yupitoto Privacy Policy
This page describes what data we collect when you use yupitoto and how we keep that data protected. We are transparent about our practices: what information is stored, who has access to it, and how long we retain it. By opening a yupitoto account, you consent to the data handling practices outlined here.
We collect only the information necessary to operate the platform, verify your identity, process deposits and withdrawals, comply with legal obligations, and detect fraud. We do not sell or share your personal data with third parties for marketing purposes. Payment processors, identity-verification partners, and banking institutions may access your data as needed to provide their services.
Our servers may be located outside your home jurisdiction. Data may be processed in multiple regions for backup and redundancy. You consent to such cross-border data transfer by using yupitoto. Our services are available only where local law permits; jurisdiction-specific data laws may apply to your information.
What We Collect
When you register a yupitoto account, we collect: full name, email address, phone number, date of birth, and residential address. We use this information to create your account, verify your identity, and process deposits and withdrawals.
During account verification, we collect government ID images (KTP, passport, or driver's license) and proof-of-address documents (utility bill or bank statement). These documents are uploaded to secure servers and are encrypted immediately. We retain ID images for compliance purposes; proof-of-address documents are retained for transaction history.
When you deposit or withdraw via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect transaction metadata: amount, date, time, and payment method used. We do not store your card details, wallet credentials, or bank account numbers. All payment information is processed by certified third-party gateways and encrypted in transit.
When you use yupitoto, we collect gameplay data: games played, bets placed, outcomes, amounts wagered, and balance changes. This data helps us detect fraud, analyze game performance, and resolve disputes. We also collect technical data: device type, IP address, browser type, and geolocation. This helps us optimize streaming quality and detect unauthorized access.
How We Use Your Data
We use your personal information for the following purposes:
- Account management: We use your name, email, and phone number to create and manage your yupitoto account, send account notifications, and respond to support requests.
- Deposit and withdrawal processing: We use your address and payment method to process your financial transactions and comply with anti-money-laundering (AML) regulations.
- Identity verification: We use your government ID to confirm you are who you claim to be and prevent fraud and unauthorized access.
- Fraud detection: We analyze your gameplay patterns, betting behavior, and device data to detect suspicious activity and protect your account and yupitoto against fraud.
- Game settlement: We use gameplay data to settle bets, calculate winnings, and dispute resolution for live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), sportsbook markets (Liga 1, Piala AFF, Champions League, MotoGP, badminton), slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports (Mobile Legends, Free Fire, PUBG Mobile).
- Legal compliance: We retain and disclose data as required by law, including to tax authorities, gaming regulators, and law enforcement.
Third-Party Data Processors
We share your data with third-party service providers only when necessary to operate yupitoto. These include:
- Payment gateways: We send transaction data to mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and their payment processors to complete deposits and withdrawals. These processors handle your payment credentials securely.
- Identity verification partners: We use third-party services to verify your government ID and proof of address. These services scan documents and cross-reference them against databases to confirm authenticity. We only provide the documents you upload; we do not share additional personal information.
- Fraud and compliance services: We use external fraud-detection and AML services to analyze your transactions and assess risk. These services receive your transaction data and device information but do not receive sensitive payment details.
- Customer support tools: We use ticketing and communication systems to manage your support requests. Support staff access only the information necessary to resolve your issue—never your payment credentials or government ID.
- Data backup and hosting: We use cloud providers to store encrypted backups of yupitoto data. These providers have access to encrypted data only; they cannot read unencrypted content.
All third-party processors are contractually obligated to protect your data and use it only for the purposes we specify. We do not authorize third parties to use your data for their own marketing or purposes. If a third-party processor is breached, we will notify you as required by law.
Data Retention and Deletion
We retain your personal data for as long as your yupitoto account is active and for a period afterward to comply with legal obligations (typically 5-7 years for transaction records). Account credentials and gameplay data are retained for dispute resolution and audit purposes.
If you close your yupitoto account, we retain your personal data for the retention period specified above. After that period, we delete or anonymize your data. However, we may retain aggregated or anonymized data indefinitely for analytics and platform improvement.
You may request deletion of your personal data at any time by contacting our support team. We will delete data that is no longer necessary for account operation or legal compliance. However, we cannot delete data required for AML compliance, fraud prevention, or dispute resolution. If deletion would prevent us from honoring your withdrawal request or resolving a dispute, deletion may be delayed until such matters are resolved.
Your data on yupitoto is encrypted, access-controlled, and subject to strict retention limits. We do not sell, trade, or exploit your information.
Cookies and Tracking Technology
We use cookies on yupitoto to maintain your login session, remember your preferences, and analyze site usage. Essential cookies are necessary for platform function; you cannot disable them. Analytics cookies are optional and help us understand how you navigate yupitoto so we can improve the experience.
Cookies are small text files stored on your device. They expire based on settings we define (typically 30 days for session cookies, longer for persistent cookies). You can disable cookies in your browser settings, but doing so may prevent yupitoto from functioning properly.
We do not use tracking technology to monitor your activity outside yupitoto. We do not share cookie data with third parties for advertising purposes. Analytics data is aggregated and anonymized—we cannot link it back to individual users.
Your Rights and Data Access
You have the right to access, correct, and delete your personal data on yupitoto. You may request a copy of all data we hold about you by contacting our support team. We will provide a data export within 30 days in a portable format.
You may correct inaccurate information (name, address, email) by updating your account settings or contacting support. You may delete your account at any time; upon deletion, your balance becomes accessible via withdrawal for a 30-day window.
If you believe yupitoto has mishandled your data, you may file a complaint with your local data protection authority. We encourage you to contact our support team first so we can address your concerns directly.
Data Security Measures
We protect yupitoto data using industry-standard encryption (HTTPS/TLS for data in transit, AES-256 for data at rest). Access to personal data is restricted to authorized staff members who are subject to confidentiality agreements. We use multi-factor authentication and role-based access controls to prevent unauthorized access.
We conduct regular security audits and penetration testing to identify vulnerabilities. If a data breach occurs, we will notify affected users and relevant authorities as required by law. Our support team is available to help you secure your account if you suspect unauthorized access.
Despite our security measures, no system is completely secure. We cannot guarantee absolute data protection. By using yupitoto, you acknowledge this risk and agree to hold us harmless for breaches resulting from circumstances beyond our reasonable control.
International Data Transfers
Our servers and data processors operate in multiple jurisdictions. Your personal data may be transferred to, stored in, and processed in countries outside your home jurisdiction. Data-protection laws vary by country; some jurisdictions offer stronger protections than others.
By using yupitoto, you consent to cross-border data transfer and acknowledge that data protection standards may differ from your home country. We use contractual safeguards (Standard Contractual Clauses) to ensure third-party processors protect your data to standards comparable to our own.
Changes to This Policy
We may update this privacy policy at any time. Changes take effect upon posting to yupitoto. Continued use of yupitoto after changes are posted constitutes acceptance of the updated policy. If we make material changes that adversely affect your privacy, we will notify you via email or account notification before the change takes effect.
For questions about our privacy practices, visit our FAQ or contact our support team via Help in yupitoto. Our services are available only where local law permits. You are responsible for verifying that your use of yupitoto complies with your own jurisdiction's data protection laws.