints, and technical support requests; to investigate and resolve disputes; to improve our customer service quality. |
| Legal Compliance | To comply with applicable laws, regulations, court orders, and requests from regulatory authorities or law enforcement agencies; to enforce our Terms and Conditions; to defend legal claims. |
| Marketing & Communications | To send promotional offers, bonuses, newsletters, and platform updates (where you have consented to receive such communications); to personalize your experience based on gameplay preferences. |
| Analytics & Improvement | To analyze platform usage, gameplay trends, and Member behavior in aggregate; to improve our website, games, and services; to develop new features; to optimize user experience. |
6 Legal Basis for Processing
Under applicable data protection laws, rptoto must have a lawful basis for processing your personal information. We rely on the following legal grounds:
6.1 Contractual Necessity
Processing is necessary to perform the contract between you and rptoto (i.e., the Terms and Conditions you agreed to when registering). This includes account creation, transaction processing, game provision, and customer support.
6.2 Legal Obligation
Processing is necessary to comply with legal requirements such as age verification (ensuring all Members are 21+), KYC and AML regulations, tax reporting obligations, and responses to lawful requests from authorities.
6.3 Legitimate Interests
Processing is necessary for rptoto's legitimate business interests, provided these interests are not overridden by your fundamental rights. Legitimate interests include fraud prevention, platform security, business analytics, and improving our services.
6.4 Consent
Where required by law, we rely on your explicit consent for certain processing activities, particularly marketing communications. You may withdraw consent at any time by adjusting your account settings or contacting support.
7 Data Sharing & Disclosure
rptoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients in limited circumstances:
7.1 Service Providers
We engage trusted third-party service providers to perform functions on our behalf, including:
- Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment gateways process deposits and withdrawals.
- Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and other providers deliver casino and live dealer games.
- Identity verification services: Third-party KYC providers verify the authenticity of identity documents.
- Cloud hosting and IT infrastructure providers: Secure servers and databases store Member data.
- Customer support platforms: Live chat and helpdesk software manage support tickets and communications.
- Fraud prevention and security vendors: Anti-fraud tools detect suspicious activity and multi-accounting.
All service providers are contractually obligated to process your data only for the specified purposes and to maintain appropriate security measures. They are prohibited from using your data for their own purposes.
7.2 Legal and Regulatory Authorities
rptoto may disclose your personal information to law enforcement agencies, courts, regulatory bodies, or government authorities when:
- Required by law, court order, or legal process
- Necessary to investigate suspected fraud, money laundering, or other illegal activity
- Requested by a licensing authority or gaming regulator in connection with compliance audits
- Necessary to protect the rights, property, or safety of rptoto, our Members, or the public
7.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity as part of the business transaction. You will be notified of any such transfer and any changes to how your data is processed.
7.4 Aggregated and Anonymized Data
rptoto may share aggregated, anonymized, or de-identified data that does not directly identify you with third parties for research, analytics, or business intelligence purposes. Such data cannot be traced back to individual Members.
8 Data Retention
rptoto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
8.1 Active Accounts
While your account remains active, we retain all account information, transaction history, gameplay records, and communications to provide ongoing service and support.
8.2 Closed Accounts
Following voluntary account closure or termination by rptoto, we retain certain data for the following periods:
- Identity and KYC documents: Retained for 7 years from account closure to comply with AML/CTF regulations and to prevent re-registration by excluded individuals.
- Transaction and financial records: Retained for 7 years to comply with financial record-keeping requirements and to resolve any disputes or chargebacks.
- Gameplay and betting records: Retained for 5 years to support dispute resolution, regulatory audits, and responsible gaming analysis.
- Marketing communications records: Deleted within 90 days of account closure unless you have provided separate consent to remain on our mailing list.
8.3 Legal Holds
If your data is subject to a legal hold (e.g., pending litigation, regulatory investigation, or law enforcement request), we will retain that data until the hold is lifted, regardless of standard retention periods.
8.4 Secure Deletion
When data is no longer required, it is securely deleted or anonymized in accordance with industry best practices to prevent unauthorized recovery or reconstruction.
9 Data Security
rptoto employs robust technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction. Our security practices include:
9.1 Encryption
All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS (Secure Sockets Layer / Transport Layer Security) encryption. Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest using industry-standard algorithms.
9.2 Access Controls
Access to Member data is restricted to authorized personnel only, on a need-to-know basis. Employees and contractors with access to personal data are subject to strict confidentiality obligations and undergo background checks and security training.
9.3 Secure Infrastructure
Our platform is hosted on secure servers protected by firewalls, intrusion detection systems, and regular security monitoring. We employ multi-layered network security architecture to defend against cyber threats.
9.4 Regular Audits and Testing
rptoto conducts regular security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses. Our systems are continuously monitored for suspicious activity.
9.5 Account Security
You play a vital role in protecting your own data. Please:
- Use a strong, unique password for your rptoto account
- Enable two-factor authentication (2FA) if available
- Never share your login credentials with anyone
- Log out after each session, especially on shared or public devices
- Notify us immediately at [email protected] if you suspect unauthorized access to your account
10 Cookies & Tracking Technologies
rptoto uses cookies and similar tracking technologies to enhance your user experience, analyze site traffic, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.
10.1 Types of Cookies We Use
- Essential Cookies: These cookies are strictly necessary for the platform to function. They enable account login, session management, and secure transaction processing. You cannot opt out of essential cookies without disabling core functionality.
- Performance Cookies: These cookies collect information about how you use our website, such as which pages you visit most often and whether you encounter error messages. Data collected is aggregated and anonymized.
- Functional Cookies: These cookies remember your preferences (language selection, display settings) to provide a more personalized experience.
- Targeting/Advertising Cookies: These cookies track your browsing behavior across our site to deliver relevant promotional offers and advertisements. They may also be used to limit the number of times you see an ad and measure campaign effectiveness.
10.2 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain types of cookies, or notify you when a cookie is being set. Please note that disabling essential cookies may impair your ability to use certain features of the rptoto platform.
10.3 Third-Party Cookies
Some cookies on our site are set by third parties, such as game providers (Pragmatic Play, Evolution Gaming) and analytics services. These third parties have their own privacy policies governing their use of cookies. rptoto does not control third-party cookies.
11 Your Privacy Rights
As a Member of rptoto, you have the following rights with respect to your personal data:
11.1 Right to Access
You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
11.2 Right to Rectification
If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most information directly through your account settings.
11.3 Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Please note that we may be legally required to retain certain data (e.g., for AML compliance, tax purposes, or ongoing legal proceedings) even after you request deletion.
11.4 Right to Restrict Processing
You have the right to request that we temporarily suspend processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
11.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another service provider, where technically feasible.
11.6 Right to Object
You have the right to object to processing of your personal data for direct marketing purposes at any time. You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any promotional email or by adjusting your account preferences.
11.7 Right to Withdraw Consent
Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
11.8 How to Exercise Your Rights
To exercise any of these rights, please contact our support team at [email protected] with your full name, registered email address, and a description of your request. We will respond to all requests within 30 calendar days. We may require additional information to verify your identity before processing your request.
12 Protection of Minors
rptoto's services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. All Members are required to provide proof of age during the KYC verification process.
If we become aware that we have inadvertently collected data from an individual under 21, we will immediately suspend the account, delete all associated personal information, and return any deposited funds (minus any winnings, which will be forfeited).
If you are a parent or guardian and believe that your child has provided personal information to rptoto, please contact us immediately at [email protected] so that we can take appropriate action.
13 International Data Transfers
rptoto operates internationally and may transfer your personal data to servers located outside Indonesia. This includes transfers to jurisdictions that may not provide the same level of data protection as Indonesian law.
When we transfer data internationally, we ensure that appropriate safeguards are in place, such as:
- Transferring data only to countries recognized as providing an adequate level of data protection
- Implementing standard contractual clauses approved by recognized data protection authorities
- Requiring third-party service providers to adhere to internationally recognized data protection frameworks
By using the rptoto platform, you acknowledge and consent to the international transfer and processing of your personal data as described in this Privacy Policy.
14 Changes to This Privacy Policy
rptoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:
- Sending an email to the address registered on your account
- Displaying a prominent notice on the rptoto homepage and/or within your account dashboard
- Updating the "Last Updated" date at the top of this Privacy Policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the rptoto platform following notification of changes constitutes your acceptance of the revised Privacy Policy.
If you do not agree with any changes to this Privacy Policy, you must cease using our services and request account closure before the changes take effect.
15 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how rptoto handles your personal data, please contact us through the following channel:
- Email: [email protected]
- Subject Line: "Privacy Inquiry — [Your Registered Email Address]"
- Response Time: We aim to respond to all privacy-related inquiries within 48 hours, and to fully resolve data access, correction, or deletion requests within 30 calendar days.
For formal complaints regarding our data handling practices, please mark your email as "Formal Privacy Complaint — Escalation". We take all privacy concerns seriously and will investigate and respond to your complaint in accordance with applicable data protection regulations.
Your Privacy Matters to Us
At rptoto, data protection is not just a legal obligation — it is a core value. We are committed to transparency, security, and respect for your privacy rights. If you have questions or need assistance with your account, our support team is always here to help.