At jitoto, your privacy is a fundamental right, not an afterthought. This Privacy Policy explains in clear terms exactly what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you hold over your own information.
Important: This Privacy Policy forms an integral part of jitoto's Terms & Conditions. By registering an Account or continuing to use the jitoto Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform and contact us to close your Account.
This Privacy Policy applies to all personal data processed by jitoto ("the Company", "we", "us", "our") in connection with the operation of the jitoto Platform accessible at https://jitoto.cam. It covers data collected through the website, mobile-optimized interfaces, customer support channels, and any other touchpoints through which Users interact with jitoto.
jitoto is operated internationally and serves Users primarily in Indonesia, including cities such as Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Semarang, Palembang, and Makassar. Our data practices are designed to meet internationally recognized privacy standards, including principles aligned with the General Data Protection Regulation (GDPR) and applicable international data protection frameworks.
This Policy does not apply to third-party websites, payment processors, or game content providers that may be linked from or integrated into the Platform. Those entities maintain their own independent privacy policies, and we encourage Users to review them before engaging with any third-party service.
The following terms carry specific meanings throughout this Privacy Policy:
jitoto collects the following categories of Personal Data in connection with the provision of its services:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID (KTP) number | Yes (KYC) |
| Contact Data | Email address, Indonesian mobile number, residential address | Yes |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, etc.), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit/withdrawal amounts in IDR | Yes |
| KYC Documents | Scanned/photographed KTP, selfie with ID, bank statement or e-wallet screenshot | Yes (withdrawal) |
| Betting Activity Data | Wager history, game preferences, sports markets accessed, stakes placed, winnings/losses | Automatic |
| Technical Data | IP address, device type, operating system, browser, session duration, pages visited | Automatic |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When contacting support |
| Marketing Preferences | Promotional opt-in/opt-out status, bonus claim history, communication preferences | Optional |
Note on Voluntary Data: Certain data fields marked as optional above are not required for basic Platform access. However, failure to provide mandatory data — particularly KYC documents — will result in withdrawal restrictions as described in our Terms & Conditions.
jitoto collects Personal Data through the following channels and methods:
jitoto processes your Personal Data only for specific, documented purposes. We do not process data beyond what is necessary for those stated purposes. The primary processing purposes are as follows:
In accordance with internationally recognized data protection principles, jitoto processes Personal Data under one or more of the following legal bases:
jitoto does not sell your Personal Data to third parties. We do not share your data with advertisers or marketing networks. Data is disclosed only in the following limited circumstances:
No Data Sales, Ever: jitoto has never sold, rented, or traded User Personal Data to third-party marketers, data brokers, or advertising networks. This commitment is unconditional and applies regardless of changes to our business structure.
jitoto operates globally, and your Personal Data may be stored and processed on servers located outside Indonesia. When data is transferred internationally, jitoto applies appropriate safeguards to ensure your data remains protected to a standard equivalent to the protections afforded within Indonesia, including:
By using the jitoto Platform, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.
jitoto retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 5 years post-closure | Legal / AML compliance |
| KYC Documents | Duration of Account + 5 years post-closure | Regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping |
| Betting Activity Logs | 3 years from date of each wager | Dispute resolution / fraud detection |
| Customer Support Records | 3 years from last interaction | Legitimate interests |
| Technical / Log Data | 12 months from collection | Security monitoring |
| Marketing Preferences | Until consent withdrawn or Account closed | Consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any identifiable individual. Anonymized aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.
jitoto employs a multi-layered security framework to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. Our key security measures include:
Your Role in Security: While jitoto invests extensively in platform security, Users also play a critical role. Use a strong, unique password for your jitoto Account, enable two-factor authentication, and never share your login credentials with any third party. If you suspect unauthorized access to your Account, contact our support team immediately.
jitoto uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The following categories of cookies are used:
jitoto does not use third-party advertising cookies or behavioral tracking pixels for the purpose of serving targeted advertising on external websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.
Subject to applicable law, jitoto recognizes and will honor the following rights in respect of your Personal Data:
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered Account email address for identity verification. We will respond within 30 days.
The jitoto Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process Personal Data from any individual under the age of 21. This restriction applies universally to all Users regardless of jurisdiction.
Age verification is conducted as part of the KYC process for all Users before withdrawal privileges are activated. Where we discover or have reasonable grounds to suspect that a User is under 21 years of age, we will immediately suspend that Account, void any outstanding wagers, and initiate a review of all associated transactions.
Any Personal Data inadvertently collected from a User later confirmed to be under 21 will be deleted from our systems as promptly as practicable following identification. If you believe a minor has registered on our Platform, please notify us immediately at [email protected].
jitoto reserves the right to update or revise this Privacy Policy at any time. When material changes are made — particularly changes that affect how we collect or use Personal Data — we will notify all registered Users via the email address associated with their Account at least 7 days before the changes take effect.
Minor clarifications or editorial corrections (such as fixing typographical errors or improving readability without changing the substance of data practices) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you must cease using the Platform and request Account closure before the amendment takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by jitoto, please contact our Data Protection team through the following channels:
Related Policies: This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, all of which form part of the agreement between jitoto and its Users.
Our data protection commitments go beyond legal compliance — they reflect our belief that User trust is the foundation of a great betting platform
Every piece of data you send to or receive from jitoto travels through 256-bit SSL/TLS encrypted channels. Your financial data and personal details are never transmitted in plain text.
jitoto has never sold, rented, or licensed User data to advertising networks or data brokers — and never will. Your personal information exists on our platform to serve you, not to generate revenue from third parties.
Identity documents including your KTP are handled by certified verification partners under strict data processing agreements. Documents are encrypted at rest and never shared with game providers or marketing partners.
Access, correct, export, or delete your Personal Data at any time by contacting our support team. Marketing opt-outs take effect immediately. You are always in control of how your information is used.
Our platform undergoes regular third-party penetration testing and security audits. Identified vulnerabilities are triaged and remediated under a strict internal SLA before they can be exploited.
In the unlikely event of a data breach affecting your Personal Data, jitoto commits to notifying you within 72 hours of discovery — faster than most regulatory minimums — so you can take immediate protective action.
Our support team is available around the clock to address any privacy concerns. You can also review our full Terms & Conditions or visit our FAQ for quick answers to common questions.