Privacy Policy — mmtoto

In this Privacy Policy, the following terms carry the meanings set out below. Capitalised terms not defined here carry the same meaning as in mmtoto's Terms and Conditions.

• "mmtoto", "we", "us", "our" — the operator of the mmtoto platform accessible at mmtoto.cam, including its parent entity, subsidiaries, and authorised data processors acting on its behalf.
• "Platform" — the mmtoto website, web application, mobile-optimised interface, and all related services, tools, and features available at mmtoto.cam.
• "User", "you", "your" — any individual who accesses, registers on, or otherwise interacts with the Platform, whether as a registered member or an unregistered visitor.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — mmtoto, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of mmtoto under a written contractual obligation.
• "KYC" — Know Your Customer — the identity verification process used to confirm a User's identity, age, and eligibility to use the Platform.
• "Cookies" — small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.

2.1  mmtoto collects Personal Data across several categories, each serving a specific and lawful purpose. The categories of data we collect are described below.

2.2  We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless this is strictly required for identity verification purposes and you have provided explicit consent.

3.1  mmtoto collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting our support team, or updating your profile settings.
• Automated Technologies: Data collected automatically as you interact with the Platform, including IP addresses, cookies, pixel tags, browser fingerprinting, and server log files.
• Third-Party Verification Partners: Identity and address data received from KYC verification service providers when you submit documentation for account verification.
• Payment Processors: Confirmation data received from Indonesian bank transfer networks and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when processing financial transactions.
• Game Studio Providers: Session and outcome data received from third-party game studios (such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft) integrated into our Platform.
• Analytics Providers: Aggregated behavioural data from analytics tools used to measure Platform performance and user experience.

3.2  Where data collection is optional, we will make this clear at the point of collection. You are not obligated to provide optional data, but declining to do so may limit certain features or functionality.

4.1  mmtoto processes your Personal Data only for specific, explicit, and legitimate purposes. These include:

• Account Management: Creating, maintaining, and administering your mmtoto account, including authentication, password resets, and account security monitoring.
• Identity Verification (KYC): Confirming your identity, age (21+), and residence to ensure platform eligibility and prevent underage gambling.
• Payment Processing: Facilitating deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets, and maintaining accurate transaction records.
• Service Delivery: Enabling access to sports betting markets (including bandar bola — football bookmaking — and mix parlay accumulator bets), togel (Indonesia's traditional numbers lottery) draws, live casino games, and slot products on the Platform.
• Fraud Prevention and Security: Detecting and investigating suspicious activity, multi-accounting, bonus abuse, and any attempt to compromise Platform integrity.
• Legal and Regulatory Compliance: Meeting applicable anti-money-laundering (AML) obligations, record-keeping requirements, and responding to lawful requests from competent authorities.
• Customer Support: Responding to queries, resolving disputes, and providing assistance via live chat, email, and WhatsApp.
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling and enforcing self-exclusion, cooling-off, and deposit limit arrangements.
• Platform Improvement: Analysing usage patterns to improve product features, user interface design, and service reliability.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign communications — but only where you have provided consent or where we have a legitimate interest, and always with a clear opt-out mechanism.

4.2  mmtoto will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis.

5.1  mmtoto processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing that is required to perform the contract we have with you — i.e., operating your account, processing payments, and delivering the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, tax reporting obligations, and responses to lawful law-enforcement requests.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.

6.1  mmtoto does not sell your Personal Data. We share data only in the following limited circumstances, and only to the extent necessary for each purpose:

• KYC and Identity Verification Providers: Third-party services that verify government-issued identification documents and perform liveness checks.
• Payment Service Providers: Indonesian banks and e-wallet operators through whom your deposits and withdrawals are processed, including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Game Content Providers: Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) that host the games you play. These providers receive only the minimum data required to operate the game session and record its outcome.
• IT and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity vendors who process data as Data Processors under written agreements that require them to maintain confidentiality and implement appropriate security measures.
• Fraud Prevention Networks: Industry fraud-sharing databases used to identify known fraudulent actors, multi-account operators, or individuals subject to industry-wide exclusion programmes.
• Regulatory and Law Enforcement Authorities: Where mmtoto is legally required to disclose data in response to a valid court order, subpoena, or regulatory request.
• Business Successors: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7.1  mmtoto retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

7.2  Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8.1  As a User of the mmtoto Platform, you hold the following rights in relation to your Personal Data. These rights may be exercised by contacting our support team at [email protected]. We will respond to all data rights requests within 3 business days (WIB).

8.2  Where a request cannot be fulfilled — for example, because retention is required by law — we will inform you of the reason in writing. We will never charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

9.1  The mmtoto Platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, and improve your experience. The types of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable account authentication, session management, and security features. They cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences — such as your preferred language, display settings, and last login details — to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated information about how Users interact with the Platform, including page views, session duration, and navigation paths. This data helps us identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and bot access.

9.2  Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling cookies may affect the functionality of certain Platform features, including the ability to stay logged in between sessions.

10.1  The mmtoto Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21.

10.2  Age verification is conducted as part of the KYC process for all registered accounts. Where mmtoto discovers that a User under the age of 21 has registered an account, the account will be immediately suspended, all associated data will be reviewed, and any funds will be handled in accordance with our Terms and Conditions.

10.3  If you have reason to believe that a minor has registered on the Platform, please notify us immediately at [email protected]. We will investigate and take appropriate action promptly.

11.1  mmtoto implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for Personal Data stored in our databases.
• Role-based access controls ensuring that staff members can only access data relevant to their specific operational responsibilities.
• Multi-factor authentication for all internal administrative access to data systems.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Automated real-time monitoring of server activity to detect and respond to anomalous behaviour.
• Strict data minimisation practices — data is collected, processed, and retained only to the extent necessary for its stated purpose.

11.2  Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, mmtoto will notify affected Users without undue delay and take all practicable steps to mitigate the impact.

12.1  The Platform integrates with various third-party services to deliver a complete betting and gaming experience. Each third-party provider operates under its own privacy policy, and mmtoto is not responsible for the data practices of third parties beyond what is stipulated in our Data Processor agreements.

12.2  Categories of third-party services integrated into the mmtoto Platform include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive session data necessary to deliver gameplay and record results.
• Sports Data Providers: Suppliers of live odds, match statistics, and event data for football (including BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, Champions League), badminton, MotoGP (Mandalika circuit), and e-sports (Mobile Legends MPL, PUBG Mobile).
• Payment Gateways: Intermediaries that facilitate bank transfer and e-wallet transactions with BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Customer Support Tools: Live chat software providers that host our in-platform support interface.

12.3  We encourage you to review the privacy policies of any third-party service with whom you interact directly outside the mmtoto Platform.

13.1  As an internationally operating platform serving users primarily in Indonesia, some of your Personal Data may be transferred to and processed in countries outside Indonesia. These transfers occur when, for example, data is processed by game studio providers, KYC vendors, or cloud infrastructure partners located in other jurisdictions.

13.2  Where such transfers occur, mmtoto ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Safeguards include contractual data protection clauses incorporated into all Data Processor agreements and — where available — reliance on adequacy determinations for the recipient jurisdiction.

13.3  If you would like further information about the specific safeguards applicable to a particular transfer, please contact us at [email protected].

14.1  mmtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Material changes will be communicated to registered Users via email or a prominent Platform notice at least 7 days before the amended Policy takes effect.

14.2  The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14.3  Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you must cease using the Platform and may request closure of your account.

15.1  If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your Personal Data has been handled, please contact mmtoto through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform. Average response time: under 30 seconds.
• WhatsApp: +62 811 0000 0000 (plain text — not a clickable link)

15.2  Our support team includes native Indonesian-speaking agents available 24 hours a day, including during national public holidays such as Idul Fitri, Idul Adha, and Indonesian Independence Day (17 August). All privacy-related correspondence is handled with strict confidentiality.

15.3  If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. mmtoto will co-operate fully with any such regulatory inquiry.