Privacy Policy

1. Introduction

Welcome to batito's Privacy Policy. This document describes how batito ("we," "us," or "our") collects, uses, processes, stores, and protects personal information from users ("you" or "your") of our online betting platform accessible at https://batito.cam and associated mobile applications.

batito operates as an online gaming platform offering sports betting (including bandar bola or football betting), live casino games, slot machines, lottery games (including togel), and other gambling entertainment services to players in Indonesia. We are committed to maintaining the highest standards of data privacy and security in accordance with international data protection regulations and gaming industry best practices.

By creating an account, accessing our website, or using any batito services, you acknowledge that you have read, understood, and consent to the data collection, processing, and usage practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must immediately cease using batito services and contact us to request account closure and data deletion.

2. Information We Collect

batito collects several categories of personal information necessary for providing gaming services, ensuring platform security, verifying player identity, processing financial transactions, and complying with regulatory requirements. The information we collect falls into three primary categories:

2.1 Information You Provide Directly

When you register for a batito account or use our services, you voluntarily provide the following information:

• Account Registration Information: Full legal name (as it appears on government-issued identification), date of birth, gender, email address, mobile phone number with Indonesian country code, residential address (street address, city, province, postal code), chosen username, and secure password.
• Identity Verification (KYC) Documents: Government-issued photo identification such as Indonesian e-KTP (electronic identity card), passport, or driver's license; proof of address documents such as utility bills, bank statements, or government correspondence dated within the last three months; proof of payment method ownership including bank account statements or screenshots showing your name and account number for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or others) used for deposits and withdrawals.
• Financial Information: Bank account details (account holder name, bank name, account number) for deposits and withdrawals; e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers); transaction history including deposit amounts, withdrawal amounts, bet stakes, and winnings.
• Communications: Messages sent to our customer support team via live chat, email, or other communication channels; responses to surveys, promotions, or feedback requests; any other voluntary correspondence with batito.

2.2 Information Collected Automatically

When you access batito's platform, we automatically collect certain technical and behavioral information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version (Windows, macOS, iOS, Android), browser type and version, screen resolution, device identifiers (unique device ID, advertising ID).
• Connection Information: IP address, internet service provider (ISP), geographic location (country, region, city derived from IP address), timezone settings, connection type (WiFi, mobile data).
• Usage Data: Pages visited on batito's website, time spent on each page, click patterns and navigation paths, games played and session durations, bet history (sports events wagered on, casino games played, bet amounts, outcomes), login timestamps and frequency, search queries within the platform, referral sources (how you arrived at batito).
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user behavior, maintain login sessions, remember preferences, and analyze platform performance. See Section 8 (Cookies) for detailed information.

2.3 Information from Third-Party Sources

batito may receive limited information from third-party service providers:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm deposit and withdrawal processing.
• Identity Verification Services: Verification results from third-party KYC providers that confirm the authenticity of submitted identity documents and detect fraudulent documentation.
• Fraud Prevention Services: Risk assessment scores and fraud indicators from specialized security providers that help identify suspicious account activity, multi-accounting, or money laundering attempts.

3. How We Use Your Information

batito uses collected personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your batito player account
• Processing sports bets, casino wagers, slot spins, and lottery entries
• Calculating and crediting winnings to your account balance
• Processing deposit and withdrawal requests via Indonesian banks and e-wallets
• Providing customer support and responding to inquiries in Indonesian and English
• Managing VIP loyalty program tiers and delivering tier-specific benefits
• Implementing responsible gaming tools such as deposit limits, session timers, and self-exclusion

3.2 Identity Verification and Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures
• Complying with anti-money laundering (AML) regulations and financial crime prevention obligations
• Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and collusion
• Maintaining regulatory compliance with international gaming authority requirements
• Conducting enhanced due diligence on high-value transactions or suspicious activity patterns

3.3 Platform Security and Integrity

• Protecting batito's platform from cyberattacks, hacking attempts, and technical exploits
• Monitoring for unusual betting patterns, late betting, arbitrage exploitation, or syndicate activity
• Investigating Terms & Conditions violations and enforcing platform rules
• Maintaining accurate sports betting odds and fair casino game outcomes through RNG auditing
• Preventing underage gambling by cross-referencing registration data with identity documents

3.4 Marketing and Communications

• Sending promotional emails about welcome bonuses, deposit bonuses, cashback offers, and special promotions aligned with Indonesian holidays (Independence Day, Idul Fitri, Chinese New Year)
• Delivering personalized game recommendations based on your betting history and preferences
• Providing updates about new games, features, sports markets, or platform improvements
• Sending transactional notifications about account activity, deposits, withdrawals, and bet settlements
• Conducting player satisfaction surveys and requesting feedback on batito services

Marketing Opt-Out: You can unsubscribe from promotional communications at any time by clicking the "unsubscribe" link in emails, adjusting notification preferences in your account settings, or contacting customer support. Transactional emails related to your account activity and security cannot be disabled as they are essential for service provision.

3.5 Analytics and Platform Improvement

• Analyzing user behavior to improve website navigation, mobile app performance, and overall user experience
• Identifying popular games, sports markets, and features to guide content and development priorities
• Testing new features, interface designs, and betting options with select user groups
• Measuring marketing campaign effectiveness and optimizing promotional strategies
• Generating aggregated, anonymized statistics about platform usage trends for internal reporting

4. Legal Basis for Data Processing

batito processes personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our Terms & Conditions agreement with you, including providing gaming services, processing transactions, and managing your account.
• Legal Obligations: Processing is required to comply with regulatory requirements, including KYC/AML verification, age verification (21+ enforcement), financial reporting, and cooperation with law enforcement when legally mandated.
• Legitimate Interests: Processing serves batito's legitimate business interests in platform security, fraud prevention, service improvement, and marketing, provided these interests do not override your fundamental privacy rights.
• Consent: Where required by law, we obtain your explicit consent for specific processing activities such as marketing communications or optional data collection. Consent can be withdrawn at any time by contacting [email protected].

5. Data Sharing and Disclosure

batito does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share personal data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals securely.
• KYC/AML Verification Providers: Specialized identity verification services authenticate submitted documents and screen against sanctions lists and PEP (Politically Exposed Persons) databases.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers store encrypted player data with strict access controls and compliance certifications.
• Customer Support Platforms: Live chat software and email systems facilitate Indonesian-speaking customer support operations.
• Analytics Services: Web analytics tools measure platform performance, user behavior, and marketing effectiveness using aggregated data.

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with data protection standards equivalent to this Privacy Policy.

5.2 Legal and Regulatory Authorities

batito may disclose personal information to government authorities, law enforcement agencies, or regulatory bodies when legally required or when we believe in good faith that disclosure is necessary to:

• Comply with legal processes, court orders, subpoenas, or official government requests
• Enforce our Terms & Conditions and investigate suspected violations
• Detect, prevent, or investigate fraud, money laundering, or other illegal activities
• Protect the rights, property, safety, or security of batito, our players, or the public
• Cooperate with gaming regulators in license jurisdictions during audits or investigations

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, personal data may be transferred to successor entities as part of the transaction. You will be notified via email and prominent website notice of any ownership change and any resulting changes to this Privacy Policy.

6. Data Retention

batito retains personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

Data Category	Retention Period	Reason
Account Registration Data	Duration of account + 7 years	Regulatory compliance, AML obligations
KYC Verification Documents	Duration of account + 7 years	Legal requirement, identity verification audit trail
Transaction History	Duration of account + 7 years	Financial record keeping, AML compliance
Betting History	Duration of account + 5 years	Dispute resolution, regulatory audits
Marketing Communications	Until opt-out or account closure	Consent-based retention
Customer Support Records	3 years after last interaction	Service quality, dispute resolution
Technical Logs (IP, Device)	12 months	Security monitoring, fraud prevention

Upon account closure, non-essential data is deleted within 30 days. Data required for regulatory compliance remains archived in secure systems for the periods specified above, after which it is permanently deleted using secure data destruction methods.

7. Data Security

batito implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission between your device and batito servers uses 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial details) is encrypted using AES-256 encryption standards.
• Access Controls: Role-based access restrictions ensure only authorized batito personnel can access personal data on a need-to-know basis. Multi-factor authentication (MFA) is required for administrative access.
• Secure Infrastructure: Player data is stored in ISO 27001-certified data centers with physical security, environmental controls, redundant power, and 24/7 monitoring.
• Firewalls and Intrusion Detection: Advanced firewall systems, DDoS protection, and intrusion detection/prevention systems safeguard against cyberattacks.
• Regular Security Audits: Independent security firms conduct annual penetration testing and vulnerability assessments to identify and remediate potential security gaps.
• Employee Training: All batito staff receive mandatory data protection and security awareness training annually.
• Incident Response: We maintain a documented incident response plan to quickly detect, contain, and remediate security breaches.

Despite our best efforts, no system is entirely immune to security breaches. In the unlikely event of a data breach affecting your personal information, batito will notify you via email within 72 hours and take immediate steps to mitigate harm, in accordance with applicable data breach notification laws.

8. Cookies and Tracking Technologies

batito uses cookies (small text files stored on your device) and similar technologies to enhance your experience, maintain login sessions, remember preferences, and analyze platform usage. Types of cookies we use:

• Essential Cookies: Required for core platform functionality including login authentication, session management, and security features. These cannot be disabled without severely impacting your ability to use batito services.
• Functional Cookies: Remember your preferences such as language selection, timezone (WIB), preferred odds format (decimal, fractional), and interface customizations.
• Analytics Cookies: Collect aggregated usage data to help us understand how players interact with batito, which pages are most visited, and where improvements are needed.
• Marketing Cookies: Track the effectiveness of promotional campaigns and deliver personalized game recommendations. These are used only with your consent.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from accessing certain batito features or maintaining login sessions.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of all personal data batito holds about you in a structured, commonly used format.
• Right to Rectification: Correct inaccurate or incomplete personal information in your account profile.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements for regulatory compliance).
• Right to Restriction: Request temporary suspension of data processing in certain circumstances, such as while disputing data accuracy.
• Right to Data Portability: Receive your personal data in a machine-readable format and transfer it to another service provider where technically feasible.
• Right to Object: Object to data processing based on legitimate interests, including marketing communications (opt-out).
• Right to Withdraw Consent: Withdraw previously granted consent for optional data processing activities at any time.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days and provide clear instructions for completing your request. Identity verification may be required to prevent unauthorized access to your data.

10. International Data Transfers

batito operates internationally and may transfer personal data to countries outside Indonesia for processing and storage. When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by international data protection authorities
• Ensuring recipient countries provide adequate data protection standards
• Obtaining your explicit consent where required for sensitive data transfers
• Conducting due diligence on all international service providers to verify their security and privacy practices

By using batito services, you acknowledge and consent to the international transfer of your data as described in this Privacy Policy.

11. Children's Privacy

batito services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and permanently close the associated account. Parents or guardians who believe their child has provided personal information to batito should contact us immediately at [email protected].

12. Changes to This Privacy Policy

batito reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via email to registered players and through prominent notice on our website at least 30 days before taking effect. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of batito services after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or batito's data practices, please contact our Data Protection Team:

• Email: [email protected]
• Data Protection Officer: Available via email for privacy-specific inquiries
• Customer Support: [email protected] (24/7 Indonesian-speaking team)
• Live Chat: Available 24/7 through the batito website for general account questions

We aim to respond to all privacy inquiries within 5 business days and will work diligently to address your concerns in a transparent and satisfactory manner.