uutoto is committed to protecting the personal information of every Member. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you hold over it.
Last Updated: January 2026These six principles summarise our approach to data privacy. Full details are set out in the clauses below.
All data transmitted between your browser and the uutoto Platform is protected by 256-bit SSL encryption. No personal or financial information travels across the internet in an unencrypted state.
Personal data is stored on access-controlled servers with strict internal permission policies. Only authorised personnel who require access to perform their job functions can view Member data.
uutoto does not sell, rent, or trade your personal information to third parties for marketing purposes. Data is shared only with essential service providers under strict contractual confidentiality obligations.
Members have the right to access, correct, export, and request deletion of their personal data. uutoto responds to all verified data requests within 30 calendar days.
We use cookies and similar tracking technologies only for session management, analytics, and security purposes. We do not use behavioural advertising cookies that track you across unrelated third-party websites.
uutoto retains personal data only as long as necessary for the purposes outlined in this Policy or as required by applicable law. Data is securely deleted or anonymised when retention is no longer justified.
uutoto ("the Platform", "we", "us", "our") takes the privacy and security of your personal information seriously. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It covers all Members registered on the Platform, visitors who browse uutoto without registering, and any individual whose personal information we hold in connection with our business operations.
This Policy has been prepared with reference to internationally recognised privacy principles including those embodied in the General Data Protection Regulation (GDPR) and applicable data protection standards. Although uutoto operates as an international platform serving Indonesian players, we apply a high standard of data protection consistent with global best practices to protect the privacy interests of all Members.
uutoto is the data controller in respect of personal information processed under this Policy. Our designated Data Protection contact is reachable at [email protected].
uutoto collects and processes different categories of personal data depending on how you interact with the Platform. The principal categories are as follows:
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP, passport, or driving licence), gender. |
| Contact Data | Email address, WhatsApp or mobile number, residential address (city, province, postcode). For Indonesian Members, this typically includes a Jakarta, Surabaya, Bandung, Medan, or Bali area address. |
| Account Data | Username, hashed password, account creation date, account status, communication preferences, preferred language. |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other Indonesian banks), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, account balance in IDR (Rp). |
| Transaction Data | Betting and gaming history, bet amounts, winnings, bonus activations, wagering progress, game type preferences. |
| Technical Data | IP address, device type, operating system, browser type and version, session timestamps, page views, referral source. |
| KYC Documents | Scanned or photographed copies of identity documents, proof of address documents, and source-of-funds documentation submitted during the verification process. |
| Communications Data | Content of live chat conversations with support agents, email correspondence, and records of support tickets submitted by Members. |
uutoto collects personal data through the following means:
uutoto uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your consent:
uutoto processes your personal data on one or more of the following legal grounds:
uutoto does not sell or rent your personal data to any third party. We may share your data with third parties only in the following strictly limited circumstances:
All third parties with whom uutoto shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared.
uutoto operates as an international platform and some of the third parties we work with are located outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia. Where such transfers occur, uutoto ensures that appropriate safeguards are in place, which may include:
You may request further information about the specific safeguards applied to any international transfer of your data by contacting our Data Protection contact at the address in Clause 14.
uutoto retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years following account closure, to meet anti-money laundering record-keeping requirements. |
| KYC Documents | 5 years from the date of verification or from account closure, whichever is later. |
| Financial Transaction Records | 7 years from the date of each transaction, in line with standard financial record-keeping obligations. |
| Betting & Gaming History | 5 years from the date of each transaction, or for the duration of any active dispute resolution process. |
| Customer Support Records | 3 years from the date of the last support interaction, unless retained longer due to an ongoing legal matter. |
| Technical / Log Data | 12 months from the date of collection, after which logs are anonymised or deleted. |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years to demonstrate compliance. |
| Self-Exclusion Records | Permanent retention to prevent re-registration during exclusion periods and to maintain accurate responsible gaming records. |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
As a Member of uutoto, you have the following rights in respect of your personal data. To exercise any of these rights, submit a written request to our Data Protection contact (see Clause 14). uutoto will respond within 30 calendar days of receiving a verified request.
uutoto uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the Platform. The following categories of cookies are used:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery (CSRF) attacks. These cannot be disabled. |
| Functional | Remember your preferences such as language settings, display options, and last-visited game category. Disabling these may affect Platform usability. |
| Analytics | Collect anonymised data about how Members navigate the Platform, which pages they visit most frequently, and where they encounter errors. This helps us improve Platform performance and design. |
| Security & Fraud Detection | Track device fingerprints, IP addresses, and behavioural patterns to detect unusual account activity, bot traffic, and potential fraud attempts. |
uutoto does not use third-party behavioural advertising cookies that track your activity across unrelated websites. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from using the Platform.
The uutoto Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any capacity.
If uutoto becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete all personal data collected from that individual, and reverse any financial transactions where possible.
Parents and guardians who believe that a minor may have registered on the Platform are encouraged to contact us immediately at [email protected] so that we can take prompt action.
uutoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
uutoto reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. When material changes are made, we will:
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.
We encourage all Members to review this Policy periodically to stay informed about how uutoto protects their personal information.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the uutoto Data Protection team using the details below. All privacy-related enquiries are handled with strict confidentiality.
When submitting a data rights request, please include your registered email address and a brief description of your request. We may ask you to verify your identity before processing the request to protect your privacy.
Our support team is available around the clock to address any privacy concerns. You can also review our Terms & Conditions or visit our FAQ for more platform information.