Privacy Policy Birutoto — Our User Data Protection

Birutoto collects several categories of data from users, each with a clear purpose. We do not collect data excessively just because we can — every piece of information we request has a specific reason behind it.

Identity and Account Data

When you register at birutoto, we ask for your full name, date of birth, email address, and contact number. This data is used to create and manage your account, and to ensure the platform is only accessed by users who meet the age requirements.

Identity Verification Data (KYC)

To process withdrawals and meet regulatory obligations, we collect identity documents such as a national ID or passport, as well as proof of ownership of the payment method. This data is stored with encryption and can only be accessed by authorized personnel.

Transaction Data

Every deposit, withdrawal, and betting activity is logged for accounting purposes, fraud detection, and dispute resolution. Transaction history is also available for members to view through their account page.

Technical and Device Data

Birutoto automatically logs certain technical information when you access the platform, including IP address, browser type, operating system, and access time. This data is used for security, performance optimization, and aggregate analysis that does not identify individuals.

The data we collect is used for specific and legitimate purposes. We do not use data for anything beyond what is described here without explicit user consent.

• Service Operations: Processing registrations, identity verification, deposit and withdrawal transactions, and ensuring the platform runs smoothly for all users.
• Platform Security: Detecting suspicious activity, preventing fraud, and protecting all members from unauthorized access attempts on their accounts.
• Official Communications: Sending transaction notifications, policy updates, and other important information via email or in-app notifications.
• Service Improvement: Analyzing usage patterns in aggregate and anonymized form to understand which features are most needed and where the user experience can be improved.
• Marketing Communications: Sending promotional information and exclusive offers to members who have consented to receive marketing communications. Users may unsubscribe from marketing emails at any time.

Birutoto does not sell user data. Full stop. However, in the course of operating the platform, certain categories of parties may have limited access to specific data for defined purposes:

All third parties working with birutoto are bound by confidentiality agreements that prohibit them from using user data beyond the agreed scope.

Birutoto implements comprehensive technical and organizational security measures to protect user data from unauthorized access, loss, or damage.

Technical security measures we have in place:

• 256-bit SSL/TLS encryption for all data transmitted between users and our servers
• At-rest encryption for sensitive information such as KYC documents
• 24-hour intrusion detection and network monitoring system
• Role-based access control — only authorized personnel can access sensitive data
• Regular security audits by internal teams and independent third parties
• Regularly encrypted data backups to geographically separate locations

Data retention periods:

Active account data is retained for the duration of membership. After an account is closed, data is kept for the minimum period required by regulations (generally 5–7 years for financial data) before being permanently deleted. Technical data such as access logs is retained for a maximum of 90 days.

Birutoto uses cookies and similar technologies to ensure the platform runs smoothly and delivers a more personalized experience. Below are the categories of cookies we use:

• Essential Cookies: These cookies are required for the platform to function. Without them, core features such as Login, session management, and security will not work. These cookies cannot be disabled.
• Preference Cookies: Saving your personal preferences such as language, display settings, and favorite games so you don't have to reconfigure them every time you open the platform.
• Analytics Cookies: Helps us understand how users interact with the platform in aggregate — which pages are visited most, which features are used most often. This data is anonymous and does not identify individuals.
• Security Cookies: Used to detect suspicious activity and protect user accounts from unauthorized takeover attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect platform functionality.

As a birutoto member, you have a number of rights regarding your personal data that you can exercise at any time:

To exercise any of the above rights, contact the birutoto support team via live chat. We will respond to every request within 30 business days.

Birutoto services are strictly intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we find that an account was created by someone who does not meet the age requirement, that account will be closed immediately and all associated data will be deleted from our systems as soon as possible in accordance with applicable procedures.

In the course of global operations, user data may be processed on servers located outside Indonesia. Birutoto ensures that all cross-border data transfers are carried out with protection equal to or higher than the data protection standards applicable in Indonesia.

Steps we take to ensure the security of cross-border data transfers include:

• Use of standard data protection clauses in agreements with overseas partners
• Ensuring that the destination country has an adequate data protection framework in place
• Data encryption during cross-border transfers
• Restricting overseas access to only personnel who genuinely require it

Birutoto may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulations, or the development of new services that require data to be processed differently.

When a material change occurs — meaning a change that significantly affects user rights or the way we use data — we will:

• Displaying clear on-platform notifications when users log in
• Sending notification emails to the registered address
• Including the update date at the top of this document

Continuing to use birutoto services after a policy update takes effect constitutes your acceptance of the changes. If you do not agree with the updates, you may close your account and withdraw your full balance before the new policy comes into full effect.

If you have any questions, concerns, or wish to exercise your data rights as described above, the birutoto team is ready to assist through the following available communication channels:

• Live Chat: Available 24 hours directly on the platform. This is the fastest way to get a response to any privacy-related questions.
• Support Email: [email protected] — for more formal requests or those requiring documentation, such as data access requests or account deletion.
• FAQ Page: Available on birutoto.ceo/faq for general frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex requests such as data deletion or privacy violation claims, processing may take up to 30 business days in accordance with applicable regulations.