Privacy Policy

1. Introduction

Welcome to the latato Privacy Policy. This document outlines how latato ("we," "us," "our") collects, uses, processes, stores, shares, and protects the personal information of our users ("you," "your") who access or use our betting platform located at https://latato.cam, including our website, mobile applications, and associated services.

latato is committed to transparency in our data handling practices and compliance with international data protection standards. We recognize that when you entrust us with your personal information to register an account, make deposits, place wagers, or interact with our customer support, you expect that information to be treated with the utmost care, security, and respect for your privacy rights.

This Privacy Policy applies to all Indonesian users and international users who access latato services. By creating an account or using our platform, you acknowledge that you have read, understood, and consent to the data practices described in this policy. If you do not agree with any aspect of this Privacy Policy, please discontinue use of latato immediately.

2. Data Controller

latato acts as the data controller for all personal information collected through our platform. This means we determine the purposes for which your data is processed and the means by which processing occurs. Our data protection compliance team oversees all data handling activities to ensure adherence to this Privacy Policy and applicable data protection regulations.

For privacy-related inquiries, data access requests, or concerns about how your information is handled, please contact:

• Data Protection Officer
• Email: [email protected]
• General Support: [email protected]

3. Information We Collect

latato collects various categories of personal information to provide, maintain, and improve our betting services, ensure security and regulatory compliance, and deliver personalized user experiences. The information we collect falls into the following categories:

3.1 Account Registration Information

When you create a latato account, we collect:

• Personal Identification: Full legal name (as it appears on government-issued ID), date of birth, gender, nationality.
• Contact Information: Email address, mobile phone number, residential address (street, city, postal code, province).
• Account Credentials: Username, password (stored in encrypted form), security questions and answers.
• Marketing Preferences: Communication preferences for promotional emails, SMS notifications, and other marketing materials.

3.2 Identity Verification (KYC) Information

To comply with international anti-money-laundering (AML) and counter-terrorism financing (CTF) regulations, we collect identity verification documents:

• Government-Issued ID: Scanned or photographed copies of your Indonesian KTP (national identity card), passport, or driver's license showing your full name, date of birth, photograph, ID number, and document expiration date.
• Proof of Address: Recent utility bills, bank statements, or government correspondence (issued within the last 3 months) displaying your name and current residential address.
• Selfie Verification: Photographs of you holding your identification document next to your face for biometric comparison and liveness detection.
• Enhanced Due Diligence: For VIP accounts or large transactions, we may request additional documentation such as source of funds verification, employment information, or bank statements.

3.3 Financial and Transaction Information

We collect financial data to process deposits, withdrawals, and wagers:

• Payment Details: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and other Indonesian banks), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card details (if applicable).
• Transaction History: Deposit amounts, dates and times, withdrawal requests and completions, payment method used, transaction reference numbers, and processing status.
• Betting Activity: Wager amounts, bet types (sports betting, casino, slots), game selections, win/loss outcomes, bonus claims and usage, jackpot participations.
• Account Balance: Current balance, pending withdrawals, bonus balances, loyalty points accumulated.

3.4 Technical and Usage Information

We automatically collect technical data when you use latato:

• Device Information: Device type (mobile, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifiers (UDID, advertising ID).
• Network Data: IP address, geolocation data (country, city, region derived from IP), internet service provider, connection type (Wi-Fi, cellular).
• Usage Analytics: Pages viewed, features used, time spent on platform, click patterns, search queries, navigation paths, session duration, game play duration.
• Cookies and Tracking: Session cookies, persistent cookies, web beacons, pixel tags, local storage data used for authentication, preference storage, and analytics (see Section 8 on Cookies).

3.5 Communications and Support Interactions

When you contact latato customer support or participate in surveys, we collect:

• Support Tickets: Content of your inquiries, complaints, or feedback submitted via live chat, email, WhatsApp, or in-app messaging.
• Call Recordings: Audio recordings of phone conversations with customer support (where permitted by law and with prior notice).
• Survey Responses: Feedback provided in user experience surveys, satisfaction questionnaires, or product improvement polls.
• Social Media Interactions: Public comments, direct messages, or posts on latato's social media channels (if applicable).

3.6 Information from Third Parties

In certain circumstances, we receive information about you from external sources:

• Payment Processors: Transaction status updates, payment verification results, fraud screening data from Indonesian banks and e-wallet providers.
• Identity Verification Services: ID authentication results, document validity checks, watchlist screening outcomes from third-party KYC providers.
• Marketing Partners: Referral data if you were introduced to latato through an affiliate or marketing campaign (referral codes, campaign identifiers).
• Public Databases: Information from public records, sanctions lists, or adverse media screening conducted for AML compliance.

4. How We Use Your Information

latato processes your personal information for the following legitimate business purposes, each necessary to deliver our betting services or required by law:

4.1 Service Provision and Account Management

• Creating and maintaining your latato account.
• Processing deposits, withdrawals, and wagers.
• Verifying your identity and age (21+ requirement) through KYC procedures.
• Managing your account balance, bonuses, and VIP tier status.
• Providing customer support and resolving technical issues.
• Processing bonus claims and enforcing wagering requirements.

4.2 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraudulent activity, money laundering, and terrorism financing.
• Monitoring betting patterns to identify collusion, bonus abuse, or prohibited conduct.
• Conducting anti-money-laundering (AML) checks and enhanced due diligence.
• Complying with legal obligations under international gaming regulations.
• Enforcing our Terms & Conditions and investigating violations.
• Protecting latato's systems from unauthorized access, hacking, or DDoS attacks.

4.3 Platform Improvement and Personalization

• Analyzing usage patterns to improve website and app functionality.
• Personalizing game recommendations based on your betting history.
• Testing new features and conducting A/B testing for user experience optimization.
• Conducting market research to understand Indonesian player preferences.
• Optimizing payment processing speed and success rates.

4.4 Marketing and Promotional Communications

• Sending promotional emails about bonuses, tournaments, and new games (with your consent).
• Delivering SMS notifications about exclusive VIP offers (with your consent).
• Displaying personalized advertisements based on your interests (where permitted).
• Informing you about changes to latato services, terms, or policies.

Marketing Opt-Out: You may unsubscribe from promotional communications at any time by clicking the "Unsubscribe" link in emails, adjusting preferences in your account settings, or contacting support. Note that you cannot opt out of essential service communications (transaction confirmations, security alerts, policy updates).

4.5 Legal and Regulatory Obligations

• Responding to lawful requests from law enforcement, courts, or regulatory authorities.
• Maintaining records required by gaming licenses and AML regulations (typically 5-7 years).
• Reporting suspicious transactions to financial intelligence units.
• Defending latato in legal disputes or regulatory investigations.

5. Legal Basis for Data Processing

latato processes your personal information under the following legal bases recognized by international data protection law:

Processing Purpose	Legal Basis
Account creation, deposits, withdrawals, wagering	Contractual Necessity: Required to fulfill our Terms & Conditions agreement with you.
KYC identity verification, AML screening	Legal Obligation: Mandated by international gaming regulations and anti-money-laundering laws.
Fraud detection, security monitoring	Legitimate Interest: Protecting latato and users from fraudulent activity and security threats.
Platform improvement, analytics, personalization	Legitimate Interest: Enhancing user experience and maintaining competitive service quality.
Marketing communications, promotional offers	Consent: You explicitly agreed to receive marketing materials during registration or opt-in.

6. Data Sharing and Disclosure

latato does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers and Processors

We engage trusted third-party companies to assist with platform operations. These service providers access your data solely to perform services on our behalf and are contractually obligated to maintain confidentiality:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your deposits and withdrawals.
• Identity Verification Services: KYC providers verify your ID documents and conduct AML screening.
• Cloud Hosting Providers: Servers hosting latato's database and application infrastructure (data stored in secure data centers with encryption at rest and in transit).
• Customer Support Software: Live chat platforms and ticketing systems used by our support team.
• Analytics Services: Tools that help us understand user behavior and improve platform performance (Google Analytics, Mixpanel, or similar).

6.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, courts, or regulators when:

• Required by law, court order, subpoena, or regulatory investigation.
• Necessary to comply with gaming license obligations or AML reporting requirements.
• Requested by Indonesian or international law enforcement investigating suspected criminal activity.
• Needed to protect latato's legal rights or defend against legal claims.

6.3 Business Transfers

If latato undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and platform notice before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties for purposes not described in this policy only after obtaining your explicit consent.

7. Data Security

latato implements robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Encryption

• Transmission Security: All data transmitted between your device and latato servers is encrypted using 256-bit SSL/TLS encryption (the same standard used by Indonesian banks).
• Storage Security: Sensitive data (passwords, financial information, ID documents) is encrypted at rest using AES-256 encryption in our databases.
• Payment Security: We do not store full payment card numbers. Card transactions are processed through PCI-DSS compliant payment gateways.

7.2 Access Controls

• Personal data is accessible only to authorized latato employees who require it for their job functions.
• Multi-factor authentication (MFA) is mandatory for all staff accessing user data systems.
• Role-based access controls limit employee permissions to the minimum necessary.
• Regular access reviews ensure terminated employees lose access immediately.

7.3 Infrastructure Security

• Firewalls, intrusion detection systems, and DDoS protection guard against external attacks.
• Security vulnerability scans and penetration testing conducted quarterly by independent security firms.
• Secure data centers with physical access controls, surveillance, and environmental protections.
• Regular software updates and security patches applied promptly.

7.4 Data Breach Response

In the unlikely event of a data breach compromising your personal information, latato will:

• Investigate the breach immediately to determine scope and impact.
• Notify affected users via email within 72 hours of breach discovery (as required by data protection regulations).
• Provide guidance on protective measures you should take (e.g., password changes).
• Report the breach to relevant data protection authorities if legally required.
• Implement additional security measures to prevent recurrence.

8. Cookies and Tracking Technologies

latato uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze platform usage.

8.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality (login sessions, security features, load balancing). You cannot disable these cookies as they are necessary for latato to operate.
• Preference Cookies: Remember your language preference, timezone, and display settings. Disabling these cookies may require you to re-enter preferences on each visit.
• Analytics Cookies: Collect aggregated usage data (pages visited, features used, session duration) to help us improve latato. We use Google Analytics with IP anonymization enabled.
• Marketing Cookies: Track your interactions with promotional campaigns to measure effectiveness and deliver personalized offers. You can opt out of marketing cookies in your browser settings.

8.2 Managing Cookies

Most web browsers allow you to control cookies through settings. You can typically:

• View cookies stored on your device and delete them individually or all at once.
• Block third-party cookies while allowing first-party cookies from latato.
• Set your browser to reject all cookies (note: this will prevent you from logging into latato).
• Receive notifications when new cookies are set, allowing you to accept or reject them individually.

For detailed cookie management instructions, refer to your browser's help documentation (Chrome, Firefox, Safari, Edge).

9. Data Retention

latato retains your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law:

• Active Accounts: We retain all account data while your account remains open and active.
• Closed Accounts: After you voluntarily close your account, we retain transaction history and KYC documents for 7 years to comply with AML regulations and tax laws.
• Marketing Data: If you opt out of marketing communications, we retain a suppression record to ensure you are not contacted again.
• Inactive Accounts: Accounts inactive for 3 consecutive years may be archived with limited data retained for regulatory compliance only.
• Legal Hold: Data involved in legal disputes, investigations, or regulatory proceedings is retained until the matter concludes, regardless of standard retention periods.

After retention periods expire, we securely delete or anonymize your data so it can no longer identify you.

10. Your Privacy Rights

As a latato user, you have the following rights regarding your personal information. To exercise any of these rights, contact our Data Protection Officer at [email protected]:

10.1 Right of Access

You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used electronic format (typically PDF or CSV) within 30 days of your request.

10.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request corrections. You can update most information directly in your account settings or contact support for assistance.

10.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes collected, or you withdraw consent for processing based solely on consent. Note: We cannot delete data required for legal compliance (e.g., AML records) until retention periods expire.

10.4 Right to Restrict Processing

You may request that we limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

10.5 Right to Data Portability

You may request a copy of your data in a machine-readable format to transfer to another service provider. This right applies to data processed based on consent or contract.

10.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will immediately cease such communications.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

10.8 Right to Lodge a Complaint

If you believe latato has violated your privacy rights or data protection laws, you may lodge a complaint with the data protection authority in your jurisdiction or contact our Data Protection Officer to resolve the issue internally.

11. International Data Transfers

latato operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data across borders, we implement appropriate safeguards to ensure your data receives equivalent protection:

• Standard Contractual Clauses: We use contractual agreements approved by data protection authorities to govern international data transfers.
• Adequacy Decisions: We transfer data to countries recognized as providing adequate data protection standards.
• Encryption in Transit: All cross-border data transfers are encrypted using TLS/SSL protocols.

By using latato, you consent to the transfer of your data to jurisdictions necessary for platform operation, subject to the protections described in this policy.

12. Children's Privacy

latato is strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that a user is under 21, we will immediately:

• Terminate the account without notice.
• Delete all personal information collected from that individual.
• Confiscate any account balance to charity (as underage gambling is illegal).
• Report the incident to appropriate authorities if legally required.

Parents and guardians should monitor their children's internet usage and use device-level parental controls to prevent minors from accessing gambling websites.

13. Third-Party Links

latato may contain links to external websites operated by game providers, payment processors, or partner organizations. This Privacy Policy applies only to latato's platform. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site before providing personal information.

14. Changes to This Privacy Policy

latato reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy.
• Notify registered users via email at least 14 days before changes take effect.
• Display a prominent notice on the latato homepage and in user account dashboards.

Your continued use of latato after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with changes, you must cease using latato and may request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or latato's data protection practices, please contact:

• Data Protection Officer
• Email: [email protected]
• General Support: [email protected]
• WhatsApp: +62 812 3456 7890
• 24/7 Live Chat: Available on latato website and mobile app

We aim to respond to all privacy inquiries within 5 business days. For data access or deletion requests, we will complete your request within 30 days as required by data protection regulations.