aromatotoPrivacy Policy

We at aromatoto protect your identity and payment data using industry-standard encryption across all account, deposit, withdrawal, and gaming transactions. This page describes what information we collect when you create an aromatoto account, how we store and use that data, and what rights you hold over your information.

When you sign up on aromatoto, we collect your legal name, date of birth, email address, phone number, and city of residence. We cross-check this information against payment provider records (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to verify your identity and prevent fraud. Your account balance, transaction history, wager records, and device information are also logged on our servers for service delivery, dispute resolution, and compliance purposes.

Our servers may sit outside your jurisdiction, but we apply uniform data protection standards regardless of server location. You are responsible for verifying that your use of aromatoto complies with your local law. Access to aromatoto services is available only where applicable law permits.

What We Collect & How We Use It on aromatoto

We collect personal data (name, date of birth, email, phone, city, national ID number) during account registration. We collect payment data (linked DANA account ID, e-wallet identifier, mobile banking virtual account, bank details) when you deposit or withdraw. We collect gaming data (wagers placed, game outcomes, cash balance changes, timestamps) throughout your use of aromatoto across all activities — football sportsbook (Liga 1, Piala AFF, Piala Indonesia, Champions League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slots (Aviator, Sweet Bonanza, Gates of Olympus), and esports markets (Mobile Legends, Free Fire, PUBG Mobile).

We use this data for account verification, payment processing, fraud detection, dispute settlement, and service improvement. We do not sell your personal data to third parties. We share data only with payment processors (local payment, online payment, e-wallet, etc.) to execute deposits and withdrawals, with our customer support team to handle complaints, and with regulators or law enforcement if legally required.

Data Retention & Third Parties on aromatoto

We retain your account data for the duration of your account and for up to seven years after closure for regulatory compliance and dispute resolution. Payment records are retained per bank and payment provider requirements, typically three to seven years. Gaming records (wagers, outcomes, balances) are retained for one year after account closure.

Our data processors include cloud-hosting providers (for server infrastructure), payment gateways (for transaction processing), and customer-support platforms (for chat and email logs). These processors are contractually bound to protect your data and use it only for the purposes we specify. We do not engage in automated profiling, algorithmic decision-making, or targeted marketing based on gaming behaviour.

Personal data

Name, date of birth, email, phone, city, national ID number (used for account verification only).

Payment data

Payment method ID (mobile banking, local payment, online payment, bank account), transaction amounts, timestamps (used for deposits, withdrawals, fraud prevention).

Gaming data

Wagers placed, game outcomes, balance changes, device information (used for service delivery and dispute resolution).

Your Rights & aromatoto Data Practices

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact aromatoto support with your account email and a clear request. We respond within 14 days. Data deletion removes your account and personal information from our primary systems, but regulatory and fraud-prevention records may be retained per legal requirements.

If you dispute a data practice or believe your privacy has been violated, contact us first via live chat or email. If we do not resolve your concern, you may escalate to your local data-protection authority. We undertake to cooperate with such inquiries.

Regional Compliance & Updates on aromatoto

Our data practices comply with applicable regional laws. We may update this policy at any time; material changes (e.g., new data sharing, extended retention) are communicated via email and in-app notification at least 14 days before taking effect. Continued use of aromatoto after an update implies acceptance of the new terms.

aromatoto's privacy commitments are straightforward: we collect only what we need to operate your account, process payments (DANA, e-wallet, mobile banking, local payment, online payment, and others), verify your identity, and settle disputes. We encrypt your data in transit and at rest. We do not monetize your gaming data or profile you for advertising. Users in Jakarta, Surabaya, Bandung, Medan, and other supported regions can contact us anytime with privacy questions.