mahirtotoPrivacy Policy

What we collect for your mahirtoto account

When you register for mahirtoto, we collect your email address and password. When you first request a withdrawal, we ask for identity verification: a photo of your KTP (Indonesian ID card), a selfie, and proof of address (utility bill, lease, or bank statement). We also record your payment method details (e-wallet phone number, bank account number for virtual account transfers).

We collect additional data automatically as you use mahirtoto. This includes your betting history, login timestamps, device type (mobile or desktop), IP address, and browser information. We use this data to detect fraud, prevent multi-accounting, and understand platform usage patterns.

We store your mahirtoto transaction record — every deposit, withdrawal, bet, payout, and bonus claim. This record is accessible to you anytime via your account dashboard and helps you audit your activity across sportsbook markets (Liga 1, Piala AFF, Champions League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports categories (Mobile Legends, Free Fire, PUBG Mobile).

How we use your mahirtoto data

We use your data for several purposes:

• Account administration: We verify your identity, process your deposits and withdrawals, and manage your mahirtoto balance.
• Anti-money-laundering (AML) compliance: We check your information against sanctions lists and maintain records to comply with financial regulations.
• Fraud prevention: We monitor for suspicious activity — unusual betting patterns, rapid balance transfers, multi-accounting — and may request additional verification if we detect risk.
• Customer support: We access your transaction history to investigate complaints and resolve disputes.
• Platform operation: We analyze aggregate, anonymized usage data to improve mahirtoto performance and user experience.
• Legal compliance: We retain records to comply with laws in your jurisdiction and ours.

We do not use your data to send unsolicited marketing emails. We may send you transactional messages (withdrawal confirmation, account alerts, support replies) and optional newsletters if you opt in.

Email address

We use your email to register your mahirtoto account, reset your password, and send withdrawal confirmations. You may not use a shared or temporary email.

Identity documents

We store your KTP, selfie, and address proof on encrypted servers to verify your identity before allowing withdrawals. This information is not shared with third parties except as required by law.

Payment details

We store your DANA, e-wallet, mobile banking account identifier or bank details only to process transactions. We do not store passwords or PINs.

Betting history

We record every bet, win, loss, and payout to maintain an accurate balance and prevent fraud. This history is yours to access anytime.

Third-party processors and data location

We use third-party payment processors to handle local payment, online payment, e-wallet, mobile banking, and bank virtual account transfers. These processors receive only the information necessary to complete your transaction — your payment method identifier and the transfer amount. They are contractually bound to keep your data confidential and use it only for payment processing.

Our mahirtoto servers may sit outside Indonesia. By using our platform, you consent to your data being transferred to, stored in, and processed from outside your jurisdiction. We ensure all transfers comply with Indonesian data protection principles.

We may share your information with regulatory bodies or law enforcement if required by court order or legal process. We will not voluntarily disclose your data to third parties without your consent, except as outlined here.

Your rights regarding mahirtoto data

You have the right to:

• Access your data: Request a copy of all personal information we hold about your mahirtoto account anytime.
• Correct your data: If your name, address, or payment method is inaccurate, contact our support team to update it.
• Request deletion: You may request deletion of your mahirtoto account and associated data. We retain transaction records as required by law, but we delete your identity documents and contact information within 30 days of account closure (unless a dispute is pending).
• Opt out of marketing: You may unsubscribe from optional newsletters anytime via a link in the email.

To exercise any of these rights, contact our support team via in-app chat or email. We respond to data requests within 10 business days.

Cookies and tracking on mahirtoto

We use cookies to keep you logged into mahirtoto, remember your preferences, and analyze platform usage. Essential cookies are required for the site to function (e.g., authentication cookies). Analytics cookies help us understand how users navigate our platform and where improvements are needed.

You can disable non-essential cookies via your browser settings, though this may affect your mahirtoto experience (e.g., you may be logged out more frequently). We do not use cookies to track you across other websites.

Data retention and security on mahirtoto

We retain your mahirtoto transaction history and account data for 7 years to comply with anti-money-laundering regulations. Identity documents are deleted 30 days after you close your account, unless a dispute or investigation is pending. If you request account deletion, we remove your contact information immediately but retain transaction records as required by law.

We protect your mahirtoto data using encryption (HTTPS for all connections, encrypted storage for sensitive information), firewalls, and access controls. However, no security system is perfect; we cannot guarantee absolute protection against all attacks. If we detect a breach, we notify affected users via email within 72 hours and cooperate with authorities.

You are responsible for keeping your mahirtoto password confidential. If you suspect unauthorized access, change your password immediately and contact our support team. We will not ask for your password via email or chat.

International users and jurisdiction notice

mahirtoto is available only in jurisdictions where online wagering is permitted by local law. If you access mahirtoto from outside Indonesia, you confirm that your jurisdiction permits such access. We are not responsible for your compliance with your local laws.

If you are based in Jakarta, Surabaya, Bandung, Medan, or other Indonesian cities, our service is available where permitted. During Idul Fitri, Idul Adha, and Imlek, bank processing times may extend, but we retain your data and account access continuously.

Contact us about mahirtoto privacy

If you have questions about our privacy practices or wish to exercise your data rights, contact our team via in-app chat or email. Include your mahirtoto account email and a description of your request. We respond within 10 business days.

We may update this privacy policy periodically. Changes take effect immediately upon posting to this page. Your continued use of mahirtoto after policy changes means you accept the new policy.