Privacy Policy

1 Introduction

lttoto ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform at https://lttoto.cam. This Privacy Policy sets out our practices with respect to the collection, use, storage, disclosure, and protection of personal data provided by users ("you", "Player") when registering for, accessing, or using the lttoto platform and its associated services.

This policy applies to all personal data we process in connection with the lttoto platform, including data collected through our website, any mobile-optimized interfaces, customer support channels, and KYC verification processes. It should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and lttoto.

lttoto primarily serves players based in Indonesia. Where this policy references applicable law, it refers to both the international regulatory framework under which lttoto holds its gaming licence and any applicable data protection principles that mirror internationally recognized privacy standards, including those aligned with GDPR principles for international operators.

2 Data Controller

lttoto acts as the data controller for all personal data processed through this platform. As data controller, lttoto determines the purposes for which personal data is collected and the means by which it is processed. All data processing activities carried out by lttoto are governed by this Privacy Policy and applicable data protection law.

Where lttoto engages third-party service providers to process personal data on our behalf (for example, payment processors, identity verification providers, or analytics services), those parties act as data processors under a contractual obligation to handle your data only as directed by lttoto and in accordance with appropriate security standards. lttoto remains responsible for your data and does not permit processors to use it for their own purposes.

3 Data We Collect

lttoto collects the following categories of personal data, depending on how you interact with our platform:

4 How We Collect Your Data

lttoto collects personal data through the following channels and mechanisms:

• Direct Registration: When you create an account on lttoto, you provide identity, contact, and financial data directly through our registration form.
• KYC Submission: When you upload identity documents through our secure KYC portal to verify your account and unlock withdrawal functionality.
• Deposits and Withdrawals: When you initiate a financial transaction, your bank account or e-wallet details are collected and verified against your registered identity.
• Customer Support Interactions: When you contact us via live chat, email, or WhatsApp, we collect the content of those communications along with any personal data you provide within them.
• Automated Technical Collection: Our platform automatically collects technical data (IP address, device identifiers, session data) each time you access lttoto, using server logs, cookies, and similar technologies.
• Third-Party Verification: Where you consent, or where required for compliance purposes, lttoto may receive identity verification data from licensed third-party KYC and fraud screening services.

5 Lawful Basis for Processing

lttoto processes your personal data only where a valid lawful basis exists. The primary bases on which we rely are:

• Contractual Necessity: Processing required to enter into or perform our contract with you — including account creation, processing deposits and withdrawals in IDR, settling bets, and delivering customer support.
• Legal Obligation: Processing required to comply with our obligations under applicable gaming re gulations, anti-money laundering (AML) laws, and counter-terrorist financing frameworks — including mandatory KYC verification, record-keeping, and reporting of suspicious transactions.
• Legitimate Interests: Processing necessary to pursue our legitimate business interests in a manner that respects your rights and freedoms — including fraud prevention, platform security, responsible gaming monitoring, and service improvement. We balance our interests against your privacy rights before relying on this basis.
• Consent: Processing for specific purposes (such as receiving promotional communications) where we have obtained your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In rare circumstances, processing necessary to protect your life or safety, or the life or safety of another individual where you are unable to provide consent.

6 How We Use Your Data

lttoto uses the personal data we collect for the following purposes:

• Account Management: Creating, administering, and maintaining your lttoto account, including handling login, password resets, and profile updates.
• Transaction Processing: Facilitating, settling, and recording deposits and withdrawals denominated in Indonesian Rupiah (IDR) through approved local payment channels.
• KYC & Fraud Prevention: Verifying your identity and age (21+), screening for fraud, detecting and preventing money laundering, terrorist financing, and other criminal activity.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling, enforcing deposit limits, time-out periods, and self-exclusion requests, and providing support resources where appropriate.
• Bonus & Promotional Management: Determining eligibility for bonuses and promotions, verifying compliance with wagering requirements, and administering promotional offers tied to Indonesian cultural events.
• Customer Support: Responding to inquiries, resolving complaints, processing support tickets, and generally assisting with the operation of your account.
• Security & Audit: Monitoring platform access for unauthorized or suspicious activity, conducting internal audits, and maintaining security logs.
• Legal Compliance: Complying with regulatory reporting obligations, responding to lawful requests from competent authorities, and defending lttoto's rights in legal proceedings.

lttoto does not use your personal data for automated decision-making that would produce legal effects or similarly significant effects on you, without appropriate safeguards and clear disclosure. Responsible gaming limit enforcement and anti-fraud screening may involve automated checks, but any decision to restrict, suspend, or close an account is always subject to human review.

7 Data Sharing & Disclosure

lttoto does not sell, rent, or trade personal data to third parties for marketing purposes. We disclose your personal data only in the limited circumstances described below:

• Service Providers (Processors): To third-party vendors who provide essential services to lttoto — including payment processing (banks and e-wallets such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay), identity verification services, cloud hosting, and data analytics. These processors act on lttoto's instructions and are bound by data processing agreements.
• Regulatory & Law Enforcement: To competent regulatory authorities, courts, law enforcement agencies, or other bodies, where lttoto is legally obligated or is required to disclose information in accordance with applicable law or regulatory request.
• Professional Advisers: To auditors, lawyers, and other professional advisers where reasonably necessary for the operation, compliance, or defense of lttoto's business.
• Corporate Transfers: In the event of a merger, acquisition, reorganization, or sale of all or substantially all of lttoto's assets, your personal data may be transferred to the acquiring entity, subject to this Privacy Policy, which will remain in force for the transferred data.
• Your Explicit Request: Where you have given us clear, specific instructions to share your data with a named third party.

8 Data Security

lttoto employs a layered approach to protecting your personal data. We deploy appropriate technical and organizational measures designed to safeguard your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• AES-256 Encryption: All sensitive personal data stored on lttoto's systems is encrypted at rest using AES-256 encryption standards.
• TLS Encryption in Transit: Data transmitted between your device and lttoto's servers is encrypted using Transport Layer Security (TLS), preventing interception during transmission.
• Access Control: Personal data is accessible only to authorized lttoto personnel who require it to perform their duties, on a strict need-to-know basis with role-based permissions.
• Two-Factor Authentication: Key administrative systems are protected by two-factor authentication, and Players are encouraged to enable 2FA on their own accounts.
• Regular Security Audits: lttoto conducts periodic security reviews, penetration testing, and vulnerability assessments to identify and remediate potential weaknesses.
• Circumstantial Controls: Physical and logical access controls, secure server facilities, and comprehensive incident response procedures are maintained at all times.

While lttoto takes the protection of your data seriously, no method of transmission over the internet or method of electronic storage is 100% secure. Consequently, lttoto cannot guarantee absolute security. We will notify you and the relevant regulatory authorities promptly of any breach of personal data that is likely to result in a high risk to your rights and freedoms, in accordance with our incident response obligations.

9 Data Retention

lttoto retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including the purposes of satisfying any legal, accounting, or reporting requirements. The following retention periods apply:

When retention periods expire, lttoto securely deletes or anonymizes your personal data so that it can no longer be identified to you. Where it is not technically feasible to delete certain data (for example, data contained in encrypted backup systems), lttoto applies strict controls to ensure it is not processed for any purpose until deletion is technically feasible.

10 Cookies & Tracking Technologies

lttoto uses cookies and similar technologies (including local storage and device identifiers) to enhance functionality, maintain session security, and gather aggregate analytics. We categorize the cookies we use as follows:

lttoto does not use advertising or cross-site tracking cookies that profile your behavior across third-party websites. You can manage or delete cookies through your browser settings at any time, although disabling strictly necessary cookies may impair functionality of certain platform features.

11 Your Rights

As a user of lttoto, you hold the following rights with respect to the personal data we process about you, in accordance with principles of internationally recognized data protection law:

12 Children's Privacy

lttoto is an adults-only platform and strictly prohibits access by any person under the age of 21. The lttoto website and services are not directed at, and are not intended to be used by, minors. lttoto does not knowingly collect personal data from individuals under the age of 21. If lttoto becomes aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately delete that data and suspend the associated account.

Parents and guardians who have concerns about their child's access to lttoto are encouraged to contact our support team immediately. lttoto takes its obligation to prevent underage gambling seriously and employs age verification measures at registration, during KYC review, and via ongoing monitoring of account activity consistent with a player's declared date of birth.

13 International Data Transfers

lttoto operates internationally and may process and store personal data in data centers located outside Indonesia. Where your personal data is transferred to a jurisdiction outside your country of residence, lttoto will ensure that the transfer is protected by appropriate safeguards, including standard contractual clauses agreed with the receiving party and reasonable security controls. By using the lttoto platform, you acknowledge that your data may be processed and stored in jurisdictions whose data protection laws may differ from those in Indonesia.

Regardless of the location of processing, lttoto applies the same high standards of data protection described in this policy to all personal data under its control. Our data processing agreements with third-party providers require them to implement equivalent security and privacy protections when handling your data.

14 Changes to This Privacy Policy

lttoto may update or revise this Privacy Policy from time to time in response to changes in applicable law, regulatory requirements, our data processing practices, or technological developments. When material changes are made, lttoto will notify registered players via the email address associated with their account and/or via a prominent notice on the lttoto platform at least 7 calendar days before the changes take effect.

Your continued use of lttoto following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. The most current version of this policy will always be available on this page, with the last-updated date clearly displayed at the top. You are encouraged to review this policy periodically. If you do not agree to any revised terms, you may close your account in accordance with our Terms & Conditions.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how lttoto handles your personal data, please reach our privacy and data protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, accessible from the lttoto platform.
• WhatsApp: +62 811 9876 5432 — available 08:00–24:00 WIB.

We aim to respond to all privacy-related enquiries within 5 business days. For questions concerning responsible gaming, self-exclusion, or problem gambling, please visit our dedicated Responsible Gaming page for specialized support and resources.