pditoto Casino & Sportsbook Data Care

This page describes what we collect when you use pditoto and how we keep that data protected. We collect personal information to verify your identity, process your deposits and withdrawals, and comply with applicable law. Our servers encrypt your data in transit and at rest; your account balance and transaction history are segregated from your identity documents in separate secure systems.

We do not sell your information to third parties. We may share limited data with payment processors (banks, e-wallet operators) to complete your transactions, and with compliance authorities if required by law. You have rights to access, correct, or request deletion of your personal data subject to applicable data protection law and our record-retention obligations.

What We Collect on pditoto & How We Use It

We at pditoto collect the minimum personal data necessary to operate our platform securely. During account creation, we collect your full name, email address, and mobile phone number. For identity verification (KYC), we request a government-issued identification document (national ID card or passport) and proof of banking information (account statement or e-wallet screenshot). We use this data solely to verify you are who you claim to be, prevent fraud, and comply with anti-money-laundering regulations.

Once your account is active, we log all transactions: deposits, withdrawals, bets placed, and game outcomes. Your betting history is recorded separately from your identity documents. We retain transaction logs indefinitely for compliance and dispute resolution; we retain KYC documents for the duration of your account plus seven years after closure (or as required by applicable law in your jurisdiction). Your password is encrypted using industry-standard hashing; we do not store it in plaintext and cannot retrieve it. If you forget your password, our password reset process sends a recovery link to your registered email, allowing you to set a new password securely.

Our pditoto Payment & Third-Party Processors

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we do not handle your banking credentials directly. Instead, we redirect you to your bank or e-wallet provider's secure login. Your credentials are entered on their servers, not on pditoto. We receive only a confirmation that your deposit succeeded; the actual banking information is never stored on our systems.

We share limited information with payment processors to facilitate withdrawals. When you request a withdrawal, we transmit your name, account number or e-wallet ID, and withdrawal amount to your chosen payment method provider. These processors are bound by their own privacy policies and data-protection obligations. We do not control how they use your data; you should review their privacy terms independently. We may also share anonymized transaction data (e.g., aggregate deposit volumes, withdrawal trends) with compliance partners to detect fraud or money-laundering patterns, but this data contains no personally identifiable information.

Identity data

Government ID, name, email, phone: collected at signup and for KYC verification. Stored separately from betting history.

Banking information

Account numbers, e-wallet IDs: transmitted to payment processors for deposit/withdrawal only. Not stored on pditoto servers.

Transaction logs

All bets, deposits, withdrawals: recorded permanently for compliance and dispute resolution.

Cookies & device data

Session cookies track your login; device fingerprinting detects suspicious access. No third-party tracking pixels.

Our pditoto Cookies, Device Fingerprinting & Tracking

We use session cookies to keep you logged in while you browse pditoto. These cookies expire when you close your browser or log out manually. We do not use persistent cookies that track you across visits unless you enable "remember me" at login, in which case a secure token is stored for up to 30 days. We do not use third-party tracking pixels or analytics scripts; we do not share your browsing behaviour with external analytics providers.

We employ device fingerprinting to detect unusual login patterns. This means we record technical details about your device (browser type, IP address, operating system) to flag suspicious access attempts. If you log in from an unexpected location or device, our system may prompt for additional verification or temporarily restrict account features. This is a security measure; it does not expose your identity to third parties. You can clear your device fingerprint by changing your password or enabling two-factor authentication, which resets our security profile for your account.

Your Rights on pditoto & Data Deletion

You have the right to access all personal data we hold about you. Submit a data-access request through your pditoto account help centre; we respond within ten business days with a downloadable file containing your identity records, transaction history, and any support correspondence. You may request correction of inaccurate data (e.g., if your name is misspelled) by contacting our support team; we correct the error and notify you once complete.

You may request deletion of your personal data subject to legal constraints. We cannot delete transaction logs if they are required for compliance (e.g., KYC records must be retained for seven years). However, we can anonymize your identity within those records so that future audits cannot link transactions to you personally. Account closure is permanent: once you request closure, your account cannot be reopened and all personal data associated with it (except legally required records) is deleted or anonymized within 30 days. Withdrawal of personal data for marketing purposes can be done through your account preferences; we do not send promotional emails once you opt out.

International Data Transfer & Server Location

Our pditoto servers may be located outside your jurisdiction. If you are in Indonesia and we store data outside Indonesia, that transfer is necessary to operate our platform securely and globally. We ensure all international transfers comply with applicable data protection law by implementing standard contractual clauses or other lawful transfer mechanisms. Data in transit is encrypted; data at rest is encrypted. We conduct regular security audits and penetration testing to ensure no unauthorised access occurs.

We maintain backup servers in multiple geographic regions to ensure service availability during outages. These backups are encrypted and access-restricted; only our senior infrastructure team can retrieve data from them. If a backup is compromised, we notify all affected users within seven days and assist with password reset and account recovery. We do not intentionally transfer your data to surveillance regimes; however, we cannot guarantee protection against government requests in the jurisdictions where our servers reside. If we receive a legal order to disclose your data, we comply and notify you unless legally prohibited from doing so.

pditoto Data Protection & Policy Changes

We at pditoto are committed to protecting your data with industry-standard security practices. Our infrastructure undergoes annual third-party security audits; we patch vulnerabilities within 48 hours of discovery. We employ encryption (TLS 1.3) for all data in transit and AES-256 encryption for data at rest. Access to your personal data is restricted to pditoto employees with a legitimate business need; all access is logged and audited.

We may update this privacy policy at any time. We notify you of material changes through in-app messaging and will not retroactively apply changes to data we have already collected. Continued use of pditoto after changes are published constitutes acceptance of the updated policy. If you disagree with new terms, you may request account closure and data deletion (subject to legal retention requirements).

For questions about this privacy policy, contact our support team through your pditoto account help centre. For data-access requests or deletion inquiries, select "data privacy" from the support menu and we respond within ten business days. If you have a complaint about how we handle your data, you may lodge a formal complaint with the data protection authority in your jurisdiction. Our terms and conditions and legal notice provide additional information about your rights and our obligations. Our services are available only where local law permits; users remain responsible for verifying compliance with their jurisdiction's law.

pditoto legal & support resources