timortotoPrivacy Policy

This page describes what we collect when you use timortoto and how we keep that data protected. We take your privacy seriously and comply with applicable data protection regulations in the jurisdictions where we operate.

Our privacy practices cover personal information you provide during account registration, identity verification (KYC), deposits, withdrawals, and gameplay. We also collect certain usage data automatically when you access timortoto via web browser or mobile app. This policy explains what we collect, how we use it, who we share it with, and what rights you have over your information.

If you have questions about our privacy practices or want to exercise your data rights, contact our support team at any time. We respond to all data requests promptly and transparently.

What Data We Collect on timortoto

We collect personal information in several categories. When you register a timortoto account, we ask for your email address, username, password, full legal name, date of birth, and country of residence. We use this information to create and secure your account, verify your identity, and comply with regulatory requirements.

For identity verification (KYC), we request government-issued ID details (passport, national ID, or driver's license number and issue date), proof of address (utility bill, rental agreement, or official mail), and sometimes a selfie photo for facial verification. This data is mandatory before your first withdrawal and is stored securely in encrypted systems.

Payment data includes your chosen deposit and withdrawal methods. If you use DANA, e-wallet, mobile banking, local payment, or online payment, we record your account username or phone number. For bank transfers (e-wallet, mobile banking, local payment, online payment), we store the account holder name and masked account number. We do not store full credit card numbers or bank credentials—payment processing is handled by encrypted third-party gateways.

Gameplay and transaction data includes all bets placed, games played (Liga 1 betting, live casino tables, slots, esports), wins, losses, and withdrawal/deposit history. We track this to calculate your loyalty tier, weekly cashback eligibility, and promotion status. Timing, location, and device information (IP address, browser type, operating system) are logged for security and fraud detection.

Account Data: Email, name, date of birth, password hash, country, preferences, account status.
Identity Data: ID type and number, address, proof documents, verification status, verification date.
Payment Data: Payment method details (masked), deposit/withdrawal amounts, transaction dates, processing status.
Behavioral Data: Bets placed, games played, stakes, outcomes, session duration, device/IP logs.

How We Use Your Data on timortoto

We use account and identity data to verify your eligibility to use timortoto, process your deposits and withdrawals, and comply with regulatory and anti-money-laundering (AML) obligations. We are required by law to collect KYC data; without it, we cannot legally offer withdrawal services.

Payment data enables us to process transactions securely and reconcile your account balance. We retain transaction records for regulatory reporting and dispute resolution.

Behavioral and gameplay data helps us calculate your loyalty tier, determine weekly cashback eligibility, identify bonus qualification status, and detect fraud or unusual account activity. We analyze this data in aggregate (without linking it to your identity) to understand user preferences, improve game offerings, and optimize our platform experience.

We may contact you via email or SMS about your account status, deposit/withdrawal confirmations, promotional offers (if you opted in), and security alerts. If you wish to stop receiving promotional messages, you can unsubscribe in your account settings or reply "STOP" to any SMS.

Third Parties and Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. However, we do share data with trusted partners who help us operate timortoto:

Payment processors: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and our bank partners (local payment, online payment, e-wallet, mobile banking) receive only the minimum data needed to process your transaction.
Identity verification providers: Third-party KYC services verify your documents and may store verification metadata temporarily (typically deleted after 30–90 days).
Fraud detection services: We use automated systems to flag suspicious transactions; these systems may access your transaction history.
Legal and regulatory authorities: If required by law (court orders, regulatory investigations, AML compliance), we may disclose your data to government agencies or law enforcement.
Cloud storage providers: Our servers may sit outside your jurisdiction; data is encrypted during transit and at rest.

All third-party processors are contractually obligated to protect your data and use it only for the specific purpose we authorize. We do not permit them to use your data for their own marketing or purposes.

Data Retention and Deletion

We retain your account, identity, and transaction data for as long as your timortoto account is active, plus a period afterward to comply with regulatory record-keeping requirements (typically 5–7 years for financial records).

If you request account closure, we mark your account as inactive but retain your data to fulfill legal obligations and resolve any outstanding disputes or claims. We do not delete data sooner than required by law, as historical records are essential for dispute resolution and AML compliance.

If you believe we are holding your data longer than necessary, contact our support team and we will review your request. You may ask us to delete or anonymize your data subject to legal and contractual obligations we must meet.

Your data rights on timortoto

Right to access: Request a copy of all data we hold about you
Right to correction: Ask us to fix inaccurate or incomplete information
Right to deletion: Request deletion of your data (subject to legal retention requirements)
Right to portability: Receive your data in a portable format for transfer to another platform
Right to object: Opt out of promotional communications and certain data uses
Right to lodge a complaint: Contact your local data protection authority if you believe we have mishandled your data

Cookies and Tracking Technologies

timortoto uses cookies and similar technologies to remember your preferences, keep you logged in, and track site performance. Essential cookies are necessary for account functionality and security. Preference cookies save your language choice, theme setting, and other user preferences. Analytics cookies help us understand how players use timortoto and where we can improve the platform experience.

You can manage cookie settings in your browser preferences. Disabling certain cookies may limit timortoto functionality (e.g., you may be logged out more frequently). We also use pixels and trackers for security purposes—detecting unusual login patterns or fraudulent transactions.

We do not use cookies to track you across other websites. Tracking on timortoto is limited to our platform and our third-party analytics partner.

Security and Data Protection

We protect your timortoto data using industry-standard encryption (TLS 1.2+) for data in transit and AES-256 encryption for data at rest. Passwords are hashed and salted, never stored in plain text. Access to your account is restricted to authorized personnel who need it to perform their duties.

We encourage you to enable two-factor authentication (2FA) on your timortoto account for an additional security layer. 2FA requires a verification code (sent to your phone) in addition to your password for login from new devices.

While we employ strong security measures, no system is non-specific info secure. If you suspect unauthorized access to your timortoto account, change your password immediately and contact support.

Children and Age Restrictions

timortoto accounts are restricted to users in supported jurisdictions. We do not knowingly collect data from minors. If we discover an account belongs to a minor, we close it and delete associated data (except where legal obligation requires retention).

Parents or guardians concerned about a minor accessing timortoto should contact our support team and provide proof of age. We will investigate and take corrective action.

International Data Transfers

timortoto operates in multiple jurisdictions. Your data may be transferred to, stored in, or processed outside your home country. By using timortoto, you consent to such transfers. We ensure that international transfers comply with applicable data protection laws and include appropriate safeguards (e.g., standard contractual clauses, data processing agreements).

If you are located in the European Union or a jurisdiction with strict data protection requirements, we implement additional safeguards to comply with GDPR or equivalent standards.

Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or prominent notice on the timortoto platform. Your continued use of timortoto after changes means you accept the updated policy.

We recommend reviewing this policy periodically to stay informed about how we protect your data. The "last updated" date is shown at the bottom of this page.

Contact Us About Privacy

If you have questions about our privacy practices, want to request your data, or believe we have mishandled your information, contact our support team via live chat on the timortoto platform, or email our data protection officer. We respond to all privacy inquiries within 10 business days and work with you to resolve any concerns.

You also have the right to lodge a complaint with your local data protection authority if you believe timortoto has violated your privacy rights.

Our commitment to your privacy reflects our broader dedication to security and transparency on timortoto. Whether you're betting on Liga 1, playing live casino tables, or enjoying slots, your personal information is treated with the utmost care and protected by multiple layers of encryption and access controls. Thank you for trusting timortoto with your data.

Effective Date and Updates

This privacy policy is effective as of the date shown below and reflects our current data practices. We reserve the right to update this policy to address new technologies, regulatory changes, or improvements to our platform.

If you access timortoto during a period when this policy has been updated, you will be prompted to review and accept the new terms before continuing. Material changes will be communicated via email to all active timortoto account holders.