mantratoto Privacy Policy: How We Protect Your Data

1. Data We Collect

mantratoto collects various types of information needed to operate the service safely and effectively. The data we collect falls into the following main categories.

Account information: When you register, we ask for your full name, email address, phone number, date of birth, and username. This data is used to uniquely identify your account and to process the identity verification required before a withdrawal can be made.

Device and browser data: When you access the platform via mobile or desktop, our system automatically records your IP address, device type, operating system, browser version, and time zone. This information helps us detect suspicious activity and improve how the platform displays across different devices.

Payment information: To process deposits and withdrawals in Rupiah (IDR), we store the payment method information you provide — such as your bank account name or digital wallet account name. Full account numbers are not stored in plain text and are always encrypted before being saved in our system.

Usage data: We record your activity history on the platform, such as pages visited, session duration, bets placed, and game categories accessed. This data is used for aggregate analysis to improve our service, not to track individual behavior for commercial purposes.

2. Purpose of Data Use

Every piece of data collected by mantratoto has a specific and proportionate purpose. We do not collect data beyond what is necessary to operate the service.

Account data is used for login authentication, financial transaction processing, age verification, and official communications such as security notices or transaction confirmations. We do not use your email address to send marketing materials without your explicit consent.

Device data and usage patterns are analyzed to detect unauthorized access, prevent fraud, and ensure every session takes place under secure conditions. This analysis is automated and does not involve manual review of individual user activity unless required for a security investigation.

Payment information is processed solely to complete transactions requested by the user. This data is not used for any purpose beyond the relevant financial processing.

3. Cookies and Tracking Technologies

mantratoto uses cookies — small files stored on your device — to support essential platform functions such as maintaining login status, saving display preferences, and keeping sessions secure. Without essential cookies, some platform features may not function properly.

In addition to functional cookies, we use first-party analytics cookies to understand how users interact with the platform as a whole — for example, which pages are accessed most often or what the average session duration is. This data is collected in aggregate and cannot be used to identify individual users.

You can manage or delete cookies through your browser settings. Please note, however, that disabling essential cookies may affect your ability to log in and use the core features of the platform normally.

4. Data Storage and Security

All mantratoto user data is stored on servers protected with industry-standard encryption. Access to the production database is strictly limited to personnel who require it within the scope of their role, and all access is recorded in an audit log that is monitored on a regular basis.

User passwords are never stored in plain text. We use a salted hashing method to ensure that even in the event of a data breach, original passwords cannot be recovered from the stored data.

Data that is no longer needed — such as expired session logs or completed verification data — is deleted according to a defined retention schedule. We do not retain data for longer than is necessary for operational and compliance purposes.

5. Sharing Data with Third Parties

mantratoto does not sell, rent, or trade users' personal data to third parties for commercial purposes. User data is only shared in limited situations necessary to operate the service.

Payment processing involves third-party financial service providers integrated with the platform. When you make a deposit or withdrawal, the information required to process the transaction is passed to the relevant payment provider. These providers are bound by confidentiality obligations and may only use that data for transaction processing purposes.

In situations required by law or a valid court order, we may disclose user information to the appropriate authorities. We will notify affected users to the extent permitted by applicable law.

6. User Rights Over Personal Data

As a mantratoto user, you have a number of rights you can exercise regarding the personal data we hold about you. These rights can be exercised by contacting the support team through the official channels available on the platform.

Right of access: You have the right to request a copy of the personal data we hold about you. This request will be processed within a reasonable timeframe once your identity has been verified.

Right of rectification: If stored data is inaccurate or incomplete, you can request an update through the account settings page or by contacting the support team. Changes to sensitive data such as payment information may require additional verification.

Right of erasure: You may request the deletion of your account and associated data. Please note that some data may be retained for a specified period in accordance with applicable legal obligations — for example, financial transaction records. Data subject to mandatory retention cannot be deleted before its minimum retention period has expired.

To submit a request related to the rights above, visit the FAQ page for step-by-step guidance, or contact our support team.