arabtotoPrivacy Policy
We collect your email, phone number, and identity details when you register on arabtoto to verify your account and process your deposits and withdrawals through QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual accounts. This page describes what data we gather, how we protect it, how we use it, and what rights you have over your information on arabtoto.
Our commitment is straightforward: we collect only what we need to operate our platform securely, we do not sell your data to marketers, and we follow industry-standard encryption and access controls. Your payment details are handled only by our payment processors and your bank — we do not store your full credit card numbers or e-wallet credentials. Your gaming history, account balance, and personal profile are stored on our secure servers and are visible only to you and our support staff (when you contact us with an issue).
This policy applies to all users of arabtoto, regardless of jurisdiction. We recognize that laws vary across regions — some jurisdictions have strict data-protection rules, and others have different standards. We undertake to comply with the strictest applicable law in your location. Read through the sections below to understand exactly what happens with your information when you use arabtoto.
What Data We Collect on arabtoto
When you create an arabtoto account, we require your email address, a secure password, your full name, date of birth, and phone number. We use this information to verify your identity and to keep your account secure. If you update your phone number or email, we ask you to confirm the change before we process it. We also collect your residential address (city and region) to help us understand where our users are located and to comply with geographic-restriction requirements — for example, to ensure we do not serve jurisdictions where gaming is prohibited by law.
When you deposit funds into arabtoto, we log the amount, the payment method you used (e.g., QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking virtual account, local payment virtual account, online payment virtual account, or e-wallet virtual account), the timestamp, and the transaction reference number from your bank or e-wallet provider. We do not store your full bank account number, your e-wallet login, or your credit card details — that information passes directly to our payment processor and is encrypted before storage.
When you play games or place bets on arabtoto, we record your transaction history: every game you play, every market you bet on, every payout you receive. This history stays on our servers indefinitely so you can audit your account at any time. We also log your IP address, your device type (mobile or desktop), and your browser or app version each time you log in. This helps us detect unusual access patterns and protect your account from fraud.
How We Use Your Data
We use your email address and phone number to send you account notifications: login alerts, withdrawal confirmations, and important policy updates. You can adjust your notification preferences in your arabtoto account settings — for example, you can opt out of marketing emails while keeping security alerts enabled. We will never send you unsolicited promotional messages unless you have explicitly subscribed to our newsletter.
We use your identity information (name, date of birth, address) to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. These rules require online gaming operators to verify the identity of account holders and to flag suspicious activity. If your arabtoto account shows signs of fraud or money laundering — for example, rapid deposits and withdrawals with no gaming activity, or transfers from multiple unrelated third parties — we may freeze your account and request additional documentation. This is not punishment; it is a legal requirement that protects both you and our platform.
We use your transaction history to settle your bets and games fairly. When you place a market on Liga 1 or Piala AFF, we record your stake and the odds you accepted. When the market settles (after the match ends), we compare the official result to our records and credit or debit your account accordingly. This same principle applies to live-dealer games, slots, and esports markets. Your history is the audit trail that allows us to resolve disputes transparently.
We at arabtoto treat your data as a trust. We do not sell it, we do not spam you, and we do not share it with third parties except where necessary to process your payments or as required by law.
Third Parties and Data Processors
We work with several third-party service providers who have access to limited portions of your data. Our payment processors (the companies that operate mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and the virtual account systems at online payment, e-wallet, mobile banking, and local payment) receive your bank account or e-wallet details, your name, and the transaction amount. These are all reputable financial institutions with their own data-protection policies. We do not control how they use your data, but we require them to keep it confidential and to use it only for processing your deposits and withdrawals.
We also work with a web hosting provider that stores our servers. Our servers may be located outside Indonesia — possibly in Singapore, Australia, or other regions. This means your data travels across borders and may be subject to the laws of the country where the servers sit. However, we encrypt all sensitive data (payment details, identity information) before storage, so even our hosting provider cannot read the contents without decryption keys that we control.
We may also share aggregate, anonymized data with third parties for analytics and research. For example, we might tell a researcher that "arabtoto users in Jakarta placed an average of X bets per day during Piala AFF season" — but this data contains no individual identifiers and cannot be traced back to you. We do not sell individual-level data to marketers, advertisers, or any other commercial third parties.
Your Rights Regarding Your Data on arabtoto
You have the right to access all your personal data on arabtoto. Log into your account and navigate to Account Settings to view your profile, your transaction history, and your deposit/withdrawal records. You can download a full copy of your account data in a structured format by contacting our support team — we will provide it within thirty days at no charge.
You have the right to correct inaccurate information. If your name, date of birth, or address is wrong, you can update it through your account settings or by contacting support. We may ask for additional documentation (such as a copy of your ID) if you change your identity information, especially if the change might affect AML compliance.
You have the right to request deletion of your personal data, subject to legal limits. If you close your arabtoto account and request data deletion, we will remove your profile information after a retention period of five years (required for AML and tax compliance). However, we will preserve your transaction history for at least seven years to support dispute resolution and regulatory audits. Once the retention period expires, we permanently delete your data unless we are required by law to retain it longer.
You have the right to lodge a complaint with a data-protection authority if you believe we have violated your privacy rights. If you are located in a jurisdiction with a data-protection regulator (such as a Privacy Commission), you can file a complaint with that authority. arabtoto will cooperate fully with any official investigation.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to keep you logged into arabtoto and to remember your preferences (such as your preferred language or game category). These are essential cookies — without them, you would have to log in again every time you refresh the page. We do not use third-party cookies to track your behavior across other websites, and we do not serve you targeted ads based on your arabtoto activity.
You can adjust your browser settings to reject cookies, but this may impair your arabtoto experience — for example, you may be logged out unexpectedly. We recommend that you allow essential cookies and adjust your privacy settings only if you are comfortable doing so.
Data Breach and Security Incident Notification
We maintain security practices designed to protect your data from unauthorized access, alteration, or deletion. Our systems use encryption, firewalls, and access controls. However, no system is entirely risk-free. If we detect a security breach that may have exposed your personal information, we will notify you by email within thirty days of discovering the breach. We will describe what information was potentially affected and what steps we are taking to secure it.
If you suspect unauthorized access to your arabtoto account, change your password immediately and contact our support team. We will investigate the incident, reset your account security tokens, and help you review your transaction history for any unauthorized activity. If we confirm that your account was compromised, we will refund any unauthorized transactions, subject to the terms outlined in our main Terms and Conditions.
International Data Transfers and Jurisdiction
arabtoto's parent company is registered outside Indonesia, and our data infrastructure spans multiple countries. When you use arabtoto, your data may be transferred to and stored in countries with different privacy laws than Indonesia. By using arabtoto, you consent to these international transfers. However, we apply the same level of protection to your data regardless of where it is stored — we use encryption, access controls, and contractual safeguards to ensure your information remains confidential.
If you have concerns about international data transfers, you can request that we restrict your account to servers located within Indonesia, subject to availability and technical feasibility. Contact our support team to discuss this option.
Contact Us About Your Privacy
If you have questions about our privacy practices, wish to exercise any of your rights, or believe we have violated your privacy, contact our support team. You can reach us through the contact form in your arabtoto account settings or by sending an email to our support address (available on the site footer). We will respond to privacy inquiries within ten business days.
Our privacy team will work with you to understand your concern, provide information about our practices, and take corrective action if necessary. If you are not satisfied with our response, you have the right to escalate your complaint to a data-protection authority or to pursue other legal remedies available in your jurisdiction.
We update this Privacy Policy from time to time to reflect changes in our operations or data-protection laws. When we make material changes, we will notify you by email and on the arabtoto website at least thirty days before the changes take effect. Your continued use of arabtoto after the notification period constitutes acceptance of the updated policy. If you disagree with any changes, you have the right to close your account and request withdrawal of your balance.