iwantoto Casino & Sportsbook Platform

Platform security layers

At iwantoto, we protect your account and funds through multiple security layers. All data in transit is encrypted using TLS 1.3 (SSL standard), ensuring your login credentials, account history, and payment details are never intercepted. Your password is hashed using bcrypt, a cryptographically secure algorithm — we never store your plain-text password. Account access is logged server-side; any login attempt, deposit, withdrawal, or game session is timestamped and recorded. If you notice unusual activity, our support team can review the full access log within 24 hours and, if suspicious, disable your account pending investigation. We perform annual third-party security audits, and the results are available upon request. Fund segregation is strict: customer deposits are held in trust accounts separate from operational funds. We do not use customer money for lending, trading, or other operational expenses — every account balance is sacrosanct. Account recovery is straightforward: if your password is compromised, use the in-app email recovery flow, verify your identity via a recovery code sent to your registered email, and reset your password. No manual intervention is required, and the process completes within subject to verification. Two-factor authentication (2FA) is optional but recommended — enable it to require a one-time code (OTC) sent to your phone before login or withdrawal.

Game fairness and RTP

Every game on iwantoto is certified fair. Slot games (Aviator, Gates of Olympus, Sweet Bonanza, Fortune Tiger, Mahjong Ways) use a certified random number generator (RNG) audited by independent third parties. RNG means every spin outcome is determined the moment you tap the spin button, not when the reels stop animating. The animation is purely visual; the result is already decided. We publish RTP (Return to Player) percentages for every slot — for example, Aviator has an, meaning that over thousands of spins, players collectively receive non-specific info of wagered funds. The remaining non-specific info funds server costs, licensing, and platform operations. RTP varies slightly based on your stake (higher stakes sometimes carry higher RTPs as a promotional incentive). Live-dealer games (blackjack, roulette, baccarat, Dragon Tiger) are different — they're not RNG-driven but played in real time by real dealers. Your win or loss is determined by the cards dealt or the wheel spun in front of the camera. No algorithm predetermines the outcome. Sportsbook bets are settled based on official league or tournament results — we use data feeds from authoritative sources and never manipulate outcomes. If you believe a game result is incorrect, you can file a dispute within 48 hours of the outcome. Our trading team reviews the match data, game log, and result source. If an error is found, we correct the settlement and adjust your account. Most disputes are resolved within 24 hours.

KYC verification process

Know Your Customer (KYC) verification exists to protect you and us. It prevents underage access, ensures funds originate from legitimate sources, and complies with anti-money-laundering (AML) regulations. When you request your first withdrawal, iwantoto triggers mandatory KYC. You upload a government-issued ID (passport, ID card, driver's license) and a proof of address (utility bill, bank statement, or lease agreement dated within the last 90 days). Documents are uploaded via a secure, encrypted interface. Our verification team manually reviews them within 24 hours on weekdays. Documents are checked for authenticity — we verify that the ID is genuine and matches your registered name and date of birth. If documents are unclear or mismatched, we request resubmission (you have 7 days). Once verified, your account is flagged as KYC-complete and all future withdrawals process without re-verification. We retain uploaded documents for 7 years to comply with AML regulations, then securely delete them. Your ID number is hashed (not stored in plain text), and your documents are never shared with third parties. If you prefer not to withdraw, KYC is optional — you can keep your account active and play indefinitely without verification. However, non-verified accounts cannot withdraw funds. Holiday periods (Idul Fitri, Idul Adha, Imlek, Nyepi) may delay verification by 1–2 days due to reduced staff. Account recovery (password reset, email change) also requires KYC if you've never verified.

User feedback and review channels

We value user feedback and actively monitor reviews across our platform and external review sites. Within iwantoto, you can submit feedback via the in-app "Help" section — select "Feedback" and describe your experience, complaint, or suggestion. Our team reviews all feedback within 24 hours and responds to emails or in-app messages within 4 hours during business hours. If your feedback relates to a settlement dispute or account issue, include the relevant bet ID or transaction ID so our team can investigate. External reviews (posted on third-party gaming forums or Google) are monitored but not moderated by us — we cannot alter reviews posted elsewhere, but we do read them and use them to improve our platform. If you see a review claiming false information about iwantoto (e.g., "iwantoto stole my funds" without evidence), you can report the review to the hosting platform for verification. We recommend always checking multiple sources before forming an opinion about any platform. Reviews on independent gaming sites may be more objective than reviews on iwantoto's own site. User feedback has driven several platform improvements — for example, our QRIS payment integration was added in response to user requests for faster deposits. We also track complaint categories (e.g., "slow withdrawal", "confusing rules", "support response time") and work to address systemic issues. Monthly, our product team reviews feedback trends and prioritizes fixes or features accordingly.