heratoto Casino & Sportsbook Data Care

This page describes what we collect when you use heratoto and how we keep that data protected. Our privacy practices reflect the sensitive nature of financial and personal information on our platform—sportsbook account holders in Jakarta, Surabaya, Bandung, and Medan entrust us with payment details, identity documents, and betting history. We take that responsibility seriously and outline our commitments below.

We collect data to verify your identity, process your deposits through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks (mobile banking, local payment, online payment, e-wallet), settle your wagers, and provide customer support. We do not sell your information to third parties; we use it only for heratoto operations and legal compliance.

Our servers and data infrastructure may sit outside your jurisdiction. This page explains how we store your data, who can access it, your rights regarding your information, and how to contact us with privacy questions.

What We Collect on heratoto

We collect personal data necessary for account operation and regulatory compliance. During account registration, we collect your full name, email address, phone number, date of birth, and mailing address. We verify this information against identity documents (passport, national ID, or driver's licence) and proof of address (utility bill or bank statement) before granting deposit access.

When you fund your heratoto account, we receive payment information—your chosen e-wallet ID (DANA, e-wallet, mobile banking, local payment, or online payment) or bank account details (e-wallet, mobile banking, local payment, online payment) and transaction amounts. We encrypt all payment data and never store full credit card numbers; payment processing flows through licensed third-party gateways.

As you use heratoto, we log your betting activity, account balance, transaction history, IP addresses, device identifiers (Android / iOS), and browser cookies. We collect this data to detect fraud, settle wagers accurately, provide customer support, and comply with regulatory reporting obligations. We do not deliberately collect special categories of data (health, religion, political affiliation) unless you voluntarily provide such information in support conversations.

How We Use Your Data

We use your personal data for heratoto account management and service delivery. Your name, email, and phone enable us to contact you regarding account matters, verify your identity during verification workflows, and send transactional notifications (deposit confirmations, settlement outcomes, withdrawal status). Your payment information processes deposits and withdrawals; we retain it only as long as necessary for those transactions and regulatory archiving.

Your betting activity—Liga 1 markets, Champions League positions, esports wagers, or live-dealer table play—is used to calculate winnings, settle positions, prevent duplicate wagering, and detect suspicious patterns indicating fraud or unauthorized access. We analyse aggregated betting trends (without identifying individuals) to improve market offerings and user experience across our sportsbook, live-dealer tables, and slot games.

Your IP address and device identifiers help us identify you when you log in, detect account takeovers, prevent bonus abuse, and comply with jurisdiction-restricted access requirements. We do not use your data to profile you for targeted advertising or sell your information to data brokers. We may share anonymised, aggregated statistics with gaming research partners, but these do not identify you individually.

Account Registration

We collect name, email, phone, address, and identity documents to verify your eligibility and prevent fraud on heratoto.

Payment Processing

We store payment method details encrypted; third-party gateways handle transaction processing for e-wallet, mobile banking, local payment, banks, and online payment deposits.

Betting History

We log all wagers on our sportsbook, live-dealer, and slots to calculate results, detect fraud, and ensure accurate settlement on heratoto.

Device & Network Data

We record IP addresses, device types, and browser cookies to authenticate users, prevent account takeovers, and enforce jurisdiction restrictions.

Third-Party Data Sharing

We share your data with third-party processors only when necessary for heratoto operations. Payment processors (e.g., e-wallet aggregators, bank gateway partners) receive your payment method and transaction amount to complete deposits and withdrawals. These processors operate under contract and are bound by data protection obligations equivalent to our own.

Our customer support platform may store encrypted copies of your account details to help our team respond to your inquiries. Our hosting provider (cloud infrastructure) may access your data in raw form, but only to maintain system availability and security. We do not authorise our hosting provider to use your data for marketing or analytics beyond platform operation.

We may disclose your data if required by law—court orders, regulatory demands from gambling authorities, or law-enforcement requests. We will notify you of such legal demands unless prohibited by law. We do not voluntarily sell, rent, or licence your personal information to third parties for their commercial purposes.

Our data practices on heratoto prioritise user privacy—we collect only what we need to operate safely and settle wagers fairly, and we encrypt payment data throughout all processing steps.

Data Security and Encryption

We encrypt your data in transit and at rest. All communications between your device and heratoto servers use TLS (Transport Layer Security) encryption. Your payment information is encrypted using industry-standard algorithms and stored on secure servers with restricted access. We maintain regular security audits and patch vulnerabilities as they are identified.

We do not guarantee absolute security—no platform is completely impenetrable. However, we undertake to follow standard security practices and respond promptly to any breach. If we discover unauthorised access to your personal data, we will notify you and relevant authorities as required by law and our privacy commitments. Our security measures are documented in contracts with our hosting and payment providers; we audit their compliance regularly.

Cookies and Tracking

We use cookies on heratoto to remember your login state, store your preferences (market display, language, notification settings), and enable features like one-click betting. Session cookies are deleted when you close your browser; persistent cookies remain until you clear them manually or they expire (typically 30 days).

We do not use third-party analytics cookies (Google Analytics, Facebook Pixel) that track your behaviour across external websites. We use first-party analytics cookies only to measure heratoto platform performance—page load times, feature usage, error rates—to improve user experience. You can disable cookies in your browser settings, though some heratoto features may not function optimally without them.

Your Rights Regarding Your Data on heratoto

You have the right to access your personal data stored on heratoto. You can review your account information, betting history, and transaction records in your account dashboard. You have the right to request a copy of all personal data we hold about you in a structured, portable format.

You may request correction of inaccurate data—if your registered address is wrong, contact our support team with proof of the correct address. You have the right to request deletion of your data, though we may retain limited information if required by law or for dispute resolution (e.g., settlement records needed to verify a wagering outcome).

You may object to specific uses of your data (e.g., analytics, marketing communications) by adjusting your account settings or contacting support. Our support team responds to data access and deletion requests within timelines outlined in our terms of service. To exercise these rights, contact heratoto support through your account dashboard or via the contact details listed at the end of this policy.

Data Retention

We retain your account information and betting history for as long as your heratoto account is active. If you close your account, we typically delete personal data within 30 days, except where we are required by law to retain settlement records (gambling regulators often require 5–7 year archival of transaction history).

Payment records are retained longer than other account data—typically 5–7 years—to comply with tax and financial reporting obligations in applicable jurisdictions. We also retain limited customer support communication records for dispute resolution, typically for 2–3 years after your account closure. We delete or anonymise data beyond these retention windows unless legal obligations require longer preservation.

International Data Transfers

Our heratoto servers and data processing infrastructure may be located outside Indonesia. When you use our platform, your data may be transferred to and processed in jurisdictions with different data protection laws than those in your region. By using heratoto, you consent to such international transfers.

We select our hosting and payment processors based on their security practices and contractual commitment to protect your data. However, we cannot guarantee that foreign governments may not request access to your data or that foreign courts may not assert jurisdiction over it. If you have concerns about international data transfers, contact us before opening an account to discuss your options.

Policy Changes

We may update this privacy policy if our practices change or if new legal requirements emerge. We will notify you of material changes by email or by displaying a prominent notice on heratoto before the change takes effect. Your continued use of our platform after such changes constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have questions about how we handle your data on heratoto, wish to exercise your rights, or want to report a privacy concern, contact us through your account dashboard support form. Our privacy team responds to such inquiries within timelines outlined in our terms of service.

For data access requests, deletion requests, or concerns about international data transfers, please include "Privacy Request" in your subject line. Provide your heratoto account email and a clear description of your request so we can respond accurately.

Our full terms of service outline additional information about how we operate heratoto, your rights and responsibilities as a user, and procedures for dispute resolution. Reading both this privacy policy and our terms of service ensures you understand our complete practices and commitments regarding your data and your experience on heratoto.

Summary

We collect personal, payment, and activity data on heratoto to verify your identity, process deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks, settle wagers, and provide support. We encrypt all payment data, use first-party cookies only, and do not sell your information to third parties. We share data with payment processors and hosting providers only as necessary for platform operation, under contract with equivalent data protection obligations.

You have rights to access, correct, and delete your data; we respond to such requests within documented timelines. Our servers may sit outside Indonesia, so your data may be transferred internationally—by using heratoto, you consent to this practice. We retain account and betting data during your account's active period and for specified post-closure windows to comply with tax and regulatory obligations.

For questions about our privacy practices on heratoto, contact our support team through your account dashboard with "Privacy Request" in your subject line. Our full terms of service and this policy together describe our complete data handling practices and your rights as a heratoto user.