namatoto Platform Privacy Notice

This page describes what we collect when you use namatoto and how we keep that data protected. When you open an account on namatoto, provide identity documents for verification, or fund your account through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers via mobile banking, local payment, online payment, and e-wallet, we gather and store your personal information. We treat this data as sensitive and apply strict safeguards to prevent unauthorized access.

We at namatoto are committed to transparency about how we handle your information. This notice explains what categories of data we collect, why we collect them, how long we retain them, who we share them with, and what rights you have. Our approach is to collect only what is necessary for account administration, payment processing, fraud prevention, and legal compliance. We do not sell your data to marketing companies or use it for purposes unrelated to your account.

If you have questions about how we handle your data, or if you wish to exercise your privacy rights, you can contact our support team in English at any time.

What data we collect on namatoto

We collect several categories of information when you create and use your namatoto account. First, we collect your identity information: full name, date of birth, email address, phone number, and government-issued ID number. This data is mandatory for account verification and required by law to prevent underage access and money laundering. We store your ID photo separately from your gaming account to restrict access to authorized compliance staff only.

Second, we collect payment information when you deposit or withdraw. We do not store your full banking credentials or card numbers directly on our servers. Instead, we store a reference ID linking your account to your payment method, and we record every transaction—date, time, amount, payment method, and status. This transaction history is retained for seven years to comply with financial regulations in Southeast Asia.

Third, we collect game and account activity data. This includes every game you play—slots, live-dealer tables, sports and esports markets—along with your stakes, outcomes, and balance changes. We also log your login times, device information, and IP addresses for account security purposes. This data helps us detect unusual access patterns and prevent fraud.

How we use your data on namatoto

We use your data for several essential purposes. First, we use it to administer your account: verify your identity, process your deposits and withdrawals, and display your balance and transaction history. Second, we use it for fraud prevention and account security. We analyze your login patterns, device changes, and transaction sizes to detect suspicious activity. If we notice something unusual—such as a very large withdrawal or a login from a new location—we may freeze your account and contact you to verify.

Third, we use your data to comply with law. We are required by Indonesian financial regulations and international anti-money-laundering (AML) standards to maintain transaction records and to report suspicious activity to relevant authorities. This is a legal obligation, not optional. Fourth, we use your email and phone to contact you about account issues, security alerts, or promotional offers (which you can opt out of). Fifth, we use aggregated, anonymized data to improve our platform—for example, understanding which games are most popular or which payment methods are used most frequently.

We do not use your data for purposes outside these categories. We do not sell your information to data brokers, affiliate marketers, or third-party advertisers. We do not use your data to profile you for credit decisions or to make automated decisions that significantly affect you.

Third-party processors and namatoto data sharing

We work with trusted third-party processors to operate namatoto. Our payment partners—DANA, e-wallet, mobile banking, local payment, online payment, e-wallet providers, and mobile banking, local payment, online payment, e-wallet—receive your payment information only to the extent necessary to process your transaction. We have data-processing agreements in place with each partner requiring them to protect your data and use it only for payment processing.

Our hosting provider stores our servers in secure data centres. Our servers may be located outside Indonesia; when your data crosses borders, it remains encrypted. We select hosting providers that comply with international data security standards.

We may disclose your data if required by law—for example, if a court orders us to provide information, or if law enforcement presents a warrant. We also share data with our legal and compliance advisors when necessary to investigate suspected fraud or violations of our terms. Except in these circumstances, we do not share your personal data with any other parties.

How long we keep your data

We retain your identity and account information for as long as your namatoto account is active, plus five years after closure. This allows us to respond to disputes, comply with tax and accounting requirements, and maintain audit trails. Payment transaction records are retained for seven years as required by financial regulations. Game history is retained for five years.

After these periods, we securely delete data or anonymize it so that it no longer identifies you. We undertake to delete data sooner if you request account closure and have no outstanding disputes or regulatory obligations requiring us to retain it.

Your rights regarding your namatoto data

You have several rights regarding your personal data. You can request access to all the data we hold about you. We will provide this information within 30 days of your request. You can request that we correct any inaccurate information—for example, if your phone number or address has changed. You can request deletion of your data, although we may retain some records if we have legal obligations to do so.

You can request that we restrict our use of your data—for example, asking us not to send marketing emails. You can withdraw your consent to cookies or analytics at any time. To exercise any of these rights, contact our support team in English with details of your request. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

• 1
  Request access to your dataData access

  We will provide a copy of all data we hold about you within 30 days

• 2
  Request correction of dataData accuracy

  Ask us to correct inaccurate or outdated information in your namatoto account

• 3
  Request deletion of dataData deletion

  Ask us to delete your data, subject to any legal retention obligations

• 4
  Withdraw consent to marketingMarketing opt-out

  Ask us to stop sending you promotional emails or other marketing communications

• 5
  Lodge a formal complaintEscalation

  If unsatisfied with our response, contact the data protection authority in your jurisdiction

Cookies and analytics on namatoto

We use cookies to remember your login state, store your preferences, and track how you use our platform. Most of our cookies are essential for namatoto to function—for example, session cookies that keep you logged in. Some cookies are non-essential and used for analytics; these track which games are popular or how users navigate the site. You can refuse non-essential cookies through your browser settings without affecting core functionality.

We use analytics tools to understand traffic patterns and improve our platform. These tools may set their own cookies and may send aggregated data to third parties. We do not use this data to track you across other websites or to build profiles used for targeted advertising.

Data security on namatoto

We at namatoto employ technical and organizational safeguards to protect your data. All connections between your device and our servers are encrypted using HTTPS and TLS protocols. Your password is hashed using industry-standard algorithms; we cannot reverse it or retrieve it. We store sensitive data such as ID photos on encrypted servers with restricted access.

Our systems undergo regular security audits and penetration testing. We maintain incident-response procedures and notify users immediately if a breach occurs. We recommend that you enable two-factor authentication on your namatoto account, use a strong password, and log out when finished using our platform.

Summary and contact

We at namatoto collect personal data necessary to operate your account, process your payments, prevent fraud, and comply with law. We do not sell your data, use it for marketing outside namatoto, or share it with unaffiliated third parties except where required by law. We retain your data for defined periods and delete it securely when no longer needed. You have the right to access, correct, delete, or restrict our use of your data.

This privacy notice may be updated from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email. Your continued use of namatoto after such changes constitutes acceptance of the updated notice. If you have any questions about our privacy practices or wish to exercise your rights, contact our support team in English.

Related pages