epictoto Privacy Policy - Data Protection & Your Rights
This page describes what we collect when you use epictoto and how we keep that data protected. We at epictoto take data privacy seriously. When you register an account, verify your identity (KYC), deposit funds, or place bets on Liga 1, Piala AFF, Champions League, or other markets, we collect information to operate the platform and comply with law.
Our privacy commitment centres on transparency. We explain what data we hold, why we hold it, who can access it, and how long we keep it. We do not sell your personal information to third parties for marketing. We do share payment details with payment processors like DANA, e-wallet, mobile banking, local payment, online payment, and e-wallet — and bank details with mobile banking, local payment, online payment, and e-wallet — solely to process your deposits and withdrawals.
Your account data may be stored on servers located outside your jurisdiction. We apply consistent security standards regardless of location. This policy applies to all users accessing epictoto from supported regions.
What Data We Collect and Why
Account registration
When you register on epictoto, we collect your email address and password. This information creates your account and allows you to log in. We use email to send account notifications, verification codes, and messages about your account activity or platform updates.
Identity verification (KYC)
Before you can deposit funds, we require identity verification. You upload a government-issued ID scan, provide your full legal name, date of birth, and address. We collect this to comply with anti-money-laundering (AML) regulations and to verify that you are authorised to use epictoto in your jurisdiction. KYC documents are encrypted and stored securely.
Payment information
When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we collect transaction details. We do not store your full bank account number or wallet credentials on epictoto's servers. Instead, payment processors retain and encrypt this information. We store only transaction records — amount, date, method used — for accounting and reconciliation.
Betting and gaming activity
We log all your activity on epictoto — bets placed, games played, withdrawals requested. This data helps us detect fraud, settle disputes, and comply with regulations. Your activity history remains in your account ledger and is accessible to you anytime.
Technical and browsing data
We collect information about how you access epictoto: your IP address, browser type, device type (Android, iOS, desktop), and pages visited. This helps us improve the platform, detect suspicious access patterns, and prevent fraud.
What we do not collect
- We do not ask for your financial password or PIN
- We do not monitor your communications outside epictoto
- We do not sell your data to advertisers or marketing companies
- We do not share betting history with third parties except when required by law
Third-Party Processors and Data Sharing
We share certain data with trusted service providers to operate epictoto. Payment processors receive your payment method details (routed securely via encrypted channels) to process deposits and withdrawals. Our hosting provider stores encrypted account data and activity logs. Identity verification services assist with KYC document scanning and verification.
We may disclose data when required by law — for example, if Indonesian regulatory bodies issue a valid request, or if you are involved in a dispute that requires law enforcement investigation. We do not otherwise share personal information with government entities without your consent.
Your Rights and Data Access
You have the right to request access to your personal data held by epictoto. Contact our support team from Jakarta, Surabaya, Bandung, Medan, or any supported region, and we will provide a summary of the data we hold about you. You can also request correction of inaccurate information or deletion of your account and associated data (subject to legal retention requirements).
Data retention on epictoto follows regulatory requirements. Account data is retained as long as your account is active, and for at least five years after closure for regulatory compliance. Temporary browsing data (IP logs, session cookies) is typically retained for 90 days.
Cookies and Tracking
We use cookies to maintain your login session, remember your language preference, and track activity within epictoto. These are essential to the platform's function. You may disable cookies in your browser settings, but this may prevent you from accessing certain features. We do not use tracking pixels or third-party cookies for external advertising.
Contact for Privacy Inquiries
If you have questions about our privacy practices or wish to exercise your data rights, contact our support teamWe will respond to all data access requests within 14 days. For urgent privacy concerns or suspected data breaches, please contact us immediately through the in-app help section or account settings
Final Provisions
Our privacy practices are governed by applicable Indonesian law and the data protection standards we apply to all users accessing epictoto from supported jurisdictions. We reserve the right to update this policy — when we do, we will notify you via email and display the updated policy on this page with a revision date.
epictoto's commitment to privacy is ongoing. We continuously review our security practices, audit third-party processors, and update retention policies to reflect current best practices. By using epictoto, you acknowledge that you have read and understood this privacy policy and consent to the collection and use of your data as described.
Service availability is jurisdiction-restricted. Access to epictoto is available only where local law permits. Your privacy rights and our data handling practices apply uniformly across all supported regions.