Data Protection

We use bank-level SSL encryption and secure storage protocols to protect your personal information from unauthorized access.

No Third-Party Sales

litoto never sells, rents, or trades your personal data to third parties for marketing purposes. Your information stays with us.

Your Privacy Rights

You have the right to access, correct, or delete your data at any time. Contact support to exercise your privacy rights.

1. Introduction and Scope

This Privacy Policy governs the collection, use, storage, and protection of personal information by litoto (hereinafter referred to as "we", "us", "our", or "litoto") in connection with your use of the litoto online gaming platform accessible at https://litoto.cam and any associated services, mobile applications, or software (collectively, the "Platform").

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any aspect of this policy, you must not use our services.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform. Where this Privacy Policy conflicts with the Terms & Conditions regarding data handling, the provisions of this Privacy Policy shall prevail.

Indonesia Context: While litoto operates internationally, we recognize that many of our users are residents of Indonesia. We handle personal data in accordance with international best practices and respect applicable Indonesian data protection principles. Users residing in jurisdictions with specific data protection regulations (such as GDPR in the European Union) are afforded the rights prescribed by those regulations to the extent applicable.

2. Information We Collect

litoto collects several categories of personal information to provide, maintain, protect, and improve our services. The types of information we collect include:

2.1 Information You Provide Directly

When you register an account with litoto, you voluntarily provide us with the following information:

  • Personal Identification Information: Full legal name, date of birth, gender, nationality, and residential address as required for age verification and regulatory compliance.
  • Contact Information: Email address, mobile phone number, and preferred communication method for account notifications, customer support, and security alerts.
  • Account Credentials: Username, password (stored in encrypted format), and any security questions or two-factor authentication settings you establish.
  • Payment Information: Bank account numbers, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card details, and transaction history necessary to process deposits and withdrawals. Note that full payment card numbers are not stored on our servers; we work with certified payment processors who handle this sensitive data in PCI-DSS compliant environments.
  • Identity Verification Documents: Government-issued identification documents (KTP, passport, driver's license), proof of address (utility bills, bank statements), and selfie verification photos submitted during the Know Your Customer (KYC) verification process.

2.2 Information Collected Automatically

When you access and use the litoto Platform, we automatically collect certain technical and behavioral information:

  • Device Information: Device type, operating system version, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
  • Connection Information: IP address, geographic location (country, city, region derived from IP address), internet service provider, and time zone settings.
  • Usage Data: Pages visited, games played, bets placed, time spent on various sections of the Platform, navigation patterns, click-through rates, and feature usage statistics.
  • Transaction Records: Complete history of all deposits, withdrawals, wagers, wins, losses, bonus claims, and account balance changes.
  • Communication Records: Transcripts of live chat conversations, email correspondence with customer support, WhatsApp message history, and any other communications between you and litoto.
  • Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance user experience, remember preferences, analyze Platform performance, and detect fraudulent activity. See Section 9 for detailed information on our cookie practices.

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from third-party sources, including:

  • Payment Processors: Transaction confirmation, payment method validation, and fraud detection signals from BCA, BRI, BNI, Mandiri, and other financial institutions or payment gateway providers.
  • Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized third-party verification services.
  • Game Providers: Game session data, outcome records, and gameplay statistics from third-party game studios whose content we host on the Platform.
  • Affiliate Partners: Referral source information if you accessed litoto through an affiliate marketing link.

3. How We Use Your Information

litoto uses your personal information for the following purposes, all of which are essential to operating a secure, fair, and legally compliant gaming platform:

3.1 Service Provision and Account Management

  • Create, maintain, and manage your litoto gaming account
  • Process deposits, withdrawals, and all financial transactions
  • Enable gameplay, place wagers, and credit winnings to your account
  • Apply bonuses, promotions, and VIP program benefits according to applicable terms
  • Authenticate your identity and verify your age (21+ requirement for Indonesian users)
  • Provide customer support and respond to your inquiries, complaints, and requests

3.2 Security, Fraud Prevention, and Compliance

  • Detect and prevent fraudulent activity, money laundering, underage gambling, and account abuse
  • Monitor for unusual betting patterns, collusion, or exploitation of software vulnerabilities
  • Enforce our Terms & Conditions and investigate violations
  • Comply with legal obligations including anti-money laundering (AML) regulations, responsible gaming requirements, and tax reporting where applicable
  • Respond to legal requests from law enforcement or regulatory authorities when required by law

3.3 Communication and Marketing

  • Send transactional notifications including deposit confirmations, withdrawal processing updates, bonus credits, and security alerts
  • Deliver promotional communications about new games, special offers, tournaments, and VIP program updates (you may opt out of marketing emails at any time)
  • Conduct customer satisfaction surveys to improve our services
  • Provide personalized game recommendations based on your playing history and preferences

3.4 Platform Improvement and Analytics

  • Analyze user behavior, preferences, and engagement patterns to improve Platform functionality
  • Test new features, game offerings, and user interface improvements
  • Generate aggregated, anonymized statistics and reports for internal business intelligence purposes
  • Optimize Platform performance, loading speeds, and mobile responsiveness

4. Legal Basis for Processing (GDPR Compliance)

For users in jurisdictions subject to the General Data Protection Regulation (GDPR) or similar comprehensive data protection laws, litoto processes your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing transactions, managing your account).
  • Legal Obligation: Processing is required to comply with applicable laws, including age verification, AML regulations, and tax reporting requirements.
  • Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, Platform improvement, customer support) provided these interests do not override your fundamental rights and freedoms.
  • Consent: For marketing communications and certain optional features, we rely on your explicit consent, which you may withdraw at any time.

5. How We Share Your Information

litoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we do share your information with carefully selected service providers and partners under the following circumstances:

5.1 Essential Service Providers

  • Payment Processors: Bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive necessary transaction details to process deposits and withdrawals.
  • Game Providers: Third-party game studios (Evolution Gaming, Pragmatic Play, and others) receive limited session data necessary to deliver game content and track gameplay.
  • Identity Verification Services: Specialized KYC providers receive identification documents and personal details solely for the purpose of verifying your identity and age.
  • Customer Support Tools: Live chat software providers and communication platforms used to deliver customer support services.
  • Cloud Infrastructure Providers: Secure server hosting and data storage providers that maintain our Platform infrastructure under strict confidentiality agreements.

5.2 Legal and Regulatory Disclosure

We may disclose your information to government authorities, law enforcement agencies, or regulatory bodies when:

  • Required by law, court order, subpoena, or legal process
  • Necessary to investigate fraud, security breaches, or illegal activity
  • Mandated under anti-money laundering or counter-terrorism financing regulations
  • Essential to protect the rights, property, or safety of litoto, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy proceeding involving litoto, your personal information may be transferred to the acquiring entity, provided the new entity agrees to treat your data in accordance with this Privacy Policy.

Data Processing Agreements: All third-party service providers who receive your personal information are contractually bound to handle it securely, use it only for the specified purposes, and maintain confidentiality. We conduct due diligence to ensure these partners meet international data protection standards.

6. Data Security Measures

litoto implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Safeguards

  • SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols (minimum 256-bit encryption).
  • Secure Data Storage: Personal information is stored on secure servers in access-controlled data centers with physical security measures (24/7 surveillance, biometric access controls, fire suppression systems).
  • Database Encryption: Sensitive data fields including passwords, payment information, and identification documents are encrypted at rest using AES-256 encryption.
  • Firewall Protection: Multi-layered firewall systems protect our infrastructure from external threats and unauthorized intrusion attempts.
  • Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly to identify and remediate potential weaknesses.

6.2 Organizational Safeguards

  • Access Controls: Employee access to personal information is strictly limited to those who require it to perform their job functions (customer support, compliance, technical administration). Access is granted on a need-to-know basis and logged for audit purposes.
  • Confidentiality Agreements: All litoto employees and contractors are bound by strict confidentiality agreements prohibiting unauthorized disclosure of user data.
  • Security Training: Staff receive regular training on data protection principles, phishing awareness, and secure handling of sensitive information.
  • Incident Response Plan: We maintain a documented incident response plan to address data breaches or security incidents promptly and transparently.

6.3 Your Security Responsibilities

While litoto implements robust security measures, you also play a critical role in protecting your account:

  • Choose a strong, unique password and never share it with anyone
  • Enable two-factor authentication if available
  • Log out of your account when using shared or public devices
  • Keep your email address and phone number secure, as these may be used for account recovery
  • Immediately notify customer support if you suspect unauthorized access to your account

7. Data Retention

litoto retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Category Retention Period
Account Information (active accounts) Duration of account activity plus 6 months
Transaction Records 7 years (regulatory requirement for financial records)
Identity Verification Documents 7 years (AML compliance requirement)
Communication Records 3 years (for dispute resolution purposes)
Marketing Consent Until consent is withdrawn or account is closed
Closed Account Data 6 months after closure, then anonymized or deleted

After the applicable retention period expires, personal information is either securely deleted or anonymized so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

litoto respects your privacy rights and provides mechanisms to exercise control over your personal information. Depending on your jurisdiction, you may have the following rights:

8.1 Right to Access

You have the right to request a copy of all personal information we hold about you. This includes account details, transaction history, communication records, and any data obtained from third-party sources. We will provide this information in a commonly used electronic format (typically PDF) within 30 days of your request.

8.2 Right to Rectification

If any of your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance with changes that require verification (such as name or date of birth corrections).

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances, including when the data is no longer necessary for its original purpose, when you withdraw consent for processing, or when processing is unlawful. Note that we may be required to retain certain information for legal or regulatory reasons even after a deletion request (e.g., financial records for tax purposes, identity documents for AML compliance).

8.4 Right to Restriction of Processing

You may request that we limit how we use your personal information, for example if you contest the accuracy of the data or object to processing based on legitimate interests. During the restriction period, we will store the data but not actively process it (except with your consent or for legal claims).

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider (where technically feasible). This right applies to data you provided to us with your consent or under a contract.

8.6 Right to Object

You may object to processing of your personal information based on legitimate interests, including profiling and direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these privacy rights, please contact our Data Protection team:

  • Email: [email protected] (include "Privacy Rights Request" in subject line)
  • Live Chat: Available 24/7 on the Platform
  • WhatsApp: +62 812-3456-7890

We will respond to all requests within 30 days. For complex requests, we may extend this period by an additional 60 days with notification. We may request additional identification verification to protect against fraudulent requests.

9. Cookies and Tracking Technologies

litoto uses cookies and similar technologies to enhance your experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

Types of Cookies We Use:

  • Strictly Necessary Cookies: Essential for Platform functionality, security, and navigation. These cannot be disabled without severely impairing your ability to use the service.
  • Performance Cookies: Collect anonymous information about how you use the Platform (pages visited, time spent, errors encountered) to improve performance and user experience.
  • Functionality Cookies: Remember your preferences (language settings, game favorites, display options) to provide enhanced, personalized features.
  • Targeting/Advertising Cookies: Track your browsing behavior to deliver relevant promotional content and measure marketing campaign effectiveness.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling certain cookies may limit your ability to use some Platform features. For detailed information about cookies and how to manage them, visit www.allaboutcookies.org.

10. International Data Transfers

litoto operates internationally, and your personal information may be transferred to, stored in, or processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from those in Indonesia.

When we transfer your data internationally, we implement appropriate safeguards to ensure your information receives an adequate level of protection, including:

  • Standard contractual clauses approved by data protection authorities
  • Data processing agreements with service providers requiring equivalent protection standards
  • Encryption of data in transit and at rest
  • Regular audits of international partners' data handling practices

11. Children's Privacy

The litoto Platform is strictly restricted to adults 21 years of age and older (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from individuals under 21, and participation by minors is expressly prohibited by our Terms & Conditions.

If we become aware that a user is underage, we will immediately terminate their account, invalidate any transactions, and delete their personal information from our systems (except as required for legal compliance and fraud prevention purposes). If you believe a minor has created an account on litoto, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

litoto reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Platform features. Material changes will be communicated through:

  • Prominent notice on the Platform homepage
  • Email notification to your registered email address
  • Update to the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes are published constitutes acceptance of the revised policy. If you do not agree with the changes, you must cease using the Platform and may request account closure.

13. Contact Information

For questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our Data Protection team:

  • Email: [email protected]
  • Live Chat: Available 24/7 on the litoto Platform
  • WhatsApp: +62 812-3456-7890

We take privacy concerns seriously and will investigate all complaints promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Acknowledgment: By creating an account and using the litoto Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

Questions About Your Privacy?

Our customer support team is available 24/7 to answer any questions about how we handle your personal information. We're committed to transparency and protecting your data.

View FAQ Terms & Conditions Back to Home