fultoto Privacy Policy

This page describes what we collect when you use fultoto and how we keep that data protected. We operate a unified gaming platform covering live-dealer tables, sportsbook markets, slots, and specialty games. Your account, deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank accounts (mobile banking, local payment, online payment, e-wallet), and all transaction records sit within our data protection framework.

We at fultoto are committed to transparent data handling. We collect only what is necessary to operate our service, verify your identity, prevent fraud, and comply with applicable law. We do not sell your personal information. We encrypt all data at rest and in transit. This policy sets out exactly what we collect, how we use it, who has access, and what rights you have.

By opening a fultoto account or using our platform, you consent to the data practices described here. If you have questions about how we handle your information, contact us via the support channels listed in the policy footer.

Data We Collect on fultoto

Account Registration and Identity Verification

When you create a fultoto account, we collect your full name, date of birth, email address, and phone number. We use this information to verify your identity, prevent fraud, and maintain regulatory compliance. Before your first withdrawal, we require identity verification (KYC)—you submit a government ID (passport, driving license, or national ID), proof of address (utility bill or bank statement), and a selfie. We use a third-party identity verification service to confirm these documents; they process your information according to our data-processing agreement.

We retain KYC documents for five years post-account closure to comply with anti-money-laundering (AML) regulations. We do not retain documents longer than necessary for regulatory purposes. You may request deletion of documents after the retention window by contacting our support team.

Payment and Transaction Data

We collect and log every deposit and withdrawal on fultoto. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we record the amount, timestamp, payment method, and transaction ID. We do not store your payment card details or e-wallet credentials directly; payment partners (mobile banking, local payment, etc.) handle credential storage and transmission. We receive only a confirmation token confirming the transaction succeeded or failed.

We retain transaction records for seven years to comply with regulatory requirements across jurisdictions where we operate. This enables us to assist with disputes, respond to law-enforcement requests, and maintain audit trails.

Data minimization: We collect only essential payment information. Your online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank credentials never pass through our fultoto servers; payment partners handle all credential processing.

Game and Betting Activity

We log your fultoto gameplay—every sportsbook prediction, live-dealer table hand, slot spin, and specialty game outcome. We record your stake, result, payout, and settlement time. This data is used for settlement verification, dispute resolution, and regulatory reporting. Your game history is associated with your fultoto account and is visible to you in your account dashboard at all times.

Device and Connection Data

We collect technical information about how you access fultoto—your device type (mobile, desktop, tablet), operating system, browser, IP address, and approximate geographic location (city-level, not precise coordinates). We use this data to detect fraud (e.g., simultaneous login from vastly different geographic locations), prevent unauthorized access, and maintain service quality. We do not sell this data to advertisers.

IP address logging
We log your IP address when you access fultoto. This helps us detect suspicious login patterns and prevent account takeover.
Device fingerprinting
We may collect non-identifying device attributes (OS, browser version) to recognize your device and alert you to logins from unknown devices.
Cookies and local storage
We use cookies to maintain your session, remember your language preference, and measure platform usage. You may disable non-essential cookies in your browser settings.

How We Use and Protect Your Data

Our Data Use on fultoto

We use your fultoto data for the following purposes: (1) Account management and KYC compliance; (2) Processing deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet; (3) Settling game outcomes and resolving disputes; (4) Detecting and preventing fraud, collusion, and account abuse; (5) Complying with legal obligations (AML, know-your-customer, tax reporting); (6) Sending transactional emails (deposit confirmation, withdrawal status, account alerts); (7) Improving platform performance and security.

We do not use your data for marketing purposes unless you have opted in to marketing emails. We do not sell or lease your personal information to third parties for their commercial benefit.

Data Sharing and Third-Party Processors

We share your fultoto data only when necessary:

  • Payment partners (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment): We transmit your name, account identifier, and transaction amount to confirm deposits and withdrawals. These partners process the data according to their own privacy policies.
  • KYC service providers: We share identity documents with a third-party verification service to confirm your identity. They delete documents after verification is complete.
  • Fraud detection services: We may share device information and transaction patterns with fraud-detection software to identify suspicious activity.
  • Law enforcement: We disclose data only when legally compelled by court order or lawful government request.

All third-party processors sign data-processing agreements committing them to the same confidentiality and security standards we maintain.

Data Security and Encryption

We at fultoto protect your data through industry-standard security measures. All connections to our platform use HTTPS encryption (TLS 1.3+). Personal data is encrypted at rest using AES-256 encryption. Access to fultoto databases is restricted to authorized personnel and authenticated by multi-factor authentication. We conduct annual third-party security audits and penetration testing.

Our servers may be located outside your jurisdiction. Data transferred across borders is encrypted in transit. By using fultoto, you consent to international data transfer for the purposes described in this policy.

Your Rights and Data Access

You have the right to access your fultoto account data. Log into your account to view your personal information, transaction history, game records, and KYC status. You may request correction of inaccurate data by contacting our support team. You have the right to request deletion of your account and associated data (subject to regulatory retention requirements—we retain transaction records for seven years for AML compliance). You may also request a portable copy of your data in a machine-readable format.

To exercise these rights, email our support team with your request. We respond within 30 days. If you believe we have mishandled your data, you have the right to lodge a complaint with your local data protection authority.

Cookies and Tracking

We use cookies to maintain your fultoto session, store language preferences, and measure platform usage (page views, click-through rates). Strictly necessary cookies are always enabled. Optional analytics cookies may be disabled in your browser settings. We do not use tracking cookies for cross-site advertising; we do not serve targeted ads based on your fultoto activity outside our platform.

Regional data residency: Our fultoto platform servers may be located across multiple regions for performance and redundancy. During peak events (Liga 1 finals, Piala Indonesia, or around Idul Fitri, Idul Adha, Imlek, Nyepi), data may be temporarily cached across geographically distributed servers for faster delivery. All cached data is encrypted.

Policy Updates and Contact

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes are announced within fultoto 30 days before they take effect. Your continued use of fultoto after the update date constitutes acceptance of the revised policy. We retain prior versions of this policy in our archives for reference.

If you have questions about our privacy practices, data rights, or wish to exercise a data-access request, contact our support team via live chat (6 PM–midnight Jakarta time, Monday–Friday) or email our privacy team. We respond to privacy inquiries within 10 business days.

fultoto data privacy team
Privacy and security specialist

We at fultoto take your privacy seriously. Your personal information is encrypted, access is restricted, and sharing is transparent. We do not sell your data. You have full rights to access, correct, and delete your information subject to regulatory retention windows.

Summary

Our fultoto Privacy Policy describes what personal data we collect (account information, KYC documents, payment details, game activity, device information), how we use it (account management, fraud prevention, regulatory compliance), and how we protect it (encryption, access restrictions, third-party audits). We share data only with payment partners (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), verification services, and law enforcement when legally required.

You have the right to access, correct, and request deletion of your fultoto data. Our servers may be located across multiple jurisdictions; all data in transit and at rest is encrypted. We update this policy periodically; 30-day notice is provided for material changes. Contact our privacy team with any questions or data-access requests.