mawaetoto Privacy Policy

This page describes what we collect when you use mawaetoto and how we keep that data protected. We collect your email address, identity card information, and address details during account verification. We also collect transaction history, game activity, and browser or device information to operate our platform securely and comply with anti-money-laundering requirements in supported jurisdictions.

We do not sell your personal data to third parties. We share information only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and banks like mobile banking, local payment, online payment, e-wallet) and our compliance team where required by law. We encrypt all data in transit and at rest using industry-standard security protocols.

Our mawaetoto servers may sit outside your home jurisdiction. By creating an account, you consent to data processing in the locations where our infrastructure operates. This policy explains your rights and our responsibilities.

What Data We Collect

We collect personal information when you register and verify your mawaetoto account. This includes your email address, full name, date of birth, identity card number, and address. We use this information to verify your identity, comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, and prevent fraud.

We also collect transaction data: deposit method, amounts, withdrawal requests, and timing. When you play on mawaetoto, we log game activity, bets placed, results, and balance changes. We collect device information (IP address, browser type, operating system) to detect unusual account access and protect against unauthorised use.

We collect cookie data to remember your login preferences and track your activity across mawaetoto pages. This helps us improve page performance and personalise your experience. You can disable non-essential cookies in your browser settings without affecting core functionality.

Data Retention: We retain your identity and transaction records for at least seven years to comply with financial and tax regulations in supported jurisdictions.

How We Use Your Data

We use your personal data for account management, verification, and payment processing. We verify your identity with third-party KYC providers to confirm you are who you claim and to meet regulatory requirements. We process your deposits and withdrawals through payment processors—your payment details are shared only with the processor you select (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank).

We use transaction and activity data to detect fraud, prevent money laundering, and comply with gaming regulations. We monitor unusual patterns—for example, rapid deposits followed by immediate withdrawals, or deposits from multiple jurisdictions—to protect both your account and our mawaetoto platform.

We may send you emails regarding account security (password resets, login alerts), payment status, or promotional updates (if you opt in). You can unsubscribe from promotional emails anytime in your account settings.

Third-Party Data Sharing

We share your data with payment processors necessary to complete deposits and withdrawals. We provide only the information required—name, account number, transaction amount—and do not share your identity card number or address with payment partners unless required by their own compliance processes.

We may disclose your information if required by law, court order, or government agency in any jurisdiction where mawaetoto operates. We comply with requests from Indonesian financial regulators and other authorities in supported regions. We do not voluntarily share user data with marketing partners or data brokers.

We use third-party analytics providers to understand how users navigate mawaetoto. These providers use anonymised, aggregated data—not your personal identity—to show us which features are popular and where users encounter friction. You can opt out of analytics tracking in your browser privacy settings.

KYC verification
We share identity and address data with third-party KYC providers only to verify your eligibility to use mawaetoto.
Payment processors
We share payment details with your chosen processor (mobile banking, local payment, online payment, etc.) to complete your transaction.
Compliance team
Our internal compliance officers access transaction records to monitor for fraud and regulatory violations.

Security & Data Protection

We encrypt all data transmitted between your browser or device and our mawaetoto servers using TLS (Transport Layer Security) 1.2 or higher. Your personal information is stored on encrypted servers with restricted access. Only authorised mawaetoto staff can view your identity card, address, or payment details.

We conduct regular security audits and penetration testing to identify vulnerabilities. We do not store credit card information—payments are processed directly by your chosen provider (e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank). This reduces the risk of data breaches affecting your payment credentials on mawaetoto.

Your password is hashed (converted to a non-reversible form) and stored on our servers. We never store your plain-text password. If you forget your password, we send you a secure reset link valid for 24 hours.

Your Rights

You have the right to access your personal data on mawaetoto. Log into your account to view your identity details, address, and transaction history anytime. You can request a copy of all data we hold about you by contacting our support team.

You have the right to request correction if information is inaccurate. If your address or contact number changes, update it in your account settings. You have the right to request deletion of your account and associated data, subject to our seven-year record-retention obligation for regulatory compliance. After the retention period expires, we delete personal data unless law requires further retention.

You have the right to object to marketing emails. Unsubscribe from promotional messages in your account preferences. You have the right to data portability—we can provide your transaction records in a machine-readable format upon request.

Cookies & Tracking

We use cookies to store your login session, remember your preferences, and track your activity on mawaetoto. Essential cookies (those required for security and basic functionality) cannot be disabled without logging you out. Preference cookies (font size, language selection) can be cleared anytime. Analytics cookies collect anonymised usage patterns and can be disabled in your browser or our privacy settings.

Third-party services (analytics, fraud detection) may also set cookies. We list these services and provide opt-out links in our mawaetoto cookie notice, displayed when you first visit.

Data Transfer & International Processing

Our mawaetoto servers are located outside Indonesia. By creating an account, you acknowledge that your personal data will be transferred to and processed in these locations. We ensure that data processors in all locations meet the same security standards as Indonesian law would require. We use data processing agreements to bind overseas processors to our privacy and security commitments.

Some of your data may be processed by staff or contractors in other countries. All overseas processors are subject to strict confidentiality and data protection obligations. We do not transfer data to locations with weaker privacy protections than your home jurisdiction without your explicit consent.

Changes to This Policy

We may update this mawaetoto privacy policy to reflect changes in our practices or in applicable law. We will notify you of material changes by email or by displaying a notice on your account page. Your continued use of mawaetoto after such changes means you accept the updated policy. We recommend reviewing this page periodically to stay informed of our data practices.

Contact mawaetoto

If you have questions about this privacy policy, how we use your data on mawaetoto, or wish to exercise your rights, contact our support team. We respond to privacy requests within 14 calendar days. You can also reach our compliance team if you have concerns about data handling or believe your information has been misused.

This privacy policy applies to all users of mawaetoto in supported jurisdictions—players in Jakarta, Surabaya, Bandung, Medan, Semarang, and other regions where our service is legally available. We commit to transparent data practices, secure handling, and respect for your privacy rights. If you do not agree with our policy, you should not create a mawaetoto account.

↑