leatotoPrivacy Policy

This page describes what we collect when you use leatoto and how we keep that data protected. Our commitment is transparent handling of personal information—we collect only what is necessary to operate the platform, process payments, and comply with anti-fraud and regulatory requirements. We do not sell or share your data with third parties for marketing purposes.

We at leatoto operate across multiple jurisdictions, so our privacy practices reflect both industry standards and local legal obligations. When you open an account, deposit via DANA, e-wallet, mobile banking, local payment, or a bank transfer (online payment, e-wallet, mobile banking, local payment), or place a wager on Liga 1, Piala AFF, or any other market, you are providing us with personal and financial information. This policy explains exactly what we collect, how long we keep it, who has access to it, and what rights you have regarding your data.

Our services are available only where local law permits. We comply with applicable data-protection laws in each jurisdiction where we operate, and we undertake to respond to your data-access or deletion requests within the timeframes set by those laws.

What We Collect and Why

We collect your data in three categories: registration information, transaction information, and behavioural information. When you open a leatoto account, we require your email address, password, legal name, date of birth, and a valid identity document (e.g., Indonesian KTP). This information is mandatory for account creation, identity verification, and regulatory compliance—we cannot process your account without it.

Transaction information includes deposits, withdrawals, wagers, and winnings. When you deposit through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer, we receive confirmation of that transaction and store it in your account ledger. This ledger is essential for calculating your weekly cashback, tracking your VIP tier progression, and processing withdrawals. We retain transaction records for as long as your account is active and for a statutory period thereafter (typically seven years, depending on local law).

Behavioural information includes your gaming patterns—which games you play on leatoto, which matches you wager on (Liga 1, Piala AFF, badminton, esports), and your login times and device information. We use this data to personalise your account experience, detect fraud, and improve our platform. We do not use behavioural data to build advertising profiles or sell to third-party marketers.

How We Use Your Data

We use your registration information to create and manage your account, send you notifications about promotions and account activity, and verify your identity before processing large withdrawals. We use transaction information to calculate payouts, process deposits and withdrawals, and generate your weekly cashback. We use behavioural information to detect unusual activity (potential fraud or account compromise), comply with anti-money-laundering regulations, and improve our platform's performance.

leatoto employs automated systems to flag suspicious patterns—for example, a deposit followed immediately by a large withdrawal, or a sudden spike in wagering from a new device. When these flags trigger, we may request additional verification (such as a utility bill for proof of address) before processing your request. This is a standard industry practice and protects both your account and our platform from fraud.

Third-Party Data Processors

We at leatoto work with trusted third-party processors to deliver our services. Payment processors handle your deposits and withdrawals—they receive only the minimum information needed to complete the transaction (your name, account number, transaction amount). We do not store your full card details; payment processors handle that encryption. Identity-verification services receive a copy of your KTP to confirm your identity; they do not retain it after verification completes.

Our hosting providers store your account data on secure servers, some of which may be located outside Indonesia. These servers are protected by encryption, firewalls, and regular security audits. We do not share your data with marketing companies, data brokers, or third parties for any purpose other than delivering leatoto services. All third-party contracts include strict confidentiality clauses and data-protection commitments.

Payment Processor

Receives transaction details only; does not share your data with us for marketing purposes.

Identity Verifier

Confirms your identity against government records; does not retain documents after verification.

Hosting Provider

Stores account data on encrypted servers; subject to strict confidentiality and security standards.

Fraud Detection

Uses automated algorithms to flag suspicious patterns; does not sell flagged data to third parties.

Cookies and Tracking

Our leatoto website and app use cookies and similar tracking technologies to maintain your login session, remember your preferences, and measure how users navigate our platform. Essential cookies are necessary for the site to function—without them, you cannot log in or place a wager. Preference cookies remember your language choice and layout preferences. Analytics cookies help us understand traffic patterns and identify technical issues, but they do not identify you personally.

You can control cookies through your browser settings. If you disable essential cookies, you will not be able to use leatoto. If you disable analytics or preference cookies, the platform will still work, but we will have less information about your experience and cannot improve our service as effectively.

How Long We Keep Your Data

We at leatoto retain your account information for as long as your account is active. If you close your account, we retain registration and transaction data for seven years to comply with anti-money-laundering and tax-reporting laws. After seven years, we delete personal information, though we may retain anonymised, aggregated data (e.g., "1,500 accounts registered in Jakarta in January 2024") for analytics purposes only.

If you request deletion of your account data before that statutory period expires, we will disable your account and stop processing your personal information, but we cannot delete transaction records required by law. You can request a copy of all data we hold about you at any time by contacting our support team.

Your Rights on leatoto

You have the right to access, correct, or request deletion of your personal data. You can update your registration information (email, phone number, address) directly in your account settings. If you want to request a copy of all data we hold about you, or if you want to request that we delete your account and associated data (subject to legal retention requirements), email our support team with your request. We will respond within the timeframe set by applicable law—typically 14 to 30 days depending on your jurisdiction.

You also have the right to withdraw consent for non-essential processing. For example, if we have sent you promotional emails and you no longer wish to receive them, you can unsubscribe through the email footer or update your notification preferences in your account. Withdrawing consent for marketing does not affect your ability to use leatoto's core services.

How We Protect Your Data

We at leatoto use SSL encryption for all communication between your device and our servers. Your password is hashed using industry-standard algorithms—we do not store plaintext passwords and cannot recover them if you forget. We store sensitive data (identity documents, full account numbers) on encrypted servers with restricted access. Our internal teams can access only the minimum data needed for their role (e.g., support staff can see your transaction history but not your password).

We conduct regular security audits and penetration testing to identify and fix vulnerabilities. If we detect a data breach, we notify affected users and regulatory authorities within the timeframes required by law. While we cannot guarantee absolute security, we maintain industry-standard practices and continuously invest in security infrastructure.

Contact Us About Privacy

If you have questions about our privacy practices, want to request access to your data, or wish to lodge a complaint, you can reach our support team via email or in-app messaging. Provide your account details and describe your request clearly. We aim to respond to data-access and deletion requests within 14 to 30 days, depending on local law and the complexity of your request.

Our privacy policy may change over time as we update our practices or comply with new laws. We will notify you of material changes via email or through prominent notice in your account. Your continued use of leatoto after we post changes constitutes your acceptance of the updated policy. If you disagree with our privacy practices, you can close your account and request deletion of your data (subject to legal retention periods).

Privacy Policy Summary

We at leatoto are committed to protecting your privacy while operating a secure, transparent gaming platform. We collect only the information necessary to create your account, process payments (DANA, e-wallet, mobile banking, local payment, online payment, bank transfers), calculate your weekly cashback, and comply with anti-fraud and regulatory laws. We do not sell your data, build marketing profiles, or share personal information with third parties except where necessary to deliver leatoto services.

Your data is protected using encryption, access controls, and regular security audits. You have the right to access, correct, and request deletion of your personal information. If you have privacy concerns or want to exercise your rights, contact our support team—we respond within applicable legal timeframes. Our services are available only where local law permits, and we comply with data-protection regulations in every jurisdiction where we operate.

• We collect registration, transaction, and behavioural data only.
• We use your data to operate the platform, prevent fraud, and comply with law.
• We do not sell or share your data for marketing purposes.
• Your data is encrypted and protected with industry-standard security.
• You have the right to access, correct, and request deletion of your data.
• Contact our support team to exercise your privacy rights.