iwantoto Platform Privacy Notice

This page describes what we collect when you use iwantoto and how we keep that data protected. We collect personal information to verify your identity, process your deposits and withdrawals, and deliver our service — live-dealer tables, sportsbook betting, and slot games. Our commitment is to handle your data transparently, securely, and only for the purposes you've consented to.

We operate under strict data protection principles. Your email, phone number, payment details, and account history are encrypted in transit and at rest. We do not sell your data to third parties. We do not use your information for marketing without your explicit consent. We do not share your account details with other users or external platforms.

This notice applies to all iwantoto users across supported jurisdictions. If you have questions about how we handle your data, contact our support team via in-app chat (08:00–22:00 Jakarta time, Monday–Friday) or email (24/7 with 4-hour response window).

What Data We Collect on iwantoto

We collect data in several categories. First, account registration data: your full name, email address, phone number, date of birth, and residential address. This information is required to create your iwantoto account and comply with know-your-customer (KYC) regulations. Second, identity verification data: government ID (passport, ID card, or driver's license) and proof of address (utility bill, bank statement, or lease agreement). We collect this only when you request your first withdrawal. Third, payment data: your chosen payment method (QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details). We do not store full credit card numbers — payment processors handle card data directly. Fourth, activity data: your login history, bets placed, games played, deposits, withdrawals, and account balance. This is logged server-side for security and dispute resolution.

We also collect device and connection data: your IP address, device type (iOS, Android, web browser), operating system version, and approximate location (country/region level only, never precise GPS). This helps us detect fraud, prevent account takeover, and optimize platform performance for users in Jakarta, Surabaya, Bandung, Medan, and Semarang.

Account data: Name, email, phone, date of birth, address. Required for account creation and KYC verification.
Identity documents: Government ID and proof of address. Collected only at first withdrawal request.
Payment data: Payment method and transaction history. Card details are processed by third-party payment providers, not stored by iwantoto.
Activity data: Login history, bets, games, deposits, withdrawals. Logged for security and dispute resolution.

How We Use Your Data

We use your data for specific, lawful purposes. First, account management: we use your name, email, and phone to create and maintain your iwantoto account, send you login confirmations, and help you recover your account if you forget your password. Second, payment processing: we use your payment details to process deposits and withdrawals. Your bank or e-wallet provider (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receives your payment information directly — we do not store it. Third, compliance: we use your identity documents to verify your age and jurisdiction, as required by law. Fourth, fraud prevention: we analyze your login patterns, device data, and transaction history to detect suspicious activity and protect your account. Fifth, customer support: we use your account history to assist you with disputes, withdrawals, or technical issues.

We do not use your data for marketing, profiling, or automated decision-making without your consent. If you opt in to promotional emails, we send you updates about new games, tournaments (Liga 1, Piala AFF, Mobile Legends), or payment method additions. You can unsubscribe from promotional emails at any time via the in-app settings or by replying "unsubscribe" to any email.

Third-Party Data Processors

We work with third-party processors to deliver iwantoto. Payment processors (e.g., online payment aggregators, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your payment details and process transactions. We do not control how these processors handle your data — they have their own privacy policies. Cloud infrastructure providers host our servers and databases. Your data is encrypted before storage, and servers may sit outside your jurisdiction (e.g., in Singapore or Australia). We sign data processing agreements with all third parties to ensure they meet our security standards. Customer support tools (chat, email, ticketing systems) may log your conversations for quality assurance and dispute resolution. These logs are retained for 12 months, then securely deleted.

At iwantoto, your data is encrypted, your privacy is protected, and your consent is required before we use your information for any purpose beyond account management and legal compliance.

iwantoto editorial team

Your Rights and Our Commitments on iwantoto

You have the right to access, correct, and delete your data. If you want to review what we hold about you, contact our support team — we'll provide a data export within 7 business days. If your information is inaccurate (e.g., your address changed), you can update it in-app under Account Settings. If you want to delete your account and all associated data, request account closure via support. We will delete your personal data within 30 days, except where we're legally required to retain it (e.g., for tax or anti-money-laundering purposes, which may be up to 7 years).

We retain your data only as long as necessary. Account registration data is kept for the lifetime of your account plus 7 years (for regulatory compliance). Identity documents are retained for 7 years, then securely deleted. Activity logs (bets, deposits, withdrawals) are kept for 7 years for dispute resolution and regulatory audit. Payment processor data is retained according to their policies — typically 7 years for banking compliance.

We use cookies and similar tracking technologies on iwantoto. Session cookies keep you logged in during your visit. Preference cookies remember your language and display settings. Analytics cookies help us understand how users interact with the platform — we use this to improve performance and user experience. You can disable cookies in your browser settings, though this may affect platform functionality. We do not use third-party advertising cookies — we do not track you across other websites.

Data security: All data in transit is encrypted using TLS 1.3. Passwords are hashed using bcrypt. Servers are protected by firewalls and intrusion detection systems. We perform annual security audits.
Data access: Only iwantoto staff with a legitimate business need can access your data. Access is logged and monitored. We do not share your data with other iwantoto users or external parties.
Data breach response: If we discover a breach, we notify affected users within 48 hours and cooperate with relevant authorities. We maintain cyber insurance to cover potential damages.
Contact us: For privacy questions, email our data protection team or use the in-app support escalation button. We respond within 4 hours during business hours.

This privacy notice may be updated periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-app notification. Your continued use of iwantoto after such changes constitutes your acceptance of the updated notice.