Privacy Policy

miotot ("we", "us", "the Platform", "the Company") is committed to protecting the privacy and personal data of every individual who accesses or uses the miotot betting and casino platform. This Privacy Policy has been prepared in accordance with internationally recognized data protection principles and is designed to give you clear, transparent information about how your data is handled from the moment you create an account through to the termination of your relationship with miotot.

miotot primarily serves Players based in Indonesia, and we recognize the importance of handling personal data responsibly within that context. All data processing activities are conducted with the dual aims of enabling miotot to deliver a high-quality, secure, and compliant gaming service, and of respecting your rights and expectations as a Player.

If you have any questions about this Privacy Policy at any time, you are encouraged to contact our Data Protection team at [email protected] before using the Platform.

The following terms carry specific meanings within this Privacy Policy:

miotot collects only the personal data that is necessary to provide its services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect are set out below:

miotot collects personal data through the following channels:

• Account Registration: When you create a miotot account, you provide identity and contact data directly through the registration form. This is the primary source of personal data for new Players.
• KYC Verification: When you submit identity documents in response to a verification request, miotot receives and stores those documents and the data contained within them.
• Financial Transactions: Every deposit and withdrawal transaction generates a record containing financial account details, transaction amounts in IDR, timestamps, and payment method identifiers.
• Platform Usage: miotot's systems automatically record technical and activity data each time you log in, navigate the Platform, place a wager, or interact with a game — including sports bets on BRI Liga 1, EPL, and other leagues, togel (Indonesia's traditional numbers lottery) draws, and slot game sessions.
• Customer Support: When you contact our support team via live chat or email, we record the content of those communications along with your account identifier and contact details.
• Cookies and Tracking Technologies: miotot uses cookies and similar technologies to collect technical data about your device and browsing behavior on the Platform. See Section 9 for full details.

miotot processes your personal data strictly for the following legitimate purposes:

• Account Management: To create, maintain, and administer your Player Account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To process your deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; to settle your wagers; to credit bonuses; and to provide all betting and gaming services available on the miotot Platform.
• Legal Compliance: To fulfill our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and international gaming license conditions — including identity verification and transaction monitoring.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and any other conduct that violates our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor player activity for signs of problem gambling behavior and to implement self-exclusion, deposit limits, and session controls where requested or where miotot identifies a concern.
• Customer Support: To respond to your support enquiries, complaints, and feedback, and to maintain records of those interactions for quality assurance purposes.
• Platform Improvement: To analyze aggregated usage data to improve the miotot Platform's performance, user experience, game selection, and promotional offerings.
• Marketing Communications: To send you promotional communications about miotot bonuses, seasonal offers (Ramadhan, Idul Fitri, Independence Day specials), and new game releases — subject to your communication preferences and the right to opt out at any time.

miotot processes your personal data on one or more of the following legal bases, depending on the specific purpose of each processing activity:

• Contractual Necessity: Processing that is required to perform our contract with you — specifically, to operate your Player Account, process transactions in IDR, and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing that miotot is legally required to carry out — including KYC identity verification, AML transaction monitoring, and record-keeping obligations imposed by our international gaming license conditions.
• Legitimate Interests: Processing carried out for miotot's legitimate business interests — including fraud detection, platform security, abuse prevention, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

miotot does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data may be shared with carefully selected third-party processors only where necessary and only under binding data-processing agreements that require those parties to protect your data to the same standard as miotot. The categories of third parties with whom data may be shared are as follows:

• Payment Processors: Banks and e-wallet providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — receive the financial account details and transaction data necessary to process your deposits and withdrawals.
• KYC and Identity Verification Partners: Regulated identity verification service providers may receive copies of your identity documents and personal details for the purpose of conducting automated or manual KYC checks.
• Fraud Detection and AML Services: Specialized third-party providers that assist miotot in identifying suspicious transactions, flagging potential money laundering activity, and preventing unauthorized account access may receive relevant transaction and behavioral data.
• Game Content Providers: Software developers whose games are hosted on the miotot Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive minimal technical session data necessary to deliver their game content and verify game outcomes.
• Regulatory and Law Enforcement Authorities: miotot may disclose personal data to competent authorities where required to do so by law, court order, or the conditions of our international gaming license. Such disclosures will always be limited to the minimum data necessary.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by miotot may access personal data on a strictly confidential, need-to-know basis in the course of providing professional advice.

miotot implements a comprehensive, multi-layered security framework designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-Bit SSL Encryption: All data transmitted between your device and the miotot Platform is encrypted using industry-standard 256-bit Secure Socket Layer (SSL) technology. This applies to account registration, login sessions, financial transactions, and all other data exchanges.
• Secure Data Storage: Personal data is stored on access-controlled servers with restricted physical and network access. Database encryption is applied to sensitive fields including financial account identifiers and identity document records.
• Access Controls: Access to personal data within miotot's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: miotot employs real-time intrusion detection systems, automated anomaly monitoring, and regular independent security audits to identify and address vulnerabilities proactively.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to Player rights and freedoms, miotot will notify affected Players and relevant authorities within the timeframes required by applicable law and our licensing obligations.

While miotot takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying miotot immediately if you suspect any unauthorized access to your account.

miotot uses cookies and similar tracking technologies to enhance the functionality, performance, and personalization of the Platform. The following categories of cookies are in use:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent core Platform features from functioning correctly. miotot does not use cookies to serve third-party advertising on external websites.

miotot retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: All personal data associated with an active Player Account is retained for the full duration of the account relationship.
• Post-Closure Retention: Following account closure — whether initiated by the Player or by miotot — personal data is retained for a minimum of five (5) years to satisfy anti-money laundering record-keeping requirements and to handle any post-closure disputes or regulatory enquiries.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, in line with AML compliance obligations.
• Transaction Records: Financial transaction records — including all IDR deposit and withdrawal histories — are retained for a minimum of five (5) years following the date of each transaction.
• Customer Support Records: Records of customer support interactions are retained for three (3) years from the date of the interaction, unless a longer period is required in connection with an ongoing dispute or investigation.
• Marketing Data: Where you have consented to marketing communications, your contact details and communication preferences are retained until you withdraw your consent or until twelve (12) months of inactivity, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with miotot's data disposal procedures.

As a Player whose personal data is processed by miotot, you hold the following rights with respect to that data. To exercise any of these rights, please contact miotot at [email protected] with a clear description of your request. miotot will respond within 30 days of receiving a valid request.

miotot operates a strict 21+ policy across all services. The Platform is not directed at, and does not knowingly collect personal data from, any individual under 21 years of age. Age verification is a mandatory step in the KYC process for every registered Player.

If miotot discovers or is notified that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be securely deleted (subject to any legal obligation to retain records of the underage access event itself), and any funds held in the account will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

miotot's Platform is operated by an internationally licensed entity, and your personal data may be stored on or accessed from servers located outside of Indonesia. Where personal data is transferred internationally, miotot ensures that appropriate safeguards are in place to maintain the same standard of protection that applies to data processed within Indonesia. Such safeguards may include:

• Binding contractual clauses between miotot and all third-party processors that mandate equivalent data protection standards.
• Ensuring that international recipients of personal data are located in jurisdictions recognized as providing an adequate level of data protection, or are subject to binding corporate rules or equivalent mechanisms.
• Applying technical security measures — including encryption in transit and at rest — to all cross-border data transfers.

miotot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services offered on the Platform. When material changes are made, miotot will notify registered Players via the email address on file and will update the "Last Updated" date at the top of this page.

Your continued use of the miotot Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.

If you have any questions, concerns, or requests relating to this Privacy Policy or miotot's handling of your personal data, please contact our Data Protection team through the following channel:

For Responsible Gaming enquiries — including self-exclusion requests, deposit limit adjustments, or session time controls — please visit our dedicated Responsible Gaming page or include "Responsible Gaming" in the subject line of your support email.