kibatotoPrivacy Policy

This page describes what we collect when you use kibatoto and how we keep that data protected. We are committed to being transparent about our data practices. When you create a kibatoto account on Android APK or iOS Safari, sign in from your phone, deposit money, or withdraw winnings, we collect and process personal information. We store this data securely, encrypt it in transit, and share it only with payment processors and compliance partners necessary to operate kibatoto.

Our privacy practices apply across all kibatoto services—sportsbook (football, Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We handle your data the same way whether you access kibatoto from Jakarta, Surabaya, Bandung, or Medan.

We collect only what is necessary to verify your identity, process your payments, prevent fraud, and comply with local law. You have rights over your data—including the right to request access, correction, or deletion. This policy explains those rights and how to exercise them.

What we collect on kibatoto

Account data during sign-up

We collect your email address, username, password, full name, date of birth, and phone number when you create a kibatoto account. We use your email to send account notifications and password reset links. Your phone number is verified via SMS code as part of our Know Your Customer (KYC) process. We store your password in encrypted form; we never store or access it in plain text. Your date of birth helps us confirm you meet the minimum age requirement to use kibatoto.

Identity and address verification

Before you withdraw funds from kibatoto, we collect and verify your government-issued ID (passport, national ID, or driver's license) and address proof (utility bill, rental agreement, or official correspondence). These documents are uploaded to our secure servers, encrypted, and reviewed by our compliance team. We retain copies for record-keeping and to prevent fraud. We may store these documents for the duration of your kibatoto account and for a period after account closure as required by local law.

Payment and transaction data

When you deposit on kibatoto via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer from mobile banking, local payment, online payment, or e-wallet, we collect transaction details—amount, date, time, and confirmation code. We store this data to reconcile deposits, confirm fund receipt, and prevent duplicate charges. We do not store full credit card or bank account numbers; our payment processors handle that information securely on their own servers.

Device and connection data

We collect information about your device when you use kibatoto. On Android, we log your APK version, device model, and OS version. On iOS Safari, we log your Safari version and device type. We collect your IP address, connection type (WiFi or mobile data), and approximate location (by country or region only, not street address). This data helps us optimize kibatoto for your device, detect fraud, and troubleshoot connection issues. We do not track your precise GPS location.

Gameplay and betting data

We record your bets, deposits, withdrawals, and game outcomes on kibatoto. This history is tied to your account and used to calculate winnings, settle disputes, and comply with local regulations. We retain this data for at least six months, or longer if required by law. Your gameplay data is never shared with third parties for marketing purposes—it is used only to operate kibatoto and fulfill legal obligations.

Our kibatoto data protection and your rights

How we protect your data

We encrypt your data in transit using industry-standard TLS (Transport Layer Security) protocols. Data at rest is encrypted using AES-256 or equivalent. Our servers are located in secure data centres with restricted physical access, redundant backups, and 24/7 monitoring. We limit employee access to your data to those who need it to process your account or investigate disputes. We require all employees and contractors to sign confidentiality agreements.

Third-party processors

We share your data with payment processors to confirm deposits and withdrawals. These processors may sit outside your jurisdiction—for example, in Singapore, the Philippines, or other regions. We require all processors to meet data protection standards equivalent to our own. We share identity verification documents with our compliance partners to satisfy Know Your Customer (KYC) requirements. We may share limited data with law enforcement if required by a court order or local law. We will notify you of such requests unless legally prohibited from doing so.

Cookies and tracking

We use cookies to maintain your kibatoto login session and remember your preferences. These are session cookies—they expire when you close your browser or log out. We do not use cookies to track your activity across other websites. We may use analytics services to understand how users interact with kibatoto, but we do not link this data to your personal identity. You can disable cookies in your browser settings, but doing so may affect your kibatoto experience.

Data retention and deletion

We retain your account data for the duration of your kibatoto account and for six years afterward, or as required by local law. If you close your account, we delete your non-critical data (such as email preferences) but retain transaction records and identity documents for dispute resolution and regulatory compliance. If local law permits, you can request deletion of account data, but we will retain data as required by law.

Contact us about privacy

If you have questions about how we handle your data on kibatoto, or if you want to exercise your rights regarding your personal information, contact our support team. You can reach us through the support section in your kibatoto account on mobile or desktop. We respond to privacy requests within 30 days. If you are not satisfied with our response, you may file a complaint with your local data protection authority. This policy is effective as of the date posted on kibatoto.app and may be updated at any time. We will notify you of material changes via email or through the app.