spvtoto Privacy Policy – Data Protection & Your Rights

This page describes what we collect when you use spvtoto and how we keep that data protected. We collect personal information only when you register an account, verify your identity, deposit funds, or contact our support team. Your data is encrypted in transit and at rest, and we do not sell it to third parties. We use your information solely to operate spvtoto—processing payments via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer; verifying your identity through KYC documents; detecting fraud; and complying with Indonesian law.

When you access spvtoto on Android via our app or on iOS via your mobile browser, we log your IP address, device type, and browser session data for security and fraud prevention. We do not track your behaviour across other websites, and we do not use your account data for marketing purposes outside spvtoto. If you have questions about your privacy rights, how to request your data, or how to delete your account, this page outlines your options and our contact details.

Our services are available only where local law permits. This privacy policy is governed by the laws applicable in Indonesia and applies to all users accessing spvtoto from any jurisdiction.

What Information We Collect

We collect the following information when you use spvtoto: Your email address, full name, phone number, and date of birth during account registration. Your identity documents (KTP, passport, or driver's licence), a selfie for facial recognition, and proof of residential address (utility bill or bank statement) during KYC verification. Your payment method details (name, account number, payment provider) when you link DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet. Your IP address, device type, operating system, and browser information when you log in or access our platform.

We also log your account activity: all bets placed, game outcomes, deposits, withdrawals, and support interactions. This activity log serves two purposes—to display your complete transaction history in your account dashboard, and to detect unusual patterns that may indicate fraud or security breaches. Your password is stored as an encrypted hash; we never store it in plain text. If you request a password reset, we send a one-time link to your registered email valid for a limited time.

How We Use Your Data

We use your personal data to: Verify your identity and residential eligibility (KYC compliance). Process your deposits and withdrawals through your chosen payment provider. Detect and prevent fraud, money laundering, and account abuse. Comply with Indonesian law and any court orders or regulatory requests. Provide customer support when you contact us via email or in-app chat. Send notifications about account updates, deposit confirmations, and withdrawal status via email or push notification on your mobile device (Android or iOS).

We do not use your data for marketing, analytics profiling, or selling to third parties. We do not share your KYC documents, payment details, or game history with any external company unless required by law enforcement. Your complete game history, deposit records, and withdrawal history remain visible only to you in your account dashboard and to our internal compliance team for dispute resolution and legal compliance.

Third-Party Processors & Data Storage

Our spvtoto platform uses third-party providers for specific functions. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, and bank partners) receive only the minimum data needed to complete your transaction—your name, account number, and transaction amount. These providers have their own privacy policies and are responsible for protecting your financial data according to Indonesian banking regulations. We host our servers in geographically distributed data centres to ensure service availability and security; these servers may sit outside Indonesia, but your data remains encrypted at all times.

We may be compelled by court order, government authority, or law enforcement to disclose user information. If this occurs, we will notify you via your registered email address unless we are legally prohibited from doing so. We retain your account data for at least five years after your final activity on spvtoto to comply with record-keeping requirements. If you request account deletion, we anonymize your personal data but retain your encrypted game history for legal and regulatory purposes.

Cookies, Tracking & Mobile Notifications

Our spvtoto website and Android app use session cookies to keep you logged in and to remember your language and account preferences. These cookies are essential to platform operation; your browser or app requires them to function. We do not use tracking cookies for analytics outside spvtoto, and we do not place advertisements that follow you across other websites. If you disable cookies in your browser, you will not be able to log in or access your account on iOS via Safari or Chrome.

Our Android app sends push notifications for account updates, deposit confirmations, withdrawal status, and game availability. You can disable push notifications in your phone's app settings or within the spvtoto app itself under Notifications. Email notifications (withdrawal review status, account security alerts) are sent to your registered email address; you may unsubscribe from non-critical emails by contacting our support team, but we will continue to send account-critical notifications regardless of your preference.

Your Rights & Data Requests

You have the right to request a copy of all personal data we hold about you. Submit a data request via the Help menu in your account or by emailing our support team with your account email address and a clear request. We will respond within 30 days with your data in a readable format (email or downloadable file). You may also request correction of inaccurate data, such as your name, phone number, or address, by logging into your account settings or contacting support.

You can request account suspension or permanent deletion at any time. A temporary suspension locks your account for a period you specify; you can reactivate it by logging in. Permanent deletion removes your ability to access spvtoto, but your encrypted transaction history and KYC documents are retained for legal compliance. If you dispute how your data has been processed, you have the right to file a complaint with the Indonesian data protection authority or pursue legal action in Indonesian courts. Users in Jakarta, Surabaya, Bandung, Medan, and other cities can contact our support team for assistance with data requests or privacy concerns.

Your Privacy & Account Security on spvtoto

We at spvtoto take your privacy seriously. We encrypt all data in transit using industry-standard TLS protocols and at rest using AES-256 encryption. Our staff access your data only when required—to process your deposits, resolve disputes, or comply with legal requests. We conduct regular security audits and maintain comprehensive incident-response procedures. If we detect a data breach affecting your account, we will notify you immediately via email and within any timeline required by Indonesian law.

This privacy policy is current as of today. We may update it at any time to reflect changes in our practices or legal requirements. Material changes will be notified to your registered email address. Your continued use of spvtoto after notification constitutes acceptance of the updated policy. If you disagree with any changes, you may request account deletion and withdrawal of your balance.

For privacy questions, data requests, or to report a security concern, contact our support team through the Help menu in your spvtoto account or by email. We respond to data requests and privacy inquiries within one business day during standard hours. Your privacy is fundamental to how we operate spvtoto.