cinatoto Privacy Policy

This page describes what we collect when you use cinatoto and how we keep that data protected. We at cinatoto take data security seriously—from your email and phone number through to your payment methods, betting history, and account preferences. Our practices reflect both legal requirements and our commitment to transparency about how your information flows through our systems.

When you create a cinatoto account, download our Android app, access us via iOS Safari, or log in from a desktop, you provide identifying information and transactional data. We use this data to verify your identity, process your deposits and withdrawals, settle your bets, and improve our platform. We do not sell your data to marketing firms. We do share information with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and regulatory bodies only as required to operate and comply with law.

Our servers may sit outside your jurisdiction. Your data may be processed and stored in multiple countries depending on operational needs. This policy explains those arrangements, your rights regarding your data, how we use cookies, and how to contact us if you have privacy concerns.

What Data We Collect

We collect your email address when you register on cinatoto. We use your email to verify your account, send transaction confirmations, and contact you about security issues or account changes. You must confirm your email before your first withdrawal; this confirms you control the address and guards against account takeover.

We collect your phone number during KYC verification. We use your phone to verify your identity via SMS code during account setup and optionally for two-factor authentication if you enable it. We do not use your phone number for marketing calls or SMS unless you opt in.

We collect government-issued ID details (name, date of birth, ID number, document image) during KYC. This is required before your first withdrawal and protects against money laundering and fraud. We retain your ID image securely and do not share it beyond our compliance and regulatory teams.

We collect your betting activity—markets you select, odds, stakes, settlement outcomes—in real time on cinatoto. This data is stored in your account history and used for settlement, dispute resolution, and regulatory reporting. We also collect your login times, IP address, and device type for security purposes.

Email verification

We send a confirmation link to your email; you must click it within 24 hours to activate your account on cinatoto.

Phone verification

We send a six-digit SMS code; enter it in the app or browser to confirm your phone number.

Location data

Optional; used only to check jurisdiction compliance. cinatoto does not track your real-time location.

How We Use Your Data

We use your data to operate cinatoto—process your bets, settle outcomes, handle deposits and withdrawals. We verify your identity to comply with anti-money-laundering and counter-terrorism regulations. We retain your transaction history to support account disputes, reconcile settlements, and fulfill tax reporting obligations.

We analyze aggregated (non-personal) betting data to improve our platform—which markets are popular, where our app is slowest, which payment methods fail most often. We do not use your individual data for marketing without your consent. We may send service updates (maintenance windows, new features, terms changes) to your email regardless of consent, as these are operational notifications.

We use your data to investigate fraud, account compromise, or terms violations. If we suspect your account is used in violation of our terms and conditionswe may restrict it, request additional verification, or close it. We will contact you via email before taking such action unless doing so would undermine a fraud investigation.

Third-Party Data Processors

We share your data with payment processors to settle your deposits and withdrawals. mobile banking, local payment, online payment, e-wallet, mobile banking handle e-wallet payments. local payment, online payment, e-wallet, mobile banking handle bank transfers. Each processor operates under its own privacy policy and may retain your data according to banking regulations.

We may share data with regulatory authorities, law enforcement, or financial intelligence units if required by law or if we suspect illegal activity. We do not proactively report individual user activity, but we comply with lawful requests from government bodies.

Our servers and databases may be hosted by third-party cloud providers. These providers are bound by data-processing agreements and access your data only as needed to maintain our systems. Your data may be replicated across multiple geographic regions for backup and disaster recovery.

Cookies and Tracking

Our cinatoto website and mobile web version use session cookies to keep you logged in and to track your preferences (language, odds format). We use analytics cookies to measure traffic, page performance, and user behavior patterns. These cookies do not identify you personally—they track anonymous sessions.

You can disable cookies in your browser settings, but doing so may limit cinatoto functionality. Disabling cookies will log you out; you will need to log in each time you visit. Our Android app and iOS browser version do not require cookies—they use token-based sessions.

We do not use third-party tracking pixels or retargeting scripts. We do not sell your browsing data to ad networks. If you visit cinatoto from Jakarta, Surabaya, Bandung, or Medan, we do not use your location data for targeted advertising.

Data Security and Retention

We encrypt all data in transit using SSL/TLS. Your login credentials, payment details, and betting history are encrypted at rest on our servers. We do not store your password in plain text—we hash it using industry-standard algorithms. If you forget your password, our system sends you a reset link; only you can reset it.

We retain your account data as long as your account is active. After you close your account, we retain transaction records for seven years to comply with financial regulations and tax law. Personal identifying information (email, phone, ID image) is deleted after two years unless we have a legal obligation to retain it longer.

We conduct periodic security audits and penetration tests. We use two-factor authentication (SMS or email code) to prevent unauthorized access. If we detect a data breach affecting your account, we will notify you via email and direct you to reset your password.

Contact cinatoto

If you have questions about how we handle your data, requests to access or delete your information, or concerns about our privacy practices, contact our support team. Use the in-app chat on cinatoto, email us via the address in our Legal notice page, or submit a request through your account settings.

If you believe we have violated your privacy rights or applicable data-protection law, you have the right to lodge a complaint with your local data-protection authority. We will cooperate with any formal investigation.

This privacy policy may change periodically as we update our systems or comply with new regulations. We will notify you of material changes via email. Continued use of cinatoto after a policy change constitutes acceptance of the new terms. Your access to cinatoto is available only where local law permits. Data handling practices comply with applicable jurisdiction-specific regulations.