kukutotoPrivacy Policy

This page describes what we collect when you use kukutoto and how we keep that data protected. We at kukutoto operate an online gaming and sportsbook platform accessible via Android APK and iOS browser in supported jurisdictions. Your account data — email, payment information, transaction history — is encrypted and stored securely. We do not sell your personal information to third parties.

Our privacy practices reflect the jurisdictions we serve. If our servers sit outside your country, we comply with applicable data-protection requirements. This policy explains your rights, how to contact us about your data, and what happens if you request deletion or correction.

Read this page carefully to understand how we handle your information on kukutoto.

What Data We Collect on kukutoto

We collect the following information when you register and use kukutoto: your full name, phone number, email address, date of birth, residential address, and a password you create. We also collect government-issued ID and proof of address during account verification (KYC). These documents are scanned and stored securely.

When you make deposits or withdrawals on kukutoto, we record the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer), the amount, and the timestamp. We log your login history — times you access the app, IP address, device type (Android or iOS), and browser version. We track your game activity — which games you play, your stakes, and your results — for account verification and fraud prevention.

Note: We do not share your payment information with third-party marketers. Your bank details and e-wallet credentials are processed only by our licensed payment processors.

How We Use Your Data on kukutoto

We at kukutoto use your data for six main purposes. First, we verify your identity and comply with anti-money-laundering regulations — this is why we require KYC. Second, we process deposits and withdrawals — your payment information is shared only with our payment processor. Third, we detect fraud and prevent abuse — we monitor accounts for suspicious patterns and restrict accounts that breach our termsFourth, we provide customer support — our team uses your account history to resolve login issues, withdrawal questions, and game-rule inquiries. Fifth, we improve our platform — we analyze aggregate gameplay data (not individual bets) to optimize our mobile app and game offerings. Sixth, we comply with legal requirements — we retain records to respond to government requests if they arise.

KYC verification
We store your ID and address proof to comply with local anti-money-laundering law.
Payment processing
We share your bank account or e-wallet details with our payment processor only.
Fraud detection
We monitor account activity to prevent unauthorized access and betting patterns that may indicate abuse.
Support
Our team accesses your account history only to resolve account or payment issues you report.

Third-Party Processors and Data Sharing

We at kukutoto share your data with third-party service providers who help operate our platform. Our payment processor (licensed to handle mobile banking, local payment, online payment, e-wallet, mobile banking, and bank transfers) receives your payment information to process deposits and withdrawals. Our identity-verification partner receives your ID and address proof to confirm you are the account holder. Our analytics provider receives aggregate (anonymized) data on player preferences — not your individual bets or balances.

Each third-party processor is contractually obligated to protect your data and use it only for the purpose we specify. We do not allow them to sell or share your information with other parties. If our payment processor sits in another country, we ensure it complies with applicable data-protection law.

Security and Encryption on kukutoto

Your account data on kukutoto is encrypted using industry-standard protocols (TLS/SSL). All data transmitted between your mobile device and our servers is encrypted so that unauthorized parties cannot intercept it. Your password is hashed — we do not store it in plain text. Our servers are protected with firewalls and intrusion-detection systems.

You can enable two-factor authentication (2FA) in your account settings to add an extra security layer. If you forget your password, use the "Reset Password" link on the login page — we send a secure reset link to your registered email. Never share your password or 2FA codes with anyone, including our support team.

Your Rights Regarding Your Data

You have the right to request a copy of your personal data that we hold. You can request this via live chat in the kukutoto app or by email to our support team. We will provide a complete account export within a reasonable timeframe. You also have the right to correct inaccurate data — if your address or phone number has changed, update it in your account settings.

You may request deletion of your account and associated data. However, we retain transaction records and KYC documents for as long as required by law (typically 5 to 7 years for anti-money-laundering compliance). We will delete personal data we no longer need — such as historical login records — once the retention period expires. If you request account closure, any remaining balance will be withdrawn to your original payment method before deletion.

Cookies and Tracking on kukutoto

We at kukutoto use cookies and similar tracking technologies when you access our platform on mobile browser (iOS). Cookies store your session ID so you remain logged in across pages without re-entering your password. They also store your language preference and any settings you customize. You can disable cookies in your browser settings, but this may prevent kukutoto from working correctly.

We do not use cookies to track you across other websites. Our analytics provider may use pixel tags (small tracking images) to count page views and measure how users navigate our platform — this helps us identify which games are popular and where users encounter issues.

Jurisdiction and Data Location

Our servers may sit in jurisdictions outside your country. We comply with applicable data-protection law in the jurisdictions where we operate. If you are accessing kukutoto from Jakarta, Surabaya, Bandung, or Medan, you acknowledge that your data may be processed and stored outside Indonesia. Our data-processing agreements with third parties ensure they apply equivalent security standards regardless of location.

Data Retention on kukutoto

We retain your account information for as long as your account is active. If you close your account, we retain transaction records, KYC documents, and login history for 5 to 7 years for legal-compliance purposes. We delete other personal data (such as device history and session logs) within 2 years of your last login. If you request account deletion, we accelerate this timeline where legally permitted.

Contact Us About Your Data

If you have questions about our privacy practices or want to request your data, contact our support team via live chat in the kukutoto app or email. We can assist with data-access requests, correction requests, deletion requests, and general privacy inquiries. We will respond within a reasonable timeframe — typically a few days for simple requests, and longer for complex data exports.

If you believe your data has been mishandled or you have a privacy complaint, you may escalate your concern to our management team. We will investigate and respond with our findings and any remedial action.

Collect
Name, email, ID
Encrypt
TLS/SSL standard
Share
Payment processor only
Retain
5-7 years compliance

Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. Changes will be posted on this page, and we will notify you via email or in-app notification if the changes are significant. Your continued use of kukutoto after changes are posted constitutes your acceptance of the updated policy. If you do not agree to the changes, you must stop using our platform.

Our services are available only where local law permits. Users are responsible for verifying that their use of kukutoto complies with their own jurisdiction's data-protection and privacy law.