nxtoto Privacy Policy
This page describes what we collect when you use nxtoto and how we keep that data protected. We at nxtoto take your privacy seriously. When you register an account, deposit funds via DANA, e-wallet, mobile banking, or any of our supported payment methods, or place a bet on Liga 1 or Champions League fixtures, we collect information necessary to verify your identity, process your transaction, and comply with local regulations.
Our privacy commitments apply across all jurisdictions where our services are available. We do not sell your personal data to third parties. We do not share your account details with marketing firms. Your information stays within our secure infrastructure, and we disclose it only to payment processors, regulatory authorities, and fraud-prevention partners when the law requires it.
What we collect on nxtoto
We collect your name, email address, phone number, and date of birth when you sign up. During account verification, we ask for a government-issued ID—your KTP, passport, or driving licence—and we may request a selfie to confirm your identity matches the document. We store these details encrypted on our servers.
When you deposit, we record the payment method, amount, timestamp, and transaction reference. If you use DANA or e-wallet, we do not store your wallet credentials; we only log that a successful transfer occurred. Our payment processors (third-party firms licensed to handle Indonesian banking) retain transaction records for their own compliance purposes, separate from our database.
We log your betting activity—which markets you view, which fixtures you select, your stake amounts, and the outcome. We track your login times, device type, IP address, and browser information to detect fraud and enforce our terms. We also collect any messages you send to our customer support team and any documents you upload during a withdrawal dispute.
How we use your data on nxtoto
We use your personal information to verify your identity, process deposits and withdrawals, settle bets, and send you account notifications. We analyse betting patterns to detect money laundering and fraud. We may contact you by email or SMS if we suspect unusual activity—for example, a withdrawal request from a new device during Idul Fitri when you typically do not play.
We share your data with our payment partners (mobile banking, local payment, online payment, e-wallet, and e-wallet operators) only to complete your transaction. We share it with our fraud-detection vendor to flag suspicious accounts. We may disclose it to Indonesian financial regulators or law enforcement if required by court order or legal process.
We do not use your data to build marketing profiles or sell it to betting syndicates. We do not cross-reference your nxtoto account with your social media. We do not send you unsolicited promotional emails; we only email you about your account, your bets, and service updates.
Your rights on nxtoto
You have the right to request a copy of all data we hold about you. You can ask us to correct inaccurate information—for example, if your registered name is misspelled. You can request deletion of your account and associated records, subject to our obligation to retain transaction logs for seven years for regulatory compliance.
You can opt out of non-essential communications (e.g. service announcements) by updating your notification settings in your nxtoto account. You cannot opt out of security alerts or legal notices.
If you believe we have mishandled your data, you can lodge a complaint with us first. If we do not resolve it within 30 days, you may escalate to the relevant data-protection authority in your jurisdiction.
Data retention and security on nxtoto
We retain your account data for as long as your nxtoto account is active, plus two years after closure. We retain transaction records for seven years to comply with Indonesian financial regulations. We delete marketing data (e.g. analytics cookies) after 12 months of inactivity.
Our servers use SSL encryption for all data in transit. Your password is hashed and salted; we never store it in plain text. We conduct annual security audits and penetration testing. We maintain offsite backups to protect against data loss. Our data centres sit in secure facilities with restricted physical access.
Two-factor authentication on nxtoto
We recommend enabling two-factor authentication (2FA) on your nxtoto account. 2FA requires a one-time code from your phone in addition to your password, making it harder for attackers to access your account even if they steal your credentials.
Third-party processors and international transfers
Our payment processors and fraud-detection vendors may store copies of your data outside Indonesia. We ensure they comply with data-protection standards equivalent to our own. We have data-processing agreements in place that restrict how they use your information.
Our customer support platform is hosted in Southeast Asia. Our analytics provider (which tracks aggregate betting trends, not individual player data) operates servers in multiple regions. We do not transfer your personal data to the United States or Europe unless required by law.
Contact us about your privacy on nxtoto
If you have questions about this privacy policy or want to exercise your rights, contact our data-protection team at [email protected]We aim to respond within 14 days. You can also reach us through the contact form in your nxtoto account settings or by calling our support line during business hours.
We update this policy periodically to reflect changes in our practices or legal requirements. We will notify you by email if we make material changes. Your continued use of nxtoto after an update means you accept the new terms.
Our services are available only where local law permits. We do not operate in jurisdictions where online wagering is prohibited. By using nxtoto, you represent that you are accessing the platform from a supported region and that you comply with all applicable laws.