lmtoto Platform Privacy Notice
This page describes what we collect when you use lmtoto and how we keep that data protected. We at lmtoto handle your personal information with care, applying industry-standard encryption and access controls across all our systems. Our commitment is transparency—we explain precisely what we gather, why we need it, and how we safeguard it.
We collect data to verify your identity, process your payments (via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers through mobile banking, local payment, online payment, and e-wallet), settle your account, and comply with applicable laws in supported jurisdictions. We do not sell your information to third parties, nor do we share it beyond what is necessary to operate our platform and fulfill regulatory obligations.
Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's legal framework. This privacy notice applies to all members across our platform—whether you use our sportsbook (Liga 1, Piala AFF, Champions League, MotoGP, badminton markets), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games, or esports markets (Mobile Legends, Free Fire, PUBG Mobile).
What We Collect and How We Use It
Account Registration and Verification
When you create an account on lmtoto, we collect your email address, full name, date of birth, and phone number. We require this information to verify your identity and prevent account fraud. During registration, you provide a password of your own choosing—we store this as an encrypted hash, meaning we cannot see your actual password even in our own systems. We never transmit your password unencrypted.
Our Know-Your-Customer (KYC) process requires you to upload government-issued identification and proof of address. We use these documents to confirm that you are the account holder and to comply with anti-money-laundering regulations in jurisdictions where we operate. These documents are scanned and stored in encrypted form on our secure servers. We retain them only for as long as required by law—typically between 3 and 7 years depending on your local jurisdiction.
Payment and Transaction Data
When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer (mobile banking, local payment, online payment, e-wallet), we collect transaction records including the amount, timestamp, and your payment method identifier. We do not store your full bank account numbers or credit card details—payment processing is handled by our third-party payment partners using tokenization and secure gateways. We collect only the reference token and confirmation receipt.
We record all withdrawals and internal account transfers. This data allows us to verify settlement timelines, troubleshoot payment issues, and detect suspicious activity. Withdrawal records are retained for audit purposes and regulatory compliance.
Account Activity and Gameplay Data
We log your betting history, game play-throughs, stakes, winnings, and account balance changes. This data helps us calculate your weekly cashback, track your tier progression, and manage your referral rewards. We also record when you log in, your IP address at login, and the device you use (desktop, mobile, app). This activity log is used to detect unauthorized access and enforce our account security policies.
Cookies and Tracking
Our website uses session cookies to keep you logged in and to store your language preference and notification settings. We use analytical cookies (such as those from Google Analytics) to understand how visitors navigate lmtoto, which games and markets are most popular, and whether our platform performs well across regions like Jakarta, Surabaya, Bandung, and Medan. These analytical cookies do not identify you personally—they track aggregated behavior only. You can disable cookies in your browser settings, though this may limit your experience on our site.
We collect only the data necessary to operate lmtoto, verify accounts, process payments, and comply with law. We do not build profiles for sale to advertisers, nor do we share your gaming history or payment details with marketers.
Our Data Protection Policy
Third-Party Processors
Our servers and databases are hosted by certified cloud providers located in multiple regions, including facilities within and outside your jurisdiction. We engage third-party processors for:
- Payment processing (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet gateways)
- Email delivery and SMS notifications
- Analytics and fraud detection
- Customer support systems
- Legal and compliance services
We require all processors to sign data-processing agreements and to maintain encryption and access controls equivalent to our own. We audit these partners annually to ensure compliance.
Your Rights and Access
You have the right to request a copy of the personal data we hold about you. You can submit this request via our support contact form or by emailing our privacy team. We will provide your data within 30 days in a standard, portable format. You also have the right to request correction of inaccurate information and, in certain circumstances, the right to request deletion (though we may retain data for legal or regulatory reasons).
Data Retention and Deletion
We retain account registration data (name, email, KYC documents) for as long as your account is active, plus a minimum of 7 years after closure for regulatory compliance. Transaction records are kept for 10 years. Once the retention period expires, we delete or anonymize the data unless we are required by law to keep it longer.
Security Measures
We apply industry-standard practices including TLS encryption for all data in transit, AES-256 encryption for data at rest, and multi-factor authentication for sensitive account changes. Our infrastructure undergoes regular security audits and penetration testing. Access to your data is restricted to lmtoto staff who need it to perform their duties, and all staff sign confidentiality agreements.
Contact and Changes
If you have questions about this privacy notice or wish to exercise your data rights, contact our support team via the Help section in your account or email the address listed in our legal noticeWe may update this policy from time to time to reflect changes in technology or regulation. Significant changes will be communicated via email to your registered address. Your continued use of lmtoto after such changes constitutes acceptance of the updated policy.