mixtoto Platform Privacy Notice

This page describes what we collect when you use mixtoto and how we keep that data protected. We collect personal information to verify your identity, process your deposits and withdrawals, and comply with regional financial regulations. Our data handling follows standard encryption and access-control practices. We do not sell your data to third parties. We share information only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), compliance partners, and law enforcement when required by law.

Our servers may sit outside your jurisdiction. Data transfers between mixtoto and our processors are encrypted. You have the right to request access to your data, correct inaccuracies, and request deletion subject to legal retention requirements. This notice applies to all users of mixtoto, regardless of location. If you do not agree with our practices, do not use our platform.

We update this notice periodically. Material changes are announced via email to registered users. Continued use of mixtoto after an update constitutes acceptance of the revised notice.

What Data We Collect on mixtoto

We collect data in three categories. First, registration data: email address, full name, date of birth, residential address, and phone number. Second, identity verification data: government-issued ID (passport, national ID card, or driver's license) and proof of address (utility bill, bank statement, or rental agreement). Third, transaction data: deposit and withdrawal amounts, payment method used, timestamps, and game activity (wagers placed, outcomes, balances).

We also collect technical data: your IP address, browser type, device type, and access logs. We use cookies to track your session and remember your preferences. We do not collect biometric data, health information, or financial account credentials. Your payment credentials (bank account number, card number) are handled directly by your payment provider; we do not store them on our servers.

How We Use Your Data on mixtoto

We use registration and identity data to verify your account, comply with anti-money-laundering (AML) regulations, and process your withdrawals. We use transaction data to settle your wagers, track your account balance, and detect fraud. We use technical data to maintain platform security, diagnose technical issues, and improve our service. We do not use your data for marketing purposes unless you opt in via email.

We retain registration and identity data for as long as your account is active, plus seven years after closure (to comply with financial record-keeping laws). We retain transaction data for seven years. We retain technical logs for 90 days. If you request deletion, we anonymize your data rather than permanently erase it, to preserve transaction history for regulatory compliance.

Registration data

Email, name, date of birth, address, phone. Used for account verification and AML compliance.

Identity verification

Government ID and proof of address. Required before first withdrawal; retained for seven years.

Transaction data

Deposits, withdrawals, wagers, outcomes. Retained for seven years for regulatory compliance.

Technical data

IP address, browser, device, access logs. Retained for 90 days; used for security and diagnostics.

Third-Party Processors and Data Sharing

We share your data with payment processors to complete deposits and withdrawals. When you deposit via DANA, e-wallet, or mobile banking, we share your name and transaction amount with that provider. When you withdraw to a local payment, online payment, or e-wallet virtual account, we share your name, account number, and withdrawal amount with your bank. These processors handle your data according to their own privacy policies; we are not responsible for their practices.

We may share your data with compliance partners (KYC verification services, fraud-detection vendors) to verify your identity and detect suspicious activity. We may share your data with law enforcement if required by court order or legal process. We do not sell your data to advertisers, data brokers, or other third parties. We do not use your data for profiling or automated decision-making.

We at mixtoto encrypt your data in transit and at rest. We do not sell your information to third parties.

Your Rights and Data Access

You have the right to request access to all data we hold about you. You can request this via email to our support team; we will provide a copy within standard review windows. You have the right to correct inaccurate data. If your name, address, or other registration details change, update them in your account settings or contact support. You have the right to request deletion of your data, subject to legal retention requirements. We will anonymize your data rather than permanently erase it to preserve transaction history for regulatory compliance.

You have the right to opt out of marketing emails. Each email includes an unsubscribe link. You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights. Our contact details are listed at the end of this notice. We will respond to data-access requests and complaints within standard review windows.

Cookies and Tracking on mixtoto

We use cookies to maintain your session, remember your preferences, and track your activity on mixtoto. Session cookies expire when you close your browser. Persistent cookies remain on your device for up to one year. We use both first-party cookies (set by mixtoto) and third-party cookies (set by analytics vendors). You can disable cookies in your browser settings, but this may affect your ability to use mixtoto.

We use analytics tools to track page views, click patterns, and user flow. This data helps us improve our platform. We do not use this data to identify you personally; it is aggregated across all users. We do not share analytics data with third parties except our analytics vendor, which is contractually bound to keep your data confidential.

Data Security and Encryption

We encrypt all data in transit using TLS (Transport Layer Security). Your password is hashed using a one-way algorithm; we do not store your plaintext password. Your payment credentials are handled directly by your payment provider; we do not store them. We maintain access controls so only authorized staff can access your data. We conduct regular security audits and penetration tests. If we detect a data breach, we will notify affected users via email within standard notification windows.

We do not guarantee absolute security. No system is immune to attack. If you believe your account has been compromised, contact our support team immediately. We will freeze your account pending review and help you secure it.

International Data Transfers

Our servers may be located outside your jurisdiction. When you use mixtoto, your data may be transferred to and stored in countries with different data protection laws. By using mixtoto, you consent to these transfers. We take steps to ensure your data is protected during transfer (encryption, secure protocols). We do not transfer your data to countries without adequate data protection unless you explicitly consent.

Contact and Data Protection Officer

If you have questions about our privacy practices, contact our support team via email or in-app messaging. We will respond within standard review windows. If you wish to exercise your rights (access, correction, deletion), contact us with your request and we will process it within standard timelines. Our data protection practices comply with regional regulations applicable to online gaming platforms. This notice is effective as of the date listed at the bottom of this page. We reserve the right to update this notice at any time. Material changes will be announced via email.