maktoto Privacy Policy
This page describes what we collect when you use maktoto and how we keep that data protected. We at maktoto are committed to transparency about personal information, how we process it, and the rights you hold over your own data. Our privacy practices comply with Indonesian data protection frameworks and applicable regional laws.
When you sign up for a maktoto account, deposit via DANA, e-wallet, mobile banking, or bank transfer, or engage with our football markets, live-dealer tables, or slot games, we collect specific information to verify your identity, process payments, and deliver our services. This policy outlines what we collect, why, how long we keep it, and how you can request access or deletion.
Our approach is straightforward: we collect only what we need, we encrypt it in transit and at rest, we do not sell your data to third parties, and we give you tools to manage your information at any time.
What Data We Collect on maktoto
We collect data in three categories: account information, payment information, and behavioural information.
Account Information: When you sign up, we collect your email address, phone number, password (hashed and salted), date of birth, and full name. During KYC verification, we collect a scanned copy of your Indonesian national ID (KTP, passport, or driver's licence) and proof of address (utility bill or bank statement). We also store your preferred language, timezone, and account preferences (e.g., notification settings).
Payment Information: When you deposit, we collect the payment method you select (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the amount, and the transaction timestamp. We do not store your full payment card or wallet credentials; payment details are handled by our encrypted payment gateway and your payment provider. We retain transaction records for compliance and dispute resolution.
Behavioural Information: We log your login times, IP addresses, device type (mobile or desktop), browser type, and game activity—which games you access, how long you play, and settlement outcomes (win or loss). We also collect your session history to detect fraud, prevent unauthorised access, and personalise your experience.
How We Use Your Data
We use your data for six purposes:
- Account verification: We verify your identity and address to comply with KYC regulations and prevent fraud.
- Payment processing: We use payment and account information to process deposits, withdrawals, and loyalty cashback.
- Service delivery: We use login and game data to deliver maktoto's services—loading your account balance, settling game outcomes, and calculating loyalty points.
- Fraud prevention: We monitor login patterns, IP addresses, and transaction patterns to detect and prevent unauthorised account access or money laundering.
- Compliance: We retain data to comply with Indonesian financial regulations, anti-money-laundering (AML) laws, and legal holds.
- Customer support: We use your account history to respond to support queries about deposits, withdrawals, game disputes, or account access issues.
Third-Party Processors and Data Sharing
We share your data with third parties only when necessary for service delivery, and only under strict data protection agreements.
Payment Processors: When you deposit via mobile banking, local payment, online payment, or e-wallet, those payment providers receive your transaction amount, timestamp, and account identifier. They do not receive your maktoto password or full personal details; payment details are encrypted and handled by their secure gateways.
KYC Verification Partners: Our KYC verification team—based across Jakarta, Surabaya, Bandung, Medan, and Semarang—manually reviews your ID documents. These team members are employees of maktoto or contracted verification agents bound by confidentiality agreements.
Game Providers: When you play games on maktoto—slots, live-dealer tables, or esports markets—our game providers receive your session ID, game outcome, and bet/win amounts. They do not receive your personal identity or payment information; we use pseudonymised identifiers to protect your privacy.
Compliance and Legal: If we receive a legal request (subpoena, court order, or regulatory inquiry) from Indonesian authorities or law enforcement, we may disclose your data as required by law. We do not voluntarily share data with government agencies; disclosure occurs only under legal mandate.
Your data is yours. We do not sell it, rent it, or trade it. We use it only to serve you and comply with law.
Data Retention and Deletion
We retain your data for different periods depending on its type and legal requirements.
Active Accounts: For accounts in regular use, we retain all data (account information, payment history, game activity) for the duration of your account. You can delete your account at any time via Account > Settings > Close Account; upon deletion, we anonymise your personal data within 30 days but may retain transaction records for compliance (7 years under Indonesian financial law).
Inactive Accounts: If your account shows no login or activity for 12 months, we may flag it for closure. We will email you a warning; if you do not respond within 60 days, we close the account and anonymise your data.
KYC Documents: Your ID scans and proof of address are retained for 7 years after account closure to comply with AML regulations, then securely deleted.
Payment Records: Transaction history is retained for 7 years for regulatory compliance and dispute resolution, then deleted.
Your Rights on maktoto
You hold several rights over your data on maktoto:
- Right to access: You can request a copy of all data we hold about you. Log into your account and select Account > Privacy > Download My Data; we will compile and email your data within 14 days.
- Right to correct: If your account information is inaccurate, log into Account > Settings and update your email, phone, or preferences. If your KYC documents contain errors, contact our support team and we will guide you through re-verification.
- Right to delete: You can close your account and request deletion of your personal data. We will anonymise your data within 30 days, though transaction records may be retained for compliance.
- Right to restrict processing: You can opt out of promotional communications by toggling notifications in Account > Settings. We will continue processing data for essential service delivery and compliance.
- Right to lodge a complaint: If you believe we have mishandled your data, contact our support team or file a formal complaint with Indonesia's Personal Data Protection Authority.
Cookies and Tracking
We use cookies to improve your experience on maktoto. Cookies are small files stored on your device that help us recognise your account, remember your preferences, and detect fraud.
Essential Cookies: These cookies are necessary for maktoto to function—they store your session token so you stay logged in, and they allow us to detect unauthorised login attempts.
Analytics Cookies: We use analytics to understand how many users visit maktoto, which features are most popular, and where users encounter issues. This information helps us improve the platform. Analytics data is anonymised and does not contain personal information.
Marketing Cookies: We do not use third-party marketing cookies or sell your browsing data to advertisers. If you receive promotional emails from maktoto, it is because you opted in during signup or you have not disabled notifications in your account settings.
You can disable cookies in your browser settings, but this may affect maktoto's functionality.
Contact and Complaints
If you have questions about maktoto's privacy practices, contact our support team via live chat, email, or phone. Our multilingual team is available 24/7. If you believe we have violated your privacy rights, you can file a formal complaint with our compliance officer or with Indonesia's Personal Data Protection Authority.
This privacy policy was last updated in 2024 and may be revised as our practices evolve or regulations change. We will notify you of material changes by email.
Platform security layers
maktoto protects your personal data across multiple security layers. First, all data transmitted between your device and our servers uses SSL/TLS encryption—the same standard that secures banks and healthcare systems. This encryption ensures that your login credentials, payment information, and personal documents are unreadable to network eavesdroppers. Second, we store sensitive data—identification documents, payment account details, and KYC verification records—in encrypted vaults on our servers. These vaults use military-grade AES-256 encryption, meaning that even if a server is physically compromised, stored data remains unreadable without the encryption keys. Third, our encryption keys are stored separately from the encrypted data and accessed only by authorised systems via secure key-management infrastructure. Fourth, we use two-factor authentication (2FA) for high-risk operations like withdrawals; 2FA requires a one-time code sent to your registered phone number, preventing unauthorised access even if your password is stolen. Fifth, our servers are located in data centres with physical security, redundant power supplies, and 24/7 monitoring. Sixth, we conduct regular security audits by independent third-party firms and maintain a 24/7 incident-response team to detect and address any suspected breaches in real time. Seventh, all employee access to personal data is logged, restricted to necessary departments (verification, support, compliance), and bound by confidentiality agreements. Eighth, we maintain offline backups of critical data in secure vaults, protecting against ransomware or catastrophic data loss. Your account activity—including login times, IP addresses, and withdrawal requests—is logged with cryptographic checksums to create an immutable audit trail that cannot be altered retroactively, ensuring accountability and enabling dispute resolution.
Game fairness and RTP
maktoto's game fairness is guaranteed through different mechanisms depending on game type. For RNG-driven games—slots like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, and Mahjong Ways—outcomes are determined by certified random-number generators, not human discretion. Each game carries a published RTP (return-to-player) percentage, representing the theoretical long-term average payout. For example, an means that, over thousands of plays, the game returns an average of 96 to players for every 100 wagered. This is not a guarantee on any single session—variance means some sessions return more, others less—but over very large sample sizes, results approach the published percentage. RNGs are certified by the game provider and tested regularly by independent third-party labs to ensure statistical unbiasedness and fairness. maktoto does not alter game mechanics or RTPs; we deliver games exactly as providers designed them. For live-dealer games—blackjack, roulette, baccarat, Dragon Tiger—fairness is ensured through physical transparency: real dealers, real cards, and real tables are broadcast via multi-camera feeds, allowing you to observe outcomes in real time with no hidden algorithm. For sports markets like Liga 1, Piala AFF, and esports (Mobile Legends, Free Fire, PUBG Mobile), fairness is determined by odds accuracy—our odds reflect real-time information about team form, player availability, and historical performance, adjusted continuously as new information emerges. All games and markets are subject to regular independent audits, and any disputes are investigated by our compliance team and escalated if necessary.
KYC verification process
Know Your Customer (KYC) verification is a regulatory requirement designed to prevent money laundering, fraud, and underage access to gaming platforms. When you sign up on maktoto, you must provide a valid Indonesian national ID (KTP, passport, or driver's licence), proof of residence (utility bill, bank statement, or lease agreement dated within six months), and phone number confirmation via SMS. Our verification team—employees and contractors based across Jakarta, Surabaya, Bandung, Medan, and Semarang—manually reviews these documents within 24 business hours to confirm that the identity matches your account and that the address is current and valid. Documents must be clear, well-lit, and show all required fields without blurring or obstruction; if a document is unclear or expired, we email you with a re-submission option at no cost. Most accounts verify on their first submission. Once verified, you unlock deposit and withdrawal functionality. maktoto does not share your KYC documents with third parties outside our internal compliance team; all documents are stored in encrypted vaults and retained according to legal hold periods (typically 7 years for AML compliance). Re-verification may be requested if your account shows unusual activity or if regulatory requirements change, but routine accounts remain verified indefinitely once approved. Expedited review is available for higher-tier members; Platinum and Elite members often verify within 4–6 hours. If you have questions about the verification process or need assistance submitting documents, our support team is available via live chat, email, and phone.
User feedback and review channels
We monitor user feedback through multiple channels: in-app support messages, live-chat conversations, email inquiries, phone support, and indirect feedback from player communities on forums and review aggregator sites. When you contact maktoto support with a question, complaint, or suggestion, your message is logged, categorised, and routed to the appropriate department—technical, payments, compliance, or operations. We aim to respond to live chat within subject to verification during peak hours and to email within 4 hours on business days. We do not publish user ratings or reviews directly on maktoto; instead, independent review sites and player communities on Reddit and local Indonesian gaming forums reflect authentic user sentiment about our platform. When reading external reviews, keep in mind that users who experience issues are statistically more likely to post than users with routine positive experiences, so review averages may skew negative relative to true user satisfaction. If you have a formal complaint about data handling, payment delays, game fairness, or any other aspect of maktoto, contact our support team to file a formal complaint—your complaint is logged, investigated, and escalated to management. We maintain a complaints register and report aggregate trends to our compliance officer quarterly to identify systemic issues and drive service improvements. Your feedback is treated as essential input for continuous improvement, not as a liability or burden.