stirtoto Privacy Policy

This page describes what we collect when you use stirtoto and how we keep that data protected. We understand that your privacy matters, and we are committed to handling your information responsibly.

When you register on stirtoto, create an account, deposit funds, place predictions, or withdraw your balance, we collect certain personal and transactional data. We use this data to operate the platform, verify your identity, prevent fraud, settle your bets fairly, and comply with applicable law.

Our stirtoto privacy practices follow applicable data protection standards. You have the right to access, correct, or request deletion of your personal data subject to our legal obligations. This policy explains what data we collect, how we use it, who we share it with, and how long we keep it.

What Data We Collect on stirtoto

We collect several categories of data when you use stirtoto:

  • Account Information: We collect your email address, phone number, full name, date of birth, and password when you register.
  • Verification Documents: We require a copy of your national ID, passport, or driver's license to verify your identity before you can deposit or withdraw.
  • Payment Information: We collect records of your deposits, withdrawals, and payment method (e.g., QRIS, e-wallet, mobile banking, local payment, online payment, or bank account details). We do not store your full payment card or e-wallet credentials; our payment processors handle that encryption.
  • Transactional Data: We record every bet you place, every spin on our slot games, every live-dealer session, and every sportsbook prediction. This includes bet amounts, outcomes, timestamps, and your resulting balance changes.
  • Device and Connection Data: We collect information about your device type, operating system, IP address, and browser. This helps us diagnose technical issues and prevent fraud.
  • Usage Data: We track which features you use on stirtoto (sportsbook, live dealer, slots, esports), how often you access the platform, and which games you play.

We collect this data through multiple channels: directly when you enter it into stirtoto forms, automatically when you use our platform, and from our payment processors and verification vendors.

We do not sell your personal data to third parties.

Our stirtoto revenue comes from platform services, not data sales. We share data only with processors needed to operate the platform or where law requires it.

How We Use Your Data on stirtoto

We use the data we collect for specific, legitimate purposes:

  • Account Management: We use your name, email, and phone to manage your account, send you important notifications, and respond to your support requests.
  • Verification and Compliance: We verify your identity using your ID documents to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations applicable in supported jurisdictions including Indonesia.
  • Payment Processing: We share your payment details with our payment processors (e.g., e-wallet, mobile banking, local payment, online payment, e-wallet handlers) only to complete deposits and withdrawals. We do not store full payment credentials ourselves.
  • Fraud Prevention: We analyze your account activity, device information, and transaction patterns to detect and prevent fraud, account takeover, and money laundering.
  • Bet Settlement: We use your transactional data to calculate and settle your bets fairly, record your balance changes, and maintain an audit trail.
  • Service Improvement: We analyse usage data to identify technical issues, improve the stirtoto user experience, and develop new features.
  • Legal Compliance: We retain and use your data to comply with applicable laws, court orders, and regulatory requests from authorities in supported jurisdictions.

We do not use your stirtoto data for marketing unless you have explicitly opted in to receive promotional emails or notifications. You can manage your notification preferences in your account settings at any time.

Data Sharing and Third-Party Processors

We use third-party vendors to operate stirtoto. These processors have access to your data only as necessary to provide their services and are contractually bound to protect your privacy:

  • Payment Processors: Companies handling mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers receive your payment information to process deposits and withdrawals.
  • Verification Vendors: Third-party ID verification services process your identity documents using automated and manual checks. Once verification completes, these vendors delete or anonymise your documents.
  • Cloud Hosting Providers: Our stirtoto servers may sit outside your jurisdiction (e.g., in Singapore or Malaysia). Your data is encrypted in transit and at rest.
  • Analytics Providers: We use analytics tools to understand how users interact with stirtoto (e.g., which features are popular). These tools process aggregated, anonymised data.

We do not share your data with advertising networks, data brokers, or marketing aggregators. If we are compelled by law to disclose your data (e.g., a court order or regulatory investigation), we will notify you promptly unless legally prohibited from doing so.

Your privacy on stirtoto is protected by encryption, limited access controls, and regular security audits. We retain data only as long as necessary to operate the platform and comply with law.

stirtoto privacy team

Your Rights and Data Access on stirtoto

We respect your privacy rights. You have the right to:

  • Access: Request a copy of all personal data we hold about you on stirtoto. We will provide this in a machine-readable format within thirty days.
  • Correction: Correct inaccurate or incomplete information in your stirtoto account. You can update your name, email, or phone directly in your account settings.
  • Deletion: Request deletion of your stirtoto account and associated data, subject to our legal retention obligations. Some data (e.g., transaction records for AML compliance) must be retained for a statutory period even after account closure.
  • Objection: Opt out of non-essential data processing, such as analytics or promotional communications, without affecting your ability to use core stirtoto features.

To exercise any of these rights, contact our support team through the stirtoto app's Help section or email us directly. We will respond to legitimate requests within thirty days. If we deny your request, we will explain the reason.

Cookies and Tracking on stirtoto

Our stirtoto platform uses cookies and similar tracking technologies for essential and optional purposes. Essential cookies (e.g., session ID, login token) are necessary for the platform to function; we set these automatically and you cannot disable them without losing stirtoto access. Optional cookies (e.g., preference tracking, analytics) are not essential; you can reject these through your browser settings or our cookie consent banner when you first visit stirtoto.

We use cookies to remember your login state, store your language preference, track your navigation within stirtoto, and measure page performance. Third-party analytics tools may set cookies to help us understand user behaviour. You can view, manage, or delete cookies in your browser settings at any time.

Data Retention and Account Closure on stirtoto

We retain your stirtoto data for as long as your account is active, plus a retention period after closure. Transaction records (bets, deposits, withdrawals) are retained for a minimum of seven years to comply with anti-money-laundering requirements in supported jurisdictions including Jakarta, Surabaya, and other regions where we operate. Verification documents are retained for three years after account closure. Usage logs and device data are typically deleted after one year unless needed for an active investigation.

If you close your stirtoto account, we deactivate it immediately and stop processing new transactions. Your historical data remains encrypted and accessible to you upon request for thirty days; after that, we begin deletion unless legal holds apply. We do not sell or reuse closed account data.

Policy Updates and Contact

We may update this stirtoto Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email to your registered address or through a prominent notice on the platform. Your continued use of stirtoto after such notice constitutes acceptance of the updated policy.

If you have questions or concerns about our stirtoto privacy practices, contact our privacy team through the app's Help section. We aim to address privacy inquiries within fourteen days. If you are dissatisfied with our response, you may file a complaint with the relevant data protection authority in your jurisdiction.

Our stirtoto platform is available only where local law permits. Users are responsible for verifying that their access and use of stirtoto comply with their jurisdiction's laws, including any data protection or privacy regulations that may apply in their region.

Related guides