medantoto Privacy Policy

This page describes what we collect when you use medantoto and how we keep that data protected. We at medantoto handle your personal information with care, following applicable data protection standards across all supported jurisdictions. Our commitment is to be transparent about what we gather, why we need it, and how we use it.

When you open an account on medantoto, deposit funds via DANA, e-wallet, mobile banking, or bank transfer, or place a wager on Liga 1 or Champions League matches, we collect information necessary to verify your identity, process your payment, and deliver our service. We do not sell your data to third parties, and we do not share it beyond what is required by law or essential to operate our platform.

Our medantoto service operates in supported regions only. We undertake to comply with local privacy regulations and to respond to your requests regarding your personal data within standard processing windows.

What we collect on medantoto

We collect several categories of information to operate medantoto. Your account data includes your name, email address, phone number, date of birth, and residential address. We require this information to verify your identity before you can withdraw funds or access certain features of our platform.

Payment information is collected when you deposit or withdraw. If you use DANA, e-wallet, or mobile banking, we record the transaction ID, amount, and timestamp. If you transfer funds via local payment, online payment, e-wallet, or mobile banking virtual account, we store your bank account details and transaction history. We do not store your full card numbers or passwords; payment processors handle sensitive credentials.

Behavioral data is collected automatically. We log your login times, device type, IP address, and browser information. We track which games you view, which markets you browse (such as Piala AFF or esports), and how long you spend on each section. This helps us detect fraud, improve our platform, and personalise your experience.

We also collect cookies and similar tracking technologies. These allow us to remember your preferences, keep you logged in, and measure how our medantoto pages perform. You can disable non-essential cookies in your browser settings without losing access to core features.

How we use your data on medantoto

We use your personal information for several purposes. Account verification is the primary reason: we need your name, address, and identity document to confirm you are who you claim to be and to comply with anti-money-laundering regulations. Payment processing requires your bank details or e-wallet credentials so we can credit deposits and process withdrawals.

Fraud prevention is critical to medantoto. We analyse your login patterns, device fingerprints, and transaction history to detect unusual activity. If we notice a withdrawal request from a new device or location, we may ask you to verify your identity before releasing funds. This protects both your account and our platform.

We use your data to communicate with you. We send account notifications, payment confirmations, and support responses to your registered email or phone number. We may also send you updates about new markets on medantoto, such as upcoming Idul Fitri tournaments or Champions League fixtures, but only if you have opted in to marketing emails.

• Account security and fraud detection
• Payment processing and settlement
• Legal compliance and regulatory reporting
• Customer support and dispute resolution
• Platform improvement and analytics
• Marketing communications (with your consent)

We do not use your data for automated decision-making that could significantly affect you. If we suspend your account due to suspected fraud, a member of our support team will review the case and contact you to explain the reason.

Third-party processors handle some of your data on our behalf. Payment gateways (such as those supporting DANA, e-wallet, and bank transfers) receive transaction details. Our hosting provider stores encrypted backups of your account. Email and SMS providers deliver our communications. We have contracts with all processors requiring them to protect your data and use it only for the purposes we specify.

Our medantoto servers may be located outside your jurisdiction. If you are in Jakarta, Surabaya, Bandung, or Medan, your data may be processed in data centres in other regions. By using medantoto, you consent to this transfer. We apply the same security standards regardless of server location.

We retain your personal data for as long as your account is active, plus a period after closure to comply with financial regulations and resolve disputes. KYC documents are kept for at least five years. Transaction records are retained for seven years. You can request deletion of non-essential data by contacting our support team, subject to legal holds.