evostoroPrivacy Policy

This page describes what we collect when you use evostoro and how we keep that data protected. We at evostoro collect personal information—your name, date of birth, national ID number, email address, phone number, residential address, and payment details—when you register an account, verify your identity, make deposits through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts, and interact with our customer support team. This information is encrypted, stored securely, and used only for account management, payment processing, compliance, and fraud prevention.

We do not sell your personal data to third parties. We do share it with trusted payment processors, banking partners, and compliance agencies when required by law. Our servers may be located outside your jurisdiction; however, we apply the same security standards and data-protection commitments globally. You have the right to access, correct, or delete your personal data upon request, subject to legal and contractual obligations.

This privacy policy applies to all users accessing evostoro from any supported jurisdiction. By using our platform, you acknowledge that you have read and accepted this policy. We at evostoro are committed to transparent data handling and will answer any questions you have about how your information is processed, stored, and protected.

Data Collection and Account Registration

When you open an account on evostoro, we collect your full legal name, date of birth, national ID number (KTP, passport, or driver's license), email address, phone number, and residential address. We use this information to verify your identity, comply with Know Your Customer (KYC) regulations, and prevent account fraud and duplicate registrations. We also collect your IP address, device model, browser type, and operating system to detect unusual access patterns and protect your account from unauthorized login attempts.

During account verification, we may request additional documents—a photo of your ID, a utility bill or bank statement, and sometimes a selfie. These documents are stored securely and used only for identity verification. We do not use your photo for any purpose outside of facial-recognition verification. Your documents are retained for the duration of your account and for a retention period thereafter to satisfy regulatory requirements.

Payment Data and Financial Information

When you deposit funds through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts, we collect transaction details—the payment method, amount, timestamp, and transaction ID. We do not store your full card numbers, e-wallet passwords, or bank account numbers on our servers. Payment gateways (third-party processors) handle this sensitive information under their own encryption and security protocols. We store only a reference token that allows us to process future transactions without re-entering your full payment details.

Your deposit and withdrawal history is linked to your evostoro account and is used for account reconciliation, fraud detection, and compliance reporting. Players in Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta generate millions of transactions annually. All transaction records are encrypted and backed up securely. We retain this data for at least seven years to satisfy tax and regulatory obligations in supported jurisdictions.

Use of Your Data on evostoro

We at evostoro use your personal data for the following purposes:

Account managementCreating and maintaining your account, processing logins, and resetting passwords.
Payment processingVerifying your identity, processing deposits and withdrawals, and reconciling transactions with payment partners.
ComplianceComplying with Know Your Customer (KYC), anti-money-laundering (AML), and local regulatory requirements in your jurisdiction.
Fraud preventionDetecting unauthorized access, duplicate accounts, and suspicious transaction patterns.
Customer supportResponding to your inquiries, resolving disputes, and providing assistance with account recovery or payment troubleshooting.
Service improvementAnalyzing usage patterns to improve our sportsbook, live-dealer, and slot offerings.

We do not share your data for marketing

We do not use your email, phone, or personal information to send unsolicited marketing messages. Communication from evostoro is limited to account notifications, payment confirmations, and support responses. You can opt out of non-critical communications in your account settings.

Third-Party Data Processors

We at evostoro share your personal data with the following categories of third parties:

Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment providers, and online payment, e-wallet, mobile banking, local payment process your deposits and withdrawals under their own privacy policies.
Compliance partners: Licensed compliance services verify your KYC documents and check your details against sanctions lists as required by law.
Hosting providers: Our servers and databases may be hosted by third-party cloud providers. We use contracts to ensure they apply the same security standards we do.
Customer support platforms: Our live-chat, email, and in-app messaging systems may be hosted on third-party platforms. All support conversations are encrypted.

We do not sell your personal data to advertising networks, data brokers, or any entities not essential to operating evostoro. Sharing with third parties is limited to the minimum necessary to process your transactions and comply with law. All third-party processors sign data-processing agreements binding them to the same confidentiality and security standards we maintain.

Your Rights and Data Access

You have the right to access, correct, or delete your personal data held by evostoro. To request access or correction, contact our support team via live chat (during business hours), email, or in-app messaging. We process these requests within 30 days. Note that some data (such as transaction history) may need to be retained for legal or regulatory reasons; we will inform you of any data that cannot be deleted and why.

You may request deletion of your account and associated personal data at any time. Upon deletion, your account is deactivated, and identifying information is anonymized or securely destroyed. However, we retain transaction records and KYC documentation for the minimum periods required by anti-money-laundering regulations and tax law. These records are kept encrypted and separated from your active account data.

Cookies and Tracking Technologies

Our evostoro platform uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and analyze usage patterns. Cookies are small text files stored on your device. We use session cookies (which expire when you close your browser) for login persistence and functional cookies to improve your experience. We do not use third-party cookies for advertising or behavioral tracking.

You can disable cookies in your browser settings, but this may limit your ability to access certain features of evostoro. We do not track your activity across external websites. Any analytics we collect are aggregated and anonymized—we see trends in user behavior but not your individual choices.

Data Security and Retention

We at evostoro implement industry-standard encryption and security practices to protect your data. All connections to our platform use SSL/TLS encryption. Account passwords are hashed using cryptographic algorithms; we do not store passwords in plain text. Financial data is encrypted at rest and in transit. Our servers are protected by firewalls, intrusion-detection systems, and regular security audits.

We retain your personal data only for as long as necessary to operate your account and comply with legal obligations. Your account information is retained for the duration of your membership plus a retention period thereafter (typically 7 years for transaction records to satisfy tax and regulatory requirements). When data is no longer needed, it is securely destroyed or anonymized.

Our servers may be located outside your jurisdiction; however, we apply uniform security standards globally. Data transfers are encrypted. We do not move your data across borders without your consent except where legally required. If data breaches occur, we notify affected users and relevant authorities as required by law.

Policy Changes and Contact Information

We may update this privacy policy periodically to reflect changes in our practices or regulatory requirements. When material changes occur, we notify you via email and display a notice on the evostoro platform. Your continued use of our platform after changes implies acceptance of the updated policy.

If you have questions about this privacy policy, how we handle your data, or wish to exercise your rights regarding your personal information, contact our support team. We respond to privacy inquiries within 30 days. Our team is available in English and Indonesian during business hours. During holidays such as Idul Fitri, Idul Adha, Imlek, and Nyepi, response times may extend, but we commit to addressing all privacy concerns promptly upon return to standard operations.