ocatoto Platform Privacy Notice
This page describes what we collect when you use ocatoto and how we keep that data protected throughout your account lifecycle.
We at ocatoto take your privacy seriously. When you create an account with us, link a payment method like DANA or e-wallet, participate in slot tournaments, or access our live casino and sportsbook offerings, you share personal information with us. We collect that information to verify your identity, process payments, deliver your winnings, prevent fraud, and comply with legal requirements. This notice explains exactly what we collect, how we use it, who we share it with, and what rights you have.
Read this carefully. It applies to every player on ocatoto, whether you access through a browser, mobile app, or Android device. If you have questions after reading, our support team can help during business hours.
What we collect when you join ocatoto
We collect your email address, phone number, and password when you create an ocatoto account. We ask for your full name, date of birth, and address during KYC verification. We require a government-issued ID (passport, driver's licence, national ID) and proof of address (utility bill, bank statement, or similar). We also collect your payment method details—your linked DANA, e-wallet, mobile banking, local payment, online payment, or bank account information. We do not store full card numbers or bank account numbers directly; we store encrypted tokens that your payment provider gives us.
When you use ocatoto, we log your gameplay data, tournament participation, account balance, withdrawal requests, and support conversations. We record your IP address, browser type, device type, and location (derived from IP). We use cookies and similar tracking tools to remember your login preferences and improve site performance.
Your data is encrypted and stored securely
We use industry-standard encryption (TLS/SSL) for data in transit and AES-256 encryption for sensitive data at rest. We access your data only when necessary and limit employee access to those who need it for their work.
How we use your data on ocatoto
We use your identity information to verify that you are of legal age and in a jurisdiction where ocatoto operates. We use your payment details to process deposits from e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking. We use your gameplay data to calculate tournament standings, issue payouts, and detect fraud. We use your contact information to send account notifications, withdrawal confirmations, and support responses during business hours.
We analyse gameplay data to understand user behaviour, improve our game library, and plan tournament schedules. We do not sell your personal data to advertisers or marketing companies. We do not share your gameplay history with other players. We keep audit logs of who accessed your data and when, for security and compliance purposes.
Third-party processors and where your data lives
We work with payment processors (banks, digital wallet providers) to handle deposits and withdrawals. These processors see your linked payment account details but do not have access to your ocatoto gameplay or personal identity documents. We use cloud servers to store your account data; these servers may be located outside Indonesia. We comply with data protection laws even when our infrastructure is hosted internationally. We use support tools and analytics platforms to manage customer service and track site performance; these providers access only the minimum data needed for their function.
We do not share your information with third parties for marketing or profiling purposes. If we are required by law to disclose your data—for example, to comply with a court order or regulatory investigation—we will inform you unless legally prohibited from doing so.
Your privacy rights on ocatoto
You have the right to access your personal data. Contact our support team and we will provide a copy of everything we hold about you. You have the right to correct inaccurate data—if your address or phone number changes, update it through your account settings or ask our team. You have the right to request deletion of your data after your account is closed, subject to legal retention requirements (we may need to keep records for accounting or anti-fraud purposes). You have the right to object to certain uses of your data, such as marketing communications; you can opt out through your account preferences.
We retain your identity documents and payment records for as long as your ocatoto account is active and for a period after closure to comply with financial and anti-money-laundering regulations. We delete gameplay logs and support conversations after they are no longer needed for service delivery or fraud prevention.
Cookies and tracking on ocatoto
We use cookies to store your login session, remember your preferences, and measure site usage. Session cookies expire when you close your browser. Persistent cookies may remain for up to one year. We use first-party cookies (set by ocatoto) and analytics tools that may set third-party cookies. You can disable cookies in your browser settings, but this may affect your ability to access ocatoto features. We do not use cookies to track you across other websites.
During major holidays—Idul Fitri, Idul Adha, Imlek, Nyepi—we may adjust our service availability or run expanded tournaments. We track participation during these events to ensure fair outcomes and prevent fraud. Players across Jakarta, Surabaya, Bandung, Medan, and Semarang access the same privacy protections regardless of their location.
Changes to this privacy notice and contact
We may update this notice as our practices evolve. We will notify you of material changes by posting an updated notice on ocatoto and updating the effective date. Continued use of ocatoto after an update means you accept the new terms. Our support team is available in English during business hours to answer questions about this privacy notice, your data, or your rights. You can also request access to your data or report a privacy concern through your account dashboard.
We take data security seriously. If we discover a breach of your personal information, we will notify you promptly and explain what steps we have taken to protect you. Our commitment is to handle your information with care, transparency, and respect for your privacy.