keristotoPrivacy Policy

This page describes what we collect when you use keristoto and how we keep that data protected. We at keristoto take your privacy seriously. When you register, deposit via DANA or e-wallet, place bets on Liga 1 or Champions League, or play live-dealer games, we collect information necessary to verify your identity, process your payments, and comply with local law. This policy explains what we collect, how we use it, who we share it with, and what rights you have.

Our commitment is transparency. We do not sell your personal data to third parties for marketing. We do not share your payment information with anyone except the payment processors required to complete your transaction. We encrypt your data in transit and at rest. We retain your information only as long as necessary to provide keristoto's services and comply with legal obligations.

This policy applies to all users of keristoto, regardless of location. If you access keristoto from Jakarta, Surabaya, Bandung, Medan, or elsewhere, the same privacy protections apply. If you have questions about how we handle your data, contact our support team.

What data we collect on keristoto

We collect different types of information depending on how you use keristoto:

• Account information: When you register on keristoto, we collect your email address, phone number, and password. We use this to create and secure your account.
• Identity verification (KYC): Before you can deposit or play on keristoto, we ask for your full name, date of birth, address, and a copy of your identity document (national ID, passport, or driver's license). We also ask for proof of address (utility bill, bank statement, or rental agreement). We verify this information against official databases to comply with anti-fraud and anti-money-laundering regulations.
• Payment information: When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we collect transaction details — the amount, date, and payment method. We do not store your full card number or bank account number. Payment processors handle sensitive payment data directly.
• Gameplay and betting data: We record every bet you place on Liga 1, Piala AFF, Champions League, or any other game on keristoto. We log your stakes, outcomes, and winnings. This data helps us detect fraud and settle disputes.
• Device and usage information: We collect information about the device you use to access keristoto (operating system, browser type, IP address). We log when you log in, what games you play, and how long you play. This helps us improve keristoto's performance and security.
• Communication data: If you contact keristoto support, we keep records of your messages, emails, and chat conversations. We use this to resolve your issues and improve our service.

How we use your data on keristoto

We use the data we collect for specific purposes:

• Account management: We use your email and phone to send you account notifications, password resets, and security alerts.
• Payment processing: We share your payment information with payment processors (mobile banking, local payment, online payment, etc.) only to complete your deposit or withdrawal. We do not use this data for any other purpose.
• Compliance: We use your identity information to verify you are who you say you are and to comply with anti-money-laundering and anti-fraud regulations in every jurisdiction where keristoto operates.
• Fraud detection: We analyze your gameplay, betting patterns, and login history to detect suspicious activity. If we notice unusual behavior (e.g., a large deposit followed immediately by a withdrawal, or logins from multiple countries in a short time), we may place a hold on your account pending review.
• Service improvement: We use aggregated, anonymized data to understand how keristoto is used, which games are popular, and where we can improve performance or add features.
• Legal compliance: We may disclose your data if required by law, court order, or government request. We will notify you of such requests unless legally prohibited from doing so.

Third-party processors and data sharing on keristoto

We share your data with third parties only when necessary to provide keristoto's services:

• Payment processors: We share your payment information with e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and mobile banking to process your deposits and withdrawals. These processors have their own privacy policies and security standards.
• Identity verification services: We share your identity information with third-party verification services to confirm your identity and comply with KYC regulations.
• Hosting and analytics providers: Our servers may sit outside your jurisdiction. We use cloud hosting providers to store keristoto's data and analytics services to understand how keristoto is used. These providers are bound by data protection agreements.
• Legal and regulatory authorities: We may disclose your data to government agencies, law enforcement, or regulators if required by law or court order.

We do not share your data with marketing companies, advertisers, or other third parties for commercial purposes. We do not sell your email address or phone number.

Your data on keristoto is protected by encryption, access controls, and regular security audits. We treat your privacy as seriously as we treat your money.

Your rights and data protection on keristoto

You have rights over your data on keristoto. You can request access to all information we hold about you. You can ask us to correct inaccurate information. You can request deletion of your data, subject to legal retention requirements. You can object to how we use your data. You can withdraw consent for certain uses of your data. To exercise these rights, contact keristoto support with your request and proof of identity.

We will respond to your request within 30 days. If we cannot fulfill your request (e.g., because we are legally required to retain your data), we will explain why. You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

Cookies and tracking on keristoto

We use cookies and similar tracking technologies on keristoto to remember your login, store your preferences, and analyze how you use the platform. Cookies are small files stored on your device. You can disable cookies in your browser settings, but this may affect keristoto's functionality. We use both session cookies (deleted when you close your browser) and persistent cookies (stored for longer periods). We do not use cookies to track you across other websites.

Data retention on keristoto

We retain your data only as long as necessary. Account information is kept for as long as your keristoto account is active. Payment records are retained for at least 5 years to comply with financial regulations. Gameplay and betting data is retained for at least 3 years to settle disputes and comply with gaming regulations. Identity verification documents are retained for at least 5 years. If you close your keristoto account, we delete your personal data within 90 days, except where we are legally required to retain it.

Security of your data on keristoto

We protect your data using industry-standard encryption (AES-256 for data at rest, TLS for data in transit). Your password is hashed and never stored in plain text. Your payment information is tokenized — we do not store your full card or bank account number. We use firewalls, intrusion detection, and regular security audits to protect keristoto's systems. We limit access to your data to employees and contractors who need it to provide keristoto's services. All staff sign confidentiality agreements.

No security system is perfect. If we discover a data breach, we will notify you and relevant authorities as required by law. We recommend enabling two-factor authentication on your keristoto account for additional security.

Contact us about privacy on keristoto

If you have questions about how we handle your data on keristoto, or if you want to exercise your privacy rights, contact our support team by email, chat, or phone. Our team is available in English and Indonesian. We will respond to your inquiry within 5 business days. You can also contact your local data protection authority if you believe we have violated your privacy rights.

This privacy policy is effective as of the date posted on keristoto. We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by posting a notice on keristoto. Your continued use of keristoto after changes are posted constitutes your acceptance of the updated policy.