mafiatotoPrivacy Policy

This page describes what we collect when you use mafiatoto and how we keep that data protected. We take your privacy seriously. When you register, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, Mandini, local payment, online payment), or play our live-dealer tables, sportsbook, slots, or esports markets, we collect information necessary for account verification, fraud prevention, and regulatory compliance.

Our approach is straightforward: we collect only what we need, we encrypt it, and we do not sell it to third parties. You have the right to request a copy of your data, to correct errors, or to request deletion where legally permissible. This policy explains how we handle your information and your rights as a mafiatoto player.

Our servers and data processors may be located outside your jurisdiction. By using mafiatoto, you consent to the transfer and storage of your personal information in locations outside your home country, subject to the security and legal protections outlined in this policy.

What Data We Collect on mafiatoto

We collect personal information at several points in your mafiatoto experience:

Account Registration: We collect your full name, email address, phone number, date of birth, and postal address when you create your account.
Know Your Customer (KYC) Verification: We collect government-issued ID images (passport, national ID, driver's license) and proof of residence (utility bill, bank statement, or government letter dated within three months). These are mandatory before your account can access withdrawal functions.
Payment Information: When you deposit or withdraw, we collect the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank details). We do not store full credit-card numbers or bank-account numbers; payment processors handle that encryption.
Gameplay and Betting Data: We log every wager you place on mafiatoto (live-dealer tables, sportsbook, slots, esports), every outcome, and every chat message. We also track your login times, IP addresses, device types, and browser information.
Communication Data: If you contact our support team, we keep records of your messages, tickets, and resolution notes.

We collect this information automatically and continuously while you use mafiatoto. Some data is collected passively (IP address, device information) through cookies and log files; other data you provide directly (name, email, ID documents).

How We Use Your Data

We use your data for specific, legitimate purposes:

Account Verification and Fraud Prevention: We verify your identity using your KYC documents to prevent account takeovers, money laundering, and fraud. This is mandatory for regulatory compliance.
Payment Processing: We use your payment information to process deposits and withdrawals through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank partners.
Regulatory and Legal Compliance: We retain gameplay data for anti-money-laundering (AML) audits and to respond to lawful government inquiries. We are required by law to keep records for a minimum of five years.
Dispute Resolution: We use your data to investigate complaints, verify game outcomes, and resolve disagreements about payouts or account access.
Service Improvement: We analyze gameplay patterns, user behavior, and technical performance to improve mafiatoto's stability, security, and user experience.
Communication: We email you important updates about your account, service changes, and promotional offers (if you have opted in).

We do not use your data for automated decision-making or profiling. We do not sell your personal information to third parties. We do not use your gameplay data for marketing without your explicit consent.

Third-Party Processors and Data Transfers

mafiatoto uses third-party service providers to process payments, host our servers, and manage customer support. These providers act as data processors on our behalf—they handle your information only as we instruct them, and they are bound by confidentiality agreements. Processors we work with include:

Payment gateways and e-wallet partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet integrations)
Bank partners for direct transfer processing (mobile banking, local payment, online payment, e-wallet integrations)
Cloud hosting providers for server infrastructure (may be located outside Indonesia)
Customer support platforms for ticketing and chat
Fraud-detection and identity-verification services

Your data may be transferred to and stored on servers located outside Indonesia or your home jurisdiction. These transfers comply with applicable data-protection laws. When your data is transferred abroad, we ensure it receives the same level of protection as it would in Indonesia through encryption, access controls, and contractual safeguards.

We do not transfer your data to any jurisdiction or processor without a legitimate business reason. If we change our processor, we notify you and update this policy.

Your Data Remains Encrypted in Transit and at Rest

All data transmitted to mafiatoto is encrypted using SSL/TLS protocols. Your data at rest is encrypted on our servers. Even if a third party gained unauthorized access to our infrastructure, they could not read your personal information without the encryption keys.

Data Retention and Deletion

We retain your data only as long as necessary. However, legal requirements often mean we keep records longer than you might expect:

Gameplay and betting records: Retained for the lifetime of your account and at least five years after account closure (required by anti-money-laundering regulations).
KYC documents (ID and address proof): Retained for account verification and regulatory audit; deleted or anonymized within 30 days of account closure.
Payment transaction records: Retained for the lifetime of your account and at least five years thereafter (banking and tax compliance requirements).
Support tickets and communications: Retained for three years to handle disputes and complaints.

If you close your account and request deletion of non-legally-required data (e.g., profile information), we will delete it within 30 days. However, we cannot delete data that is legally required to be retained, such as AML records and transaction history. If a legal dispute or regulatory inquiry is pending, we retain all relevant data until the matter is resolved.

You can request deletion of your personal data at any time using the contact information at the end of this policy. We will process your request within 30 days, subject to legal holds.

Cookies and Tracking Technologies

mafiatoto uses cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device that help us recognize you, remember your preferences, and track how you use our platform. We use:

Essential Cookies: Required for account login, session management, and security. These cannot be disabled.
Preference Cookies: Remember your language, theme, and display preferences.
Analytics Cookies: Track page views, game engagement, and technical performance to help us improve mafiatoto.
Third-Party Cookies: Our payment processors and fraud-detection partners may set cookies on your device.

You can control cookies through your browser settings. Disabling some cookies may affect your ability to log in or access certain features. We do not use cookies for marketing purposes without your consent.

We also use pixels and similar tracking technologies to measure user engagement and detect fraudulent activity.

Your Rights on mafiatoto

You have the following rights regarding your personal data held by mafiatoto:

Right to Access: You can request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Right to Correction: If your data is inaccurate or incomplete, you can request that we correct it.
Right to Deletion: You can request deletion of your data, subject to legal retention requirements. If a legal hold applies, we will inform you.
Right to Object: You can object to certain types of processing, such as marketing emails or behavioral analytics.
Right to Data Portability: You can request that we transfer your data to another service provider in a machine-readable format.

To exercise any of these rights, contact our privacy team (see contact information below). We will verify your identity before processing your request and respond within 30 days.

Note: If a legal dispute, regulatory inquiry, or fraud investigation is active on your account, we may not be able to delete or transfer your data until the matter is resolved.

Security Measures

We implement multiple layers of security to protect your data:

Encryption: SSL/TLS encryption for data in transit; AES-256 encryption for data at rest.
Access Controls: Only authorized mafiatoto employees can access your personal data, and only for legitimate business purposes.
Two-Factor Authentication (2FA): Available on your account to prevent unauthorized login.
Firewalls and Intrusion Detection: Our servers are protected by firewalls and continuous monitoring for suspicious activity.
Regular Security Audits: We conduct penetration testing and security reviews to identify and fix vulnerabilities.
Employee Training: Our team receives training on data protection and confidentiality.

While we take security seriously, no system is non-specific info secure. If you suspect a breach or unauthorized access to your account, contact us immediately. We will investigate and take corrective action.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you via email and post an updated version on mafiatoto. Your continued use of the platform after the update constitutes acceptance of the revised policy.

The current version of this policy is effective as of the date shown at the top of this page.

Contact Us About Privacy

If you have questions about this privacy policy, concerns about your data, or wish to exercise your rights, contact our privacy team:

Email: [email protected]
In-App Support: Use the support chat in your mafiatoto account dashboard.
Mailing Address: Privacy Officer, mafiatoto, Jakarta, Indonesia

We aim to respond to all privacy inquiries within 7 business days. If you are not satisfied with our response, you may escalate your concern to your local data-protection authority or gaming regulator.

If you believe mafiatoto has violated your privacy rights, you may file a formal complaint through our complaint-resolution process. Log into your account, navigate to Account Settings > Support > File a Complaint, and describe your privacy concern. Our privacy team will investigate and respond within 10 business days.