At gitoto, your privacy is a foundational commitment, not a compliance checkbox. This Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold over it.
This Privacy Policy ("Policy") describes how gitoto ("we", "us", "our") collects, uses, discloses, and safeguards the personal information of individuals ("you", "User") who access or use the gitoto online gaming platform available at https://gitoto.cam ("Platform").
gitoto operates an international online gaming service catering primarily to Indonesian players, offering sports betting, live casino games, slot machines, and lottery products including togel (Indonesia's traditional numbers-prediction lottery). Because financial transactions and identity verification are central to our service, we necessarily process a range of personal data. We are committed to handling that data responsibly, proportionately, and transparently.
By registering an Account on the Platform or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request Account closure and data deletion where applicable.
This Policy applies to all Users of the Platform, including residents of Indonesia and any other jurisdiction from which access is permitted. It covers all personal data submitted through the website, mobile interfaces, live chat, email correspondence, and telephone interactions with our support team.
For the purposes of this Policy, the following terms carry the meanings set out below:
gitoto collects the following categories of Personal Data, depending on how you interact with the Platform:
We collect only the data that is necessary for the specific purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly required for responsible gaming compliance.
gitoto collects your Personal Data through the following channels:
The majority of your Personal Data is provided directly by you when you register an Account, complete KYC verification, make a deposit, request a withdrawal, contact our support team, or update your profile settings. You are under no obligation to provide this data, but withholding it may prevent you from accessing certain features — most notably, withdrawal of funds.
Certain technical data is collected automatically as you use the Platform. This includes your IP address, device information, browser type, session data, and cookie data. This automatic collection is necessary for the secure operation of the Platform and for fraud prevention purposes.
gitoto may receive Personal Data about you from third-party sources in limited circumstances, including:
gitoto processes your Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your Account; processing logins and authentication |
| Identity Verification (KYC) | Verifying your age (21+), identity, and eligibility to use the Platform |
| Payment Processing | Processing deposits and withdrawals via local Indonesian banks and e-wallets in IDR |
| Fraud & AML Prevention | Detecting and preventing fraudulent activity, money laundering, and multi-accounting |
| Responsible Gaming | Monitoring gaming patterns, enforcing deposit limits and self-exclusion, and identifying at-risk players |
| Customer Support | Responding to queries, complaints, and disputes via live chat, email, and WhatsApp |
| Legal Compliance | Meeting obligations under applicable anti-money laundering, data protection, and gaming regulations |
| Platform Improvement | Analyzing usage patterns to improve the Platform's features, performance, and user experience |
| Marketing | Sending promotional offers, bonus notifications, and Platform updates — only where you have opted in |
| Security | Protecting the integrity of the Platform, detecting unauthorized access, and maintaining audit logs |
gitoto relies on the following legal bases when processing your Personal Data:
Processing your identity data, payment data, and gaming activity data is necessary for gitoto to perform its contractual obligations to you as set out in the Terms & Conditions. Without this processing, we cannot provide account services, process transactions, or deliver gaming products.
gitoto is required by applicable law and international regulatory standards to collect and retain certain data for anti-money laundering (AML) compliance, age verification, and fraud prevention. This processing is mandatory and cannot be waived by User consent.
We process certain technical and behavioral data on the basis of our legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud detection, security monitoring, Platform analytics, and responsible gaming oversight. We balance these interests against your privacy rights and do not process data beyond what is proportionate to those interests.
Where processing is not required by contract or law, we rely on your freely given consent. This applies primarily to direct marketing communications. You may withdraw your consent at any time by contacting our support team or adjusting your notification preferences within your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
gitoto does not sell, rent, or trade your Personal Data to any third party for commercial gain. We share your data only in the limited circumstances described below:
We engage carefully selected third-party service providers to assist in operating the Platform. These providers act solely on our instructions under binding data processing agreements and are prohibited from using your data for their own purposes. They include:
gitoto may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or lawful regulatory demand. We will, where legally permitted, notify you of such disclosure requests before complying.
In the event of a merger, acquisition, restructuring, or sale of all or part of gitoto's business assets, Personal Data held by gitoto may be transferred to the acquiring entity. We will provide notice of any such transfer and ensure the recipient maintains privacy standards at least equivalent to those in this Policy.
Where a User has requested self-exclusion, gitoto may share the minimum necessary data with recognized problem gambling self-exclusion databases or responsible gaming networks to give effect to that exclusion across affiliated platforms.
In all cases of data sharing, gitoto applies the principle of data minimization — only the minimum data necessary for the specific purpose is disclosed. We do not provide bulk data exports to third parties under any commercial arrangement.
gitoto operates internationally and some of its service providers are located outside Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than Indonesia. These countries may have data protection laws that differ from those applicable in Indonesia.
Where such transfers occur, gitoto ensures that appropriate safeguards are in place to protect your data, including:
By using the Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the safeguards outlined above.
gitoto retains your Personal Data only for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after Account closure | AML / regulatory obligation |
| Financial transaction records | 5 years after Account closure | AML / legal obligation |
| Gaming activity history | 3 years after Account closure | Responsible gaming / dispute resolution |
| Contact & support records | 3 years after last interaction | Legitimate interest / legal claims |
| Marketing preferences | Until opt-out or Account closure | Consent |
| Technical / log data | 12 months from collection | Security / fraud prevention |
| Self-exclusion records | Indefinitely (or as per exclusion agreement) | Responsible gaming obligation |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with our internal data lifecycle procedures. Anonymized data, which can no longer be linked to any individual, may be retained indefinitely for statistical and analytical purposes.
gitoto takes the security of your Personal Data seriously and implements a comprehensive set of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, and destruction. These measures include:
While gitoto takes every reasonable precaution to secure your data, no online system is entirely immune to risk. You are responsible for keeping your Account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorized access to your Account.
gitoto uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you between sessions and deliver a consistent, personalized experience.
You may control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies; however, doing so may impair the functionality of the Platform. Marketing cookies may be disabled by adjusting your Account notification preferences or by contacting our support team.
As a User of the gitoto Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within 30 calendar days.
You have the right to request a copy of the Personal Data gitoto holds about you, together with information about how it is being used and with whom it has been shared. We will provide this information free of charge unless your request is manifestly unfounded or excessive.
You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For identity and KYC data, corrections may require re-submission of supporting documentation.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to exceptions, including our legal obligation to retain financial and identity records for AML compliance periods.
You may request that gitoto restrict its use of your Personal Data in certain circumstances — for example, while you contest the accuracy of the data or where you have objected to processing and we are assessing the legitimacy of that objection.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing carried out on the basis of our legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, gitoto will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.
To exercise any of the rights above, please contact our Data Protection team at [email protected]. Please include your full name, registered email address, and a clear description of the right you wish to exercise. We may request identity verification before processing your request.
The Platform is strictly intended for adults aged 21 years and over. gitoto does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted at registration and prior to the first withdrawal of funds.
If gitoto becomes aware that Personal Data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected] so that we can investigate and act promptly.
We strongly encourage parents and guardians to make use of available parental control software to prevent underage access to online gaming platforms, including gitoto. For more information on responsible gaming practices and minors protection, please visit our Responsible Gaming page.
gitoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Users via email and/or a prominent in-Platform notice at least 7 calendar days before the amended Policy takes effect.
The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your information. The current version of this Policy will always be accessible at https://gitoto.cam/privacy-policy.
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must discontinue use of the Platform and request Account closure before the revised Policy takes effect.
If you have any questions, concerns, or complaints about this Privacy Policy or about how gitoto handles your Personal Data, please reach out to us through the channels below. All contact details are provided as plain text — please do not attempt to use these as clickable links.
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. gitoto cooperates fully with regulatory authorities in the handling of privacy complaints and will not take any adverse action against a User for exercising their rights under this Policy.
This Privacy Policy should be read alongside gitoto's Terms & Conditions and Responsible Gaming policy, all of which form part of the framework governing your relationship with the Platform.
Six pillars underpinning our commitment to responsible, transparent data stewardship
All data in transit is protected by SSL/TLS encryption, and sensitive records stored on our servers use AES-256 encryption — the same standard employed by leading international financial institutions.
gitoto does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data is used exclusively to operate the Platform, comply with legal obligations, and improve your experience.
You retain the right to access, correct, delete, and port your personal data at any time. Submit a request to our Data Protection team and receive a response within 30 days — no bureaucratic runaround.
We apply the principle of data minimization rigorously — collecting only what is genuinely necessary for each specific purpose. No speculative or precautionary data hoarding takes place on the gitoto platform.
Every category of data we hold has a defined maximum retention period. When that period expires, data is securely deleted or anonymized. We do not retain data indefinitely or beyond regulatory requirements.
In the unlikely event of a data breach affecting your personal information, gitoto will notify you promptly in line with applicable legal requirements, providing clear guidance on protective steps you should take.
Our Data Protection team is ready to help. You can also review our full Terms & Conditions or visit the FAQ for quick answers to common privacy questions.
Read the FAQ Terms & Conditions Back to Home