Privacy Policy

1. Introduction

setoto ("we", "us", "our") operates an online gaming platform at https://setoto.cam that provides casino games, sports betting, lottery services, and related entertainment products to users primarily in Indonesia. We understand that your privacy is important, and we are committed to being transparent about our data practices.

This Privacy Policy applies to all users of the setoto platform, including visitors to our website, registered account holders, and anyone who interacts with our services. By accessing or using setoto, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your personal information as described herein.

If you do not agree with this Privacy Policy, please do not use our services. We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via email to registered users, and continued use of setoto after changes are posted constitutes acceptance of the revised policy.

2. Information We Collect

setoto collects several types of personal information to provide, maintain, and improve our services. The data we collect falls into three main categories:

2.1 Information You Provide Directly

When you register an account or interact with setoto services, you voluntarily provide us with the following information:

• Account Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address, and username/password.
• Identity Verification Documents: Government-issued photo ID (KTP, passport, or driver's license), proof of address (utility bill or bank statement), and proof of payment method ownership as required for KYC (Know Your Customer) compliance.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet information (OVO, DANA, GoPay account numbers), and transaction history.
• Communication Data: Messages sent through live chat, emails to customer support, feedback forms, and survey responses.
• Preference Settings: Language preferences, notification settings, deposit limits, and responsible gaming settings.

2.2 Information Collected Automatically

When you use the setoto platform, certain information is automatically collected through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, betting activity, deposit and withdrawal patterns, session duration, click-through data, and referral sources.
• Location Data: Approximate geographic location based on IP address (city and country level, not precise GPS coordinates).
• Performance Data: Page load times, error messages, and technical issues encountered while using the platform.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Confirmation of deposits, withdrawals, and transaction status from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Game Providers: Betting and gaming activity data from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe) integrated into the setoto platform.
• Fraud Prevention Services: Risk assessment data, sanctions screening results, and fraud detection signals from third-party security vendors.
• Social Media: If you choose to link your social media accounts to setoto, we may receive basic profile information such as name and profile picture (this feature is optional).

3. How We Use Your Information

setoto uses your personal data for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Create and maintain your setoto account
• Verify your identity and age (21+ requirement)
• Process deposits, withdrawals, and betting transactions
• Provide access to casino games, sports betting markets, and lottery draws
• Manage bonuses, promotions, and loyalty rewards
• Enforce betting limits and responsible gaming tools
• Resolve disputes and investigate complaints

3.2 Security and Fraud Prevention

• Detect and prevent fraudulent transactions, money laundering, and prohibited activities
• Monitor for collusion, bonus abuse, and multiple account creation
• Protect against unauthorized access, hacking, and cyber attacks
• Verify the authenticity of identity documents submitted for KYC
• Screen against sanctions lists and politically exposed persons (PEP) databases

3.3 Communication and Customer Support

• Respond to your inquiries via live chat, email, or WhatsApp
• Send account-related notifications (deposit confirmations, withdrawal status, account verification requests)
• Notify you about changes to our Terms & Conditions or Privacy Policy
• Send promotional offers, bonus announcements, and marketing communications (you can opt out at any time)
• Conduct customer satisfaction surveys and gather feedback

3.4 Legal Compliance and Regulatory Obligations

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Respond to lawful requests from government authorities, courts, and regulatory bodies
• Maintain records required by gaming licenses and financial regulations
• Enforce our Terms & Conditions and investigate violations
• Defend legal claims and protect our rights and property

3.5 Platform Improvement and Analytics

• Analyze user behavior to improve website performance and user experience
• Identify popular games, betting patterns, and feature usage
• Test new features and optimize platform functionality
• Generate aggregated, anonymized statistics for business intelligence

4. Data Sharing and Third Parties

setoto does not sell your personal data to third parties. However, we do share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who help us operate the platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) receive your financial information to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe receive your betting activity to deliver game outcomes and maintain session data.
• KYC Verification Services: Third-party identity verification vendors receive your ID documents and personal information to confirm your identity and age.
• Fraud Prevention Services: Security vendors receive transaction and behavior data to detect fraudulent activity and assess risk.
• Customer Support Tools: Live chat and helpdesk software providers receive your communication data to facilitate customer service.
• Cloud Hosting Providers: Our website and databases are hosted on secure cloud infrastructure, and hosting providers have access to stored data for maintenance purposes.

All third-party service providers are contractually obligated to use your data only for the specific services they provide to setoto and to maintain appropriate security measures.

4.2 Legal Requirements

We may disclose your personal data when required by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from government authorities, law enforcement, or regulatory agencies
• National security or public safety concerns
• Investigations into suspected criminal activity, money laundering, or terrorism financing

4.3 Business Transfers

If setoto is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal data may be transferred as part of that transaction. We will notify you via email and post a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot be used to identify you personally with business partners, advertisers, and analytics providers. For example, we might share statistics about the percentage of users from Jakarta who play sports betting versus casino games.

5. Data Security Measures

setoto takes data security extremely seriously and employs multiple layers of protection to safeguard your personal information:

5.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and setoto servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks and financial institutions.
• Database Encryption: Sensitive data stored in our databases (passwords, financial information, ID documents) is encrypted at rest using AES-256 encryption.
• Password Hashing: User passwords are hashed using bcrypt with salt, ensuring they cannot be read even if the database is compromised.

5.2 Access Controls

• Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions.
• All employees and contractors with data access sign confidentiality agreements and undergo background checks.
• We use multi-factor authentication (MFA) for internal systems and regularly review access logs.

5.3 Infrastructure Security

• Our platform is hosted on secure, ISO 27001-certified cloud infrastructure with redundant backups.
• We employ firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) protection.
• Regular security audits and penetration testing are conducted by independent third-party security firms.
• All software is kept up-to-date with the latest security patches.

5.4 Secure Disposal

When personal data is no longer needed, it is securely deleted or anonymized. Physical documents (if any) are shredded, and digital files are overwritten to prevent recovery.

6. Cookies and Tracking Technologies

setoto uses cookies, web beacons, and similar tracking technologies to enhance your experience and collect usage data. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for login, security, and basic platform functionality	Session or 1 year
Performance Cookies	Collect anonymous usage data to improve platform performance	1-2 years
Functionality Cookies	Remember your preferences (language, settings)	1 year
Marketing Cookies	Track marketing campaign effectiveness and deliver targeted promotions	1 year

6.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the setoto platform. To manage cookies, refer to your browser's help documentation:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of all personal data we hold about you. You can access most of this information directly through your setoto account settings. For a complete data export, contact our support team.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most account details yourself in your profile settings.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data by contacting customer support. However, we may retain certain information as required by law (e.g., transaction records for tax and AML compliance) or to defend legal claims.

7.4 Right to Restrict Processing

You can request that we temporarily stop processing your personal data in certain circumstances, such as while we investigate a dispute.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and transmit it to another service provider.

7.6 Right to Object

You can object to processing of your personal data for marketing purposes at any time by clicking "unsubscribe" in promotional emails or adjusting your notification settings in your account.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time. However, this will not affect the lawfulness of processing conducted prior to withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer via email at [email protected] (plain text, not clickable) or through live chat. We will respond to your request within 30 days.

8. Data Retention

setoto retains your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

8.1 Active Account Data

While your account is active, we retain all account information, transaction history, and communication records to provide continuous service.

8.2 Closed Account Data

After you close your account, we retain certain data for:

• Financial Records: Transaction history, deposits, and withdrawals are retained for 7 years to comply with tax and anti-money laundering regulations.
• KYC Documents: Identity verification documents are retained for 5 years as required by gaming regulations.
• Responsible Gaming Records: Self-exclusion and deposit limit data are retained for 7 years to prevent circumvention of responsible gaming measures.
• Legal Claims: Data relevant to ongoing disputes or legal proceedings is retained until the matter is resolved.

8.3 Anonymization

After retention periods expire, personal data is either securely deleted or anonymized so it can no longer identify you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

9. International Data Transfers

setoto primarily serves users in Indonesia, but our platform infrastructure, payment processors, and game providers operate globally. Your personal data may be transferred to and processed in countries outside Indonesia, including jurisdictions that may not have the same data protection laws as your country of residence.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements with third-party service providers
• Transfers to countries recognized as providing adequate data protection

By using setoto, you acknowledge and consent to the international transfer of your personal data as described in this policy.

10. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Data Protection Officer

Email: [email protected] (plain text, not clickable)

Customer Support: Available 24/7 via live chat on the setoto website or through WhatsApp

Response Time

We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days. For urgent security matters (suspected account breach, unauthorized access), contact us immediately via live chat for priority assistance.