Privacy Policy

1. Introduction

sumtot ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://sumtot.cam or use our services, including sports betting, live casino games, slot games, and lottery games such as togel.

By accessing or using sumtot services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

This Privacy Policy applies to all users of sumtot, including Indonesian residents who access our platform through local payment methods such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay. We comply with international data protection regulations, including the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a sumtot account, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name, date of birth, nationality, and gender
• Contact Information: Email address, mobile phone number, and residential address
• Identification Documents: Government-issued ID (Indonesian KTP or passport), proof of address, and selfie photographs for KYC (Know Your Customer) verification
• Financial Information: Bank account details, e-wallet account information, payment method preferences, transaction history, deposit and withdrawal records
• Account Credentials: Username, password (stored in encrypted format), and security questions
• Communication Data: Messages sent through our customer support channels, including live chat, email, and WhatsApp

2.2 Information Collected Automatically

When you access sumtot services, we automatically collect certain technical information, including:

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and device identifiers
• Usage Information: Pages visited, time spent on each page, clickstream data, games played, bets placed, bet amounts, win/loss records, and session duration
• Location Data: Approximate geographic location based on IP address to verify compliance with jurisdictional restrictions
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience, analyze platform performance, and deliver personalized content. See Section 8 for more details on cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation and payment verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay)
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party KYC providers
• Marketing Partners: Referral information if you were referred by an affiliate or promotional partner

3. How We Use Your Information

sumtot uses the collected information for the following purposes:

3.1 Service Provision and Account Management

• Create and manage your sumtot account
• Process deposits, withdrawals, and financial transactions
• Provide customer support and respond to your inquiries
• Facilitate sports betting, casino gaming, slot play, and togel lottery participation
• Maintain accurate transaction records and betting history

3.2 Regulatory Compliance and Security

• Verify your identity and age (21+ requirement for Indonesian users) through KYC procedures
• Comply with international gaming regulations, anti-money laundering (AML) laws, and counter-terrorism financing (CTF) requirements
• Detect, prevent, and investigate fraud, security breaches, and prohibited activities
• Monitor for problem gambling behaviors and enforce responsible gaming measures
• Respond to legal requests from law enforcement or regulatory authorities

3.3 Platform Improvement and Personalization

• Analyze user behavior and preferences to improve platform functionality
• Personalize your gaming experience with game recommendations and tailored promotions
• Conduct market research and gather feedback on our services
• Optimize website performance, loading speed, and mobile responsiveness

3.4 Marketing and Communications

• Send promotional offers, bonuses, and tournament invitations (with your consent)
• Notify you about important account updates, terms changes, or security alerts
• Deliver newsletters and gaming tips to subscribed users
• Conduct customer satisfaction surveys

You may opt out of promotional communications at any time by clicking the unsubscribe link in our emails or adjusting your communication preferences in your account settings.

4. How We Share Your Information

sumtot does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) for transaction processing
• KYC Verification Services: Third-party identity verification providers to authenticate your identity and age
• Game Providers: Software providers that deliver casino games, slots, and live dealer services
• Cloud Hosting Services: Infrastructure providers that store and secure our data
• Customer Support Tools: Live chat, email, and ticketing system providers
• Analytics Providers: Services that help us understand user behavior and platform performance

All service providers are contractually bound to protect your information and may only use it for the specific purposes we authorize.

4.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, regulators, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Respond to lawful requests from regulatory authorities
• Protect the rights, property, or safety of sumtot, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Enforce our Terms and Conditions or investigate violations

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor. We will notify you of any such change in ownership or control of your personal information.

5. Data Security Measures

sumtot employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same technology used by banks and financial institutions
• Secure Storage: Personal information is stored on secure servers with restricted access, firewalls, and intrusion detection systems
• Password Protection: User passwords are hashed and salted using advanced cryptographic algorithms and are never stored in plain text
• Access Controls: Only authorized sumtot personnel with legitimate business need can access personal information, and all access is logged and monitored
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks
• Two-Factor Authentication: Optional 2FA available for enhanced account security
• PCI DSS Compliance: Our payment processing adheres to Payment Card Industry Data Security Standards

Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

6. Your Privacy Rights

Under international data protection laws, including GDPR, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete personal information
• Right to Erasure: You may request deletion of your personal information, subject to legal retention requirements
• Right to Restriction: You may request that we limit the processing of your personal information in certain circumstances
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format
• Right to Object: You may object to our processing of your personal information for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that certain rights may be subject to legal limitations, and we may need to verify your identity before processing your request.

7. Data Retention

sumtot retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your active account
• Closed Accounts: After account closure, we retain identity verification documents and transaction records for 7 years to comply with anti-money laundering regulations
• Marketing Data: Marketing consent and communication preferences are retained until you withdraw consent or close your account
• Technical Logs: Server logs and IP addresses are typically retained for 12 months for security and fraud prevention

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer identify you.

8. Cookies and Tracking Technologies

sumtot uses cookies, web beacons, and similar technologies to enhance user experience and analyze platform performance. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.

We use the following types of cookies:

• Essential Cookies: Necessary for the platform to function, including login authentication and security features
• Performance Cookies: Collect anonymous information about how users interact with our platform to improve performance
• Functionality Cookies: Remember your preferences such as language settings and display options
• Marketing Cookies: Track your activity across websites to deliver personalized advertisements (used only with your consent)

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of the sumtot platform.

9. Third-Party Links and Services

The sumtot platform may contain links to third-party websites or services, including payment processors, social media platforms, and game providers. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

sumtot services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a user is underage, we will immediately suspend the account, void all transactions, and delete the personal information. If you believe a minor has accessed our platform, please contact us immediately at [email protected].

11. International Data Transfers

sumtot operates internationally and may transfer your personal information to servers located outside Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities and compliance with international data transfer regulations.

12. Changes to This Privacy Policy

sumtot reserves the right to modify this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date at the top of this document. We may also send you email notifications for significant changes. Your continued use of sumtot services after any changes constitutes acceptance of the revised Privacy Policy.

13. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the sumtot platform
• WhatsApp: +62 812 3456 7890

We will investigate and respond to all privacy-related inquiries within 30 days.