sampittoto Privacy Policy

This page describes what we collect when you use sampittoto and how we keep that data protected. We at sampittoto collect personal information—your email, identity documents, payment details, and betting activity—only to operate your account, process deposits and withdrawals, verify your identity, and comply with applicable law in supported jurisdictions. Our data handling practices follow standard encryption and storage protocols designed to prevent unauthorized access.

We recognize that your information is sensitive. We do not sell your data to third parties for marketing purposes. We may share your data with payment processors, banking partners, identity-verification providers, and regulatory authorities only when required by law or necessary to deliver our service. Our servers may sit outside your jurisdiction; data transfers comply with applicable local law and international data-protection standards.

This policy applies to all users of sampittoto across all supported regions, including Jakarta, Surabaya, Bandung, Medan, and Semarang. If you have questions about how we handle your data, contact our support team through the Help section.

What we collect from sampittoto users

We collect several categories of information when you register and use sampittoto. First, we collect account information: your email address, username, password, and date of birth. Second, we collect identity information: a photo ID (national ID card, passport, or driver's license) and proof of address (utility bill, bank statement, or government correspondence). Third, we collect payment information: your banking details or digital wallet account numbers associated with DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet. Fourth, we collect activity information: your stakes, bet outcomes, wins, losses, deposits, withdrawals, and use patterns on sampittoto.

We collect this information directly from you during registration and account use. We do not collect data through cookies, tracking pixels, or third-party data brokers. Our website uses basic session cookies to maintain your login and track your preferences; these cookies expire when you close your browser or log out. You can disable cookies in your browser settings, though some sampittoto features may not function correctly if cookies are disabled.

We collect activity data passively—each time you deposit, place a stake, or withdraw funds, we log that event with a timestamp and associated details. This logging is necessary for account reconciliation, dispute resolution, audit trails, and compliance verification.

How we use sampittoto data

We use your information for four primary purposes. First, to operate and maintain your sampittoto account: we verify your identity, process your deposits and withdrawals, calculate your cashback and tier status, and send you account notifications. Second, to comply with law: we use identity information to verify you are not on regulatory exclusion lists and to report suspicious activity to financial authorities if required. Third, to prevent fraud and abuse: we analyze betting patterns to detect unusual activity or account takeover attempts. Fourth, to improve our service: we may analyze anonymized activity trends to understand product usage, though we never use personal data for this analysis.

We do not use your information for marketing purposes, lead generation, or third-party sales. We do not share your data with advertisers or data brokers. We may contact you regarding your account status, payment issues, or required identity updates, but we do not send promotional emails without your explicit consent.

Third-party processors and data sharing

We share your data with third-party service providers who assist in operating sampittoto. Payment processors like mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banking partners receive your banking details to execute deposits and withdrawals. Identity-verification services receive your photo ID and proof of address to confirm your identity. Our hosting provider receives encrypted copies of your account data to maintain our servers. Our analytics provider receives anonymized, aggregated activity data (never personal identifiers) to help us understand platform performance.

All third-party processors are contractually obligated to protect your data with the same standards we apply. We audit these processors annually and terminate relationships if they fail to maintain security standards. We do not allow third parties to use your data for purposes beyond operating sampittoto or complying with law.

We may disclose your data to regulatory authorities, law enforcement, or financial institutions if required by valid legal process (subpoena, court order, or warrant). We notify you of such disclosure when legally permitted to do so. We may also disclose data to prevent fraud, protect the security of sampittoto, or enforce our Terms.

Our sampittoto data retention and deletion policy

We retain your account information for the duration of your sampittoto account and for seven years after account closure to comply with financial-record retention laws. During this retention period, your data is encrypted and accessible only to authorized personnel. After seven years, we securely delete your personal information, retaining only anonymized transaction summaries required by regulatory authorities.

You can request deletion of your account at any time by contacting our support team. Upon deletion, we remove your profile information within thirty days, though we retain transaction records as required by law. You cannot recover a deleted account; all balances, stakes, and tier status are permanently lost.

Data security and international transfers

We at sampittoto protect your data using industry-standard encryption (TLS for data in transit, AES for data at rest) and access controls. Our servers are located in data centers with physical security, redundant power, and regular security audits. Only authorized sampittoto personnel can access your personal information, and they do so only when necessary to operate your account or comply with law.

Our servers may be located outside your jurisdiction (Indonesia or another supported region). Any international data transfer complies with applicable local law and uses standard contractual clauses or binding corporate rules to ensure your data receives equivalent protection. You acknowledge that by using sampittoto, your data may be transferred internationally and processed according to this policy and applicable law.

Contact us about sampittoto privacy

If you have questions about this privacy policy, wish to exercise your data rights, or believe we have mishandled your information, contact us through the Help section of sampittoto. We respond to privacy inquiries within thirty days. We also maintain a Data Protection Officer who can be reached through our support portal for formal data-protection complaints.

This privacy policy may be updated from time to time to reflect changes in our data practices or applicable law. We will notify you of material changes by email or by posting a notice on sampittoto before the changes take effect. Your continued use of sampittoto after notification constitutes acceptance of the updated policy.

We are committed to protecting your privacy while operating sampittoto in supported jurisdictions where local law permits our services. Your trust is essential to our platform, and we take data protection seriously.