Privacy Policy

1. Introduction and Scope

Welcome to the 2mtoto Privacy Policy. This document explains how 2mtoto ("we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of users ("you" or "your") who access and use our online gaming platform at https://2mtoto.cam. Our Privacy Policy applies to all services we offer, including casino games, slot games, live dealer games, sports betting markets (including bandar bola football betting and mix parlay accumulator bets), togel lottery-style games, and sabung ayam cockfighting live streaming.

At 2mtoto, we understand that privacy and data security are paramount concerns for Indonesian players. We are committed to handling your personal information with the highest standards of care, transparency, and compliance with international data protection regulations. This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together govern your use of the 2mtoto platform.

By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, please do not register an account or use our services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a 2mtoto account, we collect personal information that you voluntarily provide to us, including:

• Identity Information: Full legal name as it appears on your Indonesian National Identity Card (KTP Nasional), date of birth, gender, and nationality.
• Contact Information: Residential address in Indonesia (street, city, postal code, province), email address, and mobile phone number.
• Account Credentials: Username and encrypted password that you create for accessing your account.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, or BSI, and e-wallet information for OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Verification Documents: Copies or photographs of your KTP, proof of address documents (utility bills, bank statements), and selfie photographs for Know Your Customer (KYC) identity verification purposes.

2.2 Information We Collect Automatically

When you access and use the 2mtoto platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Type of device (desktop, mobile phone, tablet), operating system (Windows, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider, approximate geographic location (city and region level, derived from IP address), and connection timestamps.
• Usage Data: Pages viewed, games played, bet history, deposit and withdrawal transactions, time spent on the platform, navigation patterns, and interaction with promotional offers.
• Communication Records: Transcripts and recordings of your communications with our customer support team via live chat, email, or phone, for quality assurance and dispute resolution purposes.

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Processors: Transaction confirmation data from Indonesian banks and e-wallet providers to verify deposits and process withdrawals.
• Identity Verification Services: Age verification and identity authentication results from third-party KYC service providers.
• Fraud Prevention Services: Risk assessment data from anti-fraud and anti-money laundering screening services.

3. How We Use Your Information

2mtoto uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Creating and managing your 2mtoto gaming account
• Verifying your identity, age, and eligibility to use our services (KYC compliance)
• Processing deposits and withdrawals through Indonesian banks and e-wallets
• Providing access to casino games, slots, live dealer games, and sports betting markets
• Maintaining accurate transaction records and account balances
• Applying bonuses, promotions, and loyalty rewards to your account

3.2 Customer Support and Communication

• Responding to your inquiries, support requests, and feedback via live chat, email, or phone
• Sending important account notifications including deposit confirmations, withdrawal approvals, bonus credits, and security alerts
• Providing customer service in Indonesian language through our native-speaking support team
• Resolving disputes, investigating complaints, and addressing technical issues

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, money laundering, and unauthorized account access
• Monitoring betting patterns for signs of collusion, advantage play, or terms of service violations
• Implementing account security measures including IP address monitoring and device fingerprinting
• Conducting internal audits and security assessments to protect platform integrity

3.4 Legal Compliance and Regulatory Requirements

• Complying with international gaming regulations and licensing requirements
• Fulfilling anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• Maintaining records for regulatory reporting and audit purposes
• Responding to legal requests, court orders, and government inquiries

3.5 Marketing and Promotional Communications

With your consent, we may use your contact information to send promotional communications about:

• New game releases and exclusive slot titles
• Welcome bonuses, deposit match offers, and cashback promotions
• VIP program benefits and tier upgrades
• Special betting markets for BRI Liga 1, Timnas Indonesia, EPL, and major tournaments
• Seasonal promotions for Indonesian holidays and cultural events

You may opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or by contacting Customer Support. Please note that even if you opt out of marketing emails, you will still receive essential account-related communications.

3.6 Platform Improvement and Analytics

• Analyzing user behavior and preferences to improve website functionality and user experience
• Testing new features, games, and payment methods with Indonesian players
• Conducting market research to understand player preferences in Jakarta, Surabaya, Bandung, and other Indonesian cities
• Optimizing our mobile platform for Android and iOS devices popular in Indonesia

4. How We Share Your Information

2mtoto does not sell your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Game Providers: Third-party casino, slot, and live dealer game studios whose games are integrated into the 2mtoto platform
• Identity Verification Services: KYC and age verification providers who assist with customer onboarding and compliance
• Customer Support Tools: Live chat, email, and ticketing system providers that help us deliver 24/7 support
• Cloud Infrastructure: Hosting and data storage providers operating secure data centers
• Fraud Prevention Services: Anti-fraud and anti-money laundering screening services

All service providers are contractually obligated to protect your personal information and use it only for the specific purposes for which we engage them.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, government agencies, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions and protect our legal rights
• Investigate and prevent fraud, money laundering, or other criminal activity
• Protect the safety and security of our users and the public

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change via email or prominent notice on the 2mtoto website.

5. Data Security Measures

2mtoto implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the same standard used by Indonesian banks for online banking.
• Secure Data Storage: Personal information and financial data are stored on secure servers located in certified data centers with physical security controls, access restrictions, and 24/7 monitoring.
• Access Controls: Only authorized 2mtoto personnel with a legitimate business need have access to personal information, and all access is logged and audited.
• Password Protection: User passwords are encrypted using one-way hashing algorithms. Even 2mtoto staff cannot view your actual password.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities.
• PCI DSS Compliance: Our payment processing partners are certified to Payment Card Industry Data Security Standard (PCI DSS) Level 1, the highest level of security certification.

While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. You also play a critical role in protecting your account by using a strong password, never sharing your login credentials, and logging out after each session, especially when using shared or public devices.

6. Data Retention

2mtoto retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of information and applicable legal requirements:

• Account Information: Retained for the duration of your active account and for a period of 7 years after account closure to comply with financial and gaming regulations.
• Transaction Records: Deposit, withdrawal, and betting history retained for 7 years for financial audit and regulatory compliance purposes.
• KYC Documents: Identity verification documents retained for 7 years after account closure as required by anti-money laundering regulations.
• Marketing Communications: Contact information retained until you withdraw consent or request deletion, unless retention is required for legal purposes.
• Customer Support Records: Support tickets and chat transcripts retained for 3 years for quality assurance and dispute resolution.

After the applicable retention period, personal information is securely deleted or anonymized so that it can no longer be associated with you.

7. Your Privacy Rights

As a 2mtoto user, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you by contacting Customer Support.
• Right to Correction: If any of your personal information is inaccurate or incomplete, you may update it through your account settings or request correction by contacting us.
• Right to Deletion: You may request deletion of your personal information, subject to legal and regulatory retention requirements. Account closure does not automatically delete all data due to compliance obligations.
• Right to Object: You may object to our processing of your personal information for marketing purposes by opting out of promotional communications.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer by emailing [email protected] (displayed as plain text; not a clickable link) or through live chat support. We will respond to your request within 30 days and may require verification of your identity before processing certain requests.

8. Cookies and Tracking Technologies

The 2mtoto platform uses cookies, web beacons, and similar technologies to enhance your user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on return visits and remember your preferences.

We use the following types of cookies:

• Essential Cookies: Required for basic platform functionality including login authentication, session management, and security features. These cannot be disabled without affecting platform operation.
• Functional Cookies: Remember your preferences such as language selection, timezone (WIB), and display settings.
• Analytics Cookies: Collect anonymous usage statistics to help us understand how users interact with the platform and identify areas for improvement.
• Advertising Cookies: Track your activity to deliver relevant promotional offers and measure marketing campaign effectiveness.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality and your user experience.

9. Third-Party Websites and Services

The 2mtoto platform may contain links to third-party websites, including game provider sites, payment processor pages, and social media platforms. This Privacy Policy applies only to information collected by 2mtoto. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit through links on our platform.

10. Children's Privacy

2mtoto services are intended exclusively for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the legal gambling age. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and close the associated account. Parents or guardians who believe their child has provided personal information to 2mtoto should contact us immediately.

11. Changes to This Privacy Policy

2mtoto reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the most recent changes were made. Material changes will be communicated via email to your registered email address or through prominent notice on the 2mtoto website. Your continued use of our services after changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Email: [email protected] (displayed as plain text; not a clickable link)
• Live Chat: Available 24/7 through your account dashboard
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours during business days

Our Data Protection Officer is responsible for overseeing compliance with this Privacy Policy and handling privacy-related inquiries from Indonesian players across Jakarta, Surabaya, Bandung, Medan, Bali, and all provinces of Indonesia.