Official kumototo Document

Kumototo Privacy Policy – Indonesia Member Data Protection

At kumototo, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly explains what data we collect, why we collect it, and how we keep it safe.

Last updated: June 1, 2026

Six Pillars of Data Protection at kumototo

Before reading the full policy, here is the core of kumototo's commitment to protecting the privacy of every member who entrusts their data to us.

256-bit SSL Encryption

All data you submit to the kumototo platform — from login credentials to transaction details — is encrypted using 256-bit SSL, the same security standard used by world-class international banks.

Data Not Sold

Kumototo has never and will never sell, rent, or trade member personal data to third parties for commercial purposes. Your data belongs to you — it is not our business commodity.

Restricted Data Access

Only staff with legitimate operational needs may access member data, and every access is logged in our internal audit system. No access can occur without a trace in our system.

You're in Control

Every member has the full right to access, update, or request deletion of their personal data. The process for exercising these rights is transparent, straightforward, and can be initiated directly through customer support.

Secure & Certified Servers

Kumototo member data is stored on servers with internationally certified security standards, equipped with multi-layered firewalls, intrusion detection systems, and regular data backups to prevent loss or unauthorized disclosure.

Rapid Incident Notification

In the event of a security incident that could potentially affect member data, kumototo is committed to issuing a notification within 72 hours, along with the mitigation steps that have been and are being taken.


SECTION 01

Introduction

This Privacy Policy applies to all services provided by kumototo, including our online gaming platform, mobile app, website, and all official communication channels. By using kumototo's services in any capacity, you acknowledge that you have read and understood this policy.

Kumototo acts as the data controller for personal information collected from members and platform users. We are responsible for decisions regarding the purpose and manner of data processing, in accordance with applicable data protection regulations in the jurisdictions where we operate.

Scope: This policy covers all data collected online through the kumototo platform. It does not cover third-party websites or services you may access via external links, even if those links appear on our platform.

We wrote this policy in plain language — not legal jargon designed to confuse. Our goal is simple: to ensure you truly understand what happens to your data when you use kumototo's services.

SECTION 02

Personal Data We Collect

Kumototo collects various types of data depending on how you interact with our platform. Below are the data categories we collect, along with their explanations:

Data Categories Specific Examples Required / Optional
Identity Data Full name, date of birth, gender, ID card/passport number Required (KYC)
Contact Data Email address, phone number, residential address Required
Financial Data Bank account number, account holder name, transaction history Required
Technical Data IP address, device type, browser, operating system Automatic
Behavioral Data Game history, game preferences, session duration, betting patterns Automatic
Communication Data Live chat conversation history, support tickets, email content When in Use

We only collect data that is strictly necessary for the purposes described in this policy. Data minimization is part of our operational standard — we do not collect more than we need.

SECTION 03

How We Collect Data

Your data is collected through several channels, depending on how you interact with the kumototo platform:

  • During account registration — You provide identity and contact details directly through the registration form.
  • During the KYC process — You upload official identity documents and financial data as part of account verification.
  • During transactions — Every deposit and withdrawal is automatically logged, including the payment method and transaction amount.
  • While using the platform — Technical and behavioral data is collected automatically by our systems when you access and play on the platform.
  • When contacting support — All communications with our customer support team are recorded for training and dispute resolution purposes.
  • Via Cookies — Session data, preferences, and analytics are collected via cookies in accordance with the cookie policy outlined in section 7.
Third-Party Sources: In some cases, we receive data from third-party identity verification providers used for our KYC process, or from fraud prevention agencies to protect the platform from illegal activity.
SECTION 04

How Your Data Is Used

Kumototo processes member personal data for the following purposes, all of which have a valid legal basis:

  • Service Provision — To process registration, login, deposits, withdrawals, and use of all platform features.
  • Identity verification (KYC) — To verify that every member is a real individual who meets the minimum age requirement and is not on any prohibited list.
  • Fraud Prevention and AML — To detect and prevent fraudulent activity, money laundering, or unauthorized account use in accordance with regulatory obligations.
  • Customer support — To provide effective assistance when you contact our team by leveraging your prior interaction history.
  • Service Communications — To send important notifications regarding your account, policy changes, or security information.
  • Platform Improvements — To analyze usage patterns in aggregate (not individually) to improve the user experience and technical stability.
  • Regulatory Compliance — To fulfill legal and reporting obligations required by competent authorities.
Legal Basis for Processing: Every data processing activity has a clear legal basis — whether contract performance (services you requested), legal compliance, balanced legitimate interests, or explicit consent you have provided.
SECTION 05

Sharing Data with Third Parties

Kumototo does not sell, rent, or trade member personal data to any third party for marketing or commercial purposes. Full stop. There are no exceptions to this rule.

However, in order to operate the platform effectively and meet our legal obligations, we work with a number of trusted third parties in a limited capacity:

  • Payment Processors — Our payment partners process financial transactions. They receive only the data necessary to complete the transaction and are bound by PCI-DSS security standards.
  • Game Providers — To run games, certain technical session data is transmitted to game providers. These providers do not receive your full identity data.
  • KYC Verification Services — Identity documents are verified through licensed KYC service providers operating under strict confidentiality agreements.
  • Legal Authorities — We are required to disclose data to competent authorities if lawfully ordered by a court or applicable regulation.

All third-party partners working with kumototo have signed data processing agreements ensuring they comply with data protection standards no lower than those we apply ourselves.

SECTION 06

Data Storage and Security

Kumototo member personal data is stored in data centers with multi-layered security infrastructure, including at-rest encryption, in-transit encryption, next-generation firewalls, intrusion detection and prevention systems, and automated periodic data backups.

Access to databases storing member data is strictly controlled using role-based access control. All access is recorded in tamper-proof audit logs. Our cybersecurity team monitors security 24 hours a day, 7 days a week.

Incident Procedure: In the event of a data security breach that could potentially affect member privacy, kumototo is committed to notifying affected members within 72 hours of the incident being detected, along with information about the known impact and steps already taken.

While no security system can guarantee 100% protection against all existing threats, kumototo continuously updates and improves its security infrastructure in line with the latest developments in cyber threats.

SECTION 07

Cookies and Tracking Technologies

Kumototo uses cookies — small text files stored on your device — for various purposes that support a better gaming experience and account security. The following are the types of cookies we use:

  • Essential cookies — Required for the platform to function correctly. Includes login session cookies and security tokens. Cannot be disabled as they are a core part of how the platform operates.
  • Functional cookies — To remember your preferences such as language settings, display theme, and favorite games so you don't need to reconfigure them each time you log in.
  • Analytics cookies — To collect anonymized usage data to help us understand how members interact with the platform and which pages need improvement.
  • Security cookies — Used to detect suspicious activity such as login attempts from unrecognized locations or devices.
Cookie Controls: You can manage cookies through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core platform features normally.
SECTION 08

Your Rights as a Member

Kumototo respects and supports the privacy rights of every member. Here are the rights you hold over your personal data stored in our systems:

Right of Access

You have the right to request a copy of the personal data we hold about you, along with information on how it is being used.

Right to Correction

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it.

Right to Deletion

Under certain conditions, you have the right to request deletion of your personal data, except for data we are legally required to retain for compliance purposes.

Right to Object

You may object to the processing of your data for specific purposes, particularly those based on our legitimate interests.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another service.

Right to Restriction

You may request that we temporarily restrict the processing of your data in certain situations defined by applicable regulations.

To exercise any of the rights above, please contact the kumototo customer support team. We will respond to your request within a maximum of 30 days. For complex cases, we will notify you if more time is needed and explain why.

SECTION 09

Data Retention and Deletion

Kumototo does not retain personal data longer than necessary. Data retention periods are determined by the purpose of processing and applicable legal obligations:

  • Active account data — Retained for the duration the account is active and for the post-closure period required by regulatory obligations (generally 5–7 years).
  • Financial transaction data — Retained for a minimum of 5 years in compliance with applicable anti-money laundering (AML) and tax obligations.
  • Support communication data — Live chat and ticket history is retained for 2 years for dispute resolution and team training purposes.
  • Analytics data — Anonymized platform usage data may be retained longer as it cannot be re-identified to any specific individual.
After Account Closure: When you close your account, we initiate a process to anonymize or delete data that is no longer legally required to be retained. Data that must be kept under applicable regulations will remain but will be locked — inaccessible for normal operational purposes.
SECTION 10

Privacy Policy Changes

Kumototo may update this Privacy Policy from time to time to reflect changes in our data practices, technology updates, regulatory changes, or platform service developments.

For significant changes — such as changes to the purpose of data processing or how data is shared — we will provide clear advance notice to all members at least 14 days before the changes take effect. Notice will be delivered via in-platform notifications and registered email.

The "last updated" date shown at the top of this document will always reflect the latest version of the applicable policy. We encourage you to periodically review this policy to stay informed about how we protect your privacy.

SECTION 11

Contact Us for Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data at kumototo, our privacy team is ready to help. You can reach us through the following channels:

  • Live Chat — The fastest option. Our support team is available 24 hours and can direct you to the privacy team for data-specific inquiries.
  • Email — Send a written request to the official kumototo support email address listed on the support page.
  • Support Ticket — Submit a formal ticket through your account panel under the "Privacy & Data" category for more structured handling.
Response Time: Privacy-related requests will be handled within a maximum of 30 days. For requests requiring additional identity verification or of higher complexity, we will provide a more accurate estimated timeframe after the request is received.

Kumototo takes every privacy question and request seriously. No question is too small — your trust is something we cannot afford to overlook.


Your Privacy Is Protected — Join kumototo Now

Now you know exactly how kumototo protects your data. Nothing hidden, nothing unclear. Register with confidence and start a secure gaming experience.

By registering, you agree to our Terms and Conditions and this Privacy Policy. Minimum age 18 years. Responsible Gaming.

Bahasa Indonesia