Privacy Policy

1. Introduction

m1toto ("we," "us," or "our") operates an online gambling platform accessible at m1toto.cam (the "Website"). We provide casino games, sports betting, togel lottery services, and other gaming products to our Members. This Privacy Policy applies to all personal information we collect through our Website, mobile applications, customer service channels, and any other digital platforms we operate.

We recognize that privacy is important to our Members, particularly in the context of online gambling where financial transactions and sensitive personal information are involved. We have implemented robust technical and organizational measures to ensure your data is protected from unauthorized access, disclosure, alteration, or destruction.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide Directly

When you register an Account with m1toto, you voluntarily provide us with certain personal information necessary to deliver our services:

• Account Registration Data: Full legal name, date of birth, gender, residential address (including city and postal code), email address, mobile phone number, and preferred username.
• Identity Verification Documents: Government-issued identification (such as Indonesian National Identity Card or passport), proof of address documents (utility bills, bank statements), and proof of payment method ownership. These documents are required to comply with Know Your Customer (KYC) and anti-money laundering regulations.
• Financial Information: Bank account details (bank name, account number, account holder name) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay phone numbers or account IDs) used for deposits and withdrawals. We do not store credit card numbers; payment processing is handled by certified third-party payment processors.
• Communication Records: Content of your communications with our customer support team via live chat, email, WhatsApp, Telegram, or phone, including any attachments, screenshots, or documents you provide.
• Survey and Feedback Data: Responses to voluntary surveys, feedback forms, or promotional questionnaires you choose to complete.

2.2 Information Collected Automatically

When you access our Website or use our services, we automatically collect certain technical and usage information:

• Device Information: Type of device (desktop, mobile, tablet), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, and device identifiers (such as IP address and device fingerprint).
• Connection Data: IP address, Internet Service Provider (ISP), geographic location (country, region, city derived from IP address), time zone settings, and connection timestamps.
• Usage Data: Pages visited, games played, bets placed, time spent on each page, clickstream data, navigation paths, search queries, feature usage patterns, and other behavioral analytics.
• Transaction History: Complete record of all deposits, withdrawals, bets, wagers, wins, losses, bonus claims, and account balance changes.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to recognize your browser, remember your preferences, analyze traffic patterns, and personalize your experience. See Section 8 for detailed information about cookies.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data, payment status updates, and fraud risk assessments from our payment service providers (banks and e-wallet operators).
• Identity Verification Services: Age verification confirmations, identity document authenticity checks, and fraud detection alerts from specialized KYC service providers.
• Affiliate Partners: Referral source information if you accessed m1toto through an affiliate marketing partner.
• Social Media: If you choose to link your Account to social media platforms or use social login features, we may receive basic profile information such as name, email address, and profile picture in accordance with the platform's privacy settings and permissions you grant.

3. How We Use Your Information

m1toto uses your personal information for the following legitimate business purposes:

3.1 Service Delivery and Account Management

• Creating and maintaining your Account
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets and play games
• Calculating and crediting winnings, bonuses, and rewards
• Providing customer support and responding to inquiries
• Managing your VIP tier status and loyalty program benefits
• Sending transactional notifications (deposit confirmations, withdrawal approvals, account status updates)

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement for Indonesian residents)
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Detecting, preventing, and investigating fraud, collusion, and other prohibited activities
• Responding to legal requests from law enforcement or regulatory authorities
• Enforcing our Terms & Conditions and other policies
• Maintaining audit trails and transaction records as required by law

3.3 Responsible Gaming

• Monitoring gambling behavior for signs of problem gambling
• Implementing deposit limits, loss limits, and session time limits
• Processing self-exclusion requests
• Providing access to responsible gaming tools and support resources
• Intervening proactively if we detect concerning patterns of play

3.4 Marketing and Communications (With Your Consent)

• Sending promotional emails about bonuses, tournaments, and special offers
• Providing personalized game recommendations based on your play history
• Notifying you about new games, features, or platform updates
• Sending birthday bonuses and anniversary rewards
• Conducting market research and customer satisfaction surveys

Important: You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting customer support. Opting out of marketing does not affect transactional or service-related communications, which are necessary for Account operation.

3.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve game selection and user experience
• Testing new features and functionalities
• Troubleshooting technical issues and optimizing platform performance
• Generating aggregated, anonymized statistics for business intelligence
• Training machine learning models to enhance fraud detection and risk management

4. Legal Basis for Processing (GDPR Compliance)

For Members in jurisdictions covered by the General Data Protection Regulation (GDPR) or similar data protection laws, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when creating your Account (e.g., processing transactions, providing customer support).
• Legal Obligation: Processing required to comply with applicable laws and regulations (e.g., KYC verification, AML compliance, age verification).
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and internal administration, provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, such as receiving marketing communications or enabling optional tracking technologies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. How We Share Your Information

m1toto does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

5.1 Service Providers

We engage trusted third-party service providers to assist with business operations. These providers have access to personal information only as necessary to perform their functions and are contractually obligated to maintain confidentiality:

• Payment Processors: Banks, e-wallet operators, and payment gateways that facilitate deposits and withdrawals.
• Identity Verification Services: Specialized KYC/AML providers that verify identity documents and perform fraud checks.
• Cloud Infrastructure: Hosting providers and data center operators that store and process data on our behalf.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication infrastructure providers.
• Analytics Providers: Web analytics and business intelligence tools that help us understand platform usage.
• Email Service Providers: Marketing automation and transactional email delivery services.

5.2 Game Providers and Platform Partners

When you play games from third-party providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt), minimal necessary information (such as username and session ID) is shared to enable gameplay. These providers operate under their own privacy policies and are bound by strict data protection agreements.

5.3 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulators, courts, or government authorities if required by law or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Protect our rights, property, or safety, or that of our Members or the public
• Investigate, prevent, or take action regarding suspected fraud, illegal activities, or violations of our Terms & Conditions
• Respond to claims that any content violates third-party rights

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor as part of the business transition. We will notify you via email or prominent notice on our Website before your information is transferred and becomes subject to a different privacy policy.

6. Data Security

m1toto implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same security standard used by major financial institutions.
• Secure Storage: Personal information is stored on secure servers in geographically distributed data centers with physical access controls, surveillance, and redundancy systems.
• Access Controls: Access to personal information is restricted on a need-to-know basis using role-based permissions. All access is logged and regularly audited.
• Password Protection: Account passwords are hashed using advanced cryptographic algorithms and are never stored in plain text.
• Two-Factor Authentication: We offer optional two-factor authentication (2FA) for enhanced Account security.
• Regular Security Audits: Our systems undergo regular security assessments, penetration testing, and vulnerability scans by independent cybersecurity experts.
• Employee Training: All employees with access to personal information receive data protection training and are bound by strict confidentiality agreements.
• Incident Response: We maintain a documented incident response plan to detect, respond to, and recover from security breaches.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and should notify us immediately if you suspect any unauthorized access.

7. Data Retention

m1toto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Information associated with active Accounts is retained indefinitely while your Account remains open and in good standing.
• Closed Accounts: After you close your Account, we retain transaction records, KYC documents, and communication logs for a minimum of seven (7) years to comply with financial regulations, anti-money laundering laws, and tax requirements.
• Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again.
• Legal Requirements: Certain data may be retained longer if required for ongoing legal proceedings, regulatory investigations, or dispute resolution.
• Aggregated Data: We may retain aggregated, anonymized data (which cannot identify you personally) indefinitely for analytical purposes.

8. Cookies and Tracking Technologies

m1toto uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, authenticate your sessions, and track your interactions.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly. These enable core features like Account login, security authentication, and transaction processing. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how visitors use our Website, such as which pages are most popular and whether visitors encounter errors. This helps us improve platform performance.
• Functionality Cookies: Remember your preferences (such as language settings, display options, and game favorites) to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness. These cookies may be set by third-party advertising partners.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may limit your ability to use certain features of our Website. Consult your browser's help documentation for instructions on managing cookies.

9. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request deletion of your personal information, subject to legal retention requirements and legitimate business interests.
• Right to Restriction: You may request that we limit the processing of your personal information in certain circumstances.
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal information for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us at [email protected] with your request. We will respond within thirty (30) days. For security purposes, we may require identity verification before fulfilling your request.

10. International Data Transfers

m1toto operates internationally and may transfer your personal information to servers located in countries outside Indonesia, including jurisdictions with different data protection standards. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses, encryption, and access controls to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection laws.

11. Children's Privacy

m1toto's services are strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a person under 21 has provided us with personal information, we will immediately delete such information and close the associated Account. If you believe a minor has registered an Account or provided personal information to us, please contact us immediately at [email protected].

12. Third-Party Links

Our Website may contain links to third-party websites, game providers, or services that are not operated by m1toto. This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

m1toto reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be notified to you via email or through a prominent notice on our Website at least thirty (30) days before the changes take effect. Your continued use of our services after the effective date of any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on our Website
• Response Time: We aim to respond to all privacy inquiries within 48 hours

For data protection inquiries specifically, please use the subject line "Privacy Request" to ensure your message is routed to the appropriate team.