1. Data We Collect
In order to provide optimal service, apintoto collects various categories of information from users. The data collected includes account information such as full name, email address, phone number, date of birth, and official identification number required for identity verification in accordance with KYC (Know Your Customer) procedures.
We also automatically collect technical data, including IP address, device type, operating system, browser type and version, as well as usage data such as pages visited, session duration, and navigation patterns within the platform. This data is used solely to improve service performance and platform security.
For financial transaction purposes, apintoto collects the necessary payment information such as bank account name, account number, or digital wallet details used for deposit and withdrawal processes in Indonesian Rupiah (IDR). This information is never stored in plain text and is always encrypted before being saved in our systems.
2. Purpose of Data Use
Data collected by apintoto is used for specific and transparent purposes. The primary purposes for using data are to process account registration, verify user identity, enable access to platform services, and process deposit and withdrawal transactions.
Data is also used for security purposes, including detecting and preventing fraudulent activity, unauthorized access, and platform abuse. Usage data analysis is carried out on an aggregated basis to improve features, refine the interface, and ensure stable technical performance for all users in Indonesia.
We may use your email address or phone number to send account-related notifications, important security updates, or transaction confirmations. apintoto does not use your data for third-party marketing purposes without your explicit consent.
3. Cookies & Session Tracking
apintoto uses cookies and similar tracking technologies to enhance the user experience on the platform. Cookies are small text files stored on your device that help us recognize your active session, save language preferences, and maintain login security so you do not need to re-authenticate every time.
There are two main categories of cookies we use: session cookies, which are temporary and automatically deleted once the browser is closed, and persistent cookies, which are stored for a set period of time to recognize repeat visits and speed up access to the platform.
You can manage your cookie preferences through your browser settings. Please note, however, that disabling certain cookies may affect platform functionality, such as the ability to stay logged in or access certain features smoothly. We do not use third-party cookies for targeted advertising purposes.
4. & Data Storage & Security
All user personal data is stored on servers protected to high security standards. apintoto applies SSL/TLS encryption on all data transmission paths between user devices and our servers, ensuring that sensitive information cannot be read by unauthorized parties during transmission.
Data is retained for as long as the user account is active and for a defined period after account closure in accordance with applicable legal and regulatory requirements. We apply strict internal access controls, where only authorized personnel with a legitimate business need may access user data.
In the event of a security incident that could potentially affect user data, apintoto is committed to promptly conducting an investigation and notifying affected users in accordance with applicable procedures. We regularly perform security audits and system updates to minimize the risk of data breaches.
5. Sharing Data with Third Parties
apintoto does not sell, rent, or distribute users' personal data to third parties for commercial purposes. However, under certain circumstances, we may need to share limited information with partners required to operate our services, such as local Indonesian payment processing providers that help securely process IDR transactions.
Third-party service providers working with us are required to comply with equivalent data protection standards and are only permitted to use shared data for purposes agreed upon contractually. We do not share data with any party that does not have a valid confidentiality agreement in place.
apintoto may also disclose user data to competent legal authorities when required by law or a valid court order. In such situations, we will make every effort to limit the scope of data disclosed to only what is legally required.
User Rights Over Personal Data
Every apintoto user has the right to access, correct, or delete their personal data. Requests to access or update data can be submitted through the Account Settings or by contacting our support team. Requests for account deletion and all associated data will be processed in accordance with applicable identity verification procedures and may require a certain processing time.
You also have the right to withdraw your consent to data use at any time, although withdrawal of consent does not apply retroactively to data processing that was lawfully carried out beforehand. For further questions about your privacy rights, please visit the FAQ policy.
Your Data, Our Priority
apintoto continuously updates this policy to ensure the best possible protection for users in Indonesia. If you have any questions about privacy or would like to manage your data, our team is ready to help.