At 2mtoto, protecting your personal data is a core responsibility — not an afterthought. This Privacy Policy explains in plain, professional terms exactly what information we collect, why we collect it, how we use and store it, and the rights you hold over your own data as a Member of the 2mtoto platform.
These six principles summarise 2mtoto's commitment to responsible data handling. The full legal document is set out below — please read it in its entirety before using the platform.
All data transmitted between your device and 2mtoto is protected by industry-standard 256-bit SSL/TLS encryption. This applies to every page, every login, every deposit, and every support message — no exceptions.
2mtoto does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data sharing with partners is limited to what is strictly necessary to operate the platform and comply with our licence obligations.
Member data is stored on secure, access-controlled servers with regular security audits. Sensitive fields such as passwords are hashed using modern one-way cryptographic algorithms and are never stored or transmitted in plain text.
You can request access to your personal data, ask for corrections, and in certain circumstances request deletion. Opt-out controls for marketing communications are available directly in your Account settings panel at any time.
2mtoto uses cookies and similar technologies solely to maintain session state, remember your preferences, and analyse aggregate site performance. We do not use third-party advertising cookies or cross-site tracking pixels on the platform.
Our support team includes Indonesian-speaking agents available around the clock across WIB, WITA, and WIT time zones. Any privacy-related concern — data access request, correction request, or complaint — will be acknowledged within 24 hours and resolved within five business days.
Scope of this Policy: This Privacy Policy applies to all personal data collected by 2mtoto through the website at https://2mtoto.pro, its mobile-optimised interface, live chat, email correspondence, and any other channel through which you interact with the 2mtoto platform. By registering an Account or using the platform, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, you must not use the platform.
The following terms are used throughout this Privacy Policy and carry the meanings set out below:
2mtoto collects Personal Data through several channels. The categories of data we collect, together with their source and the context in which they are gathered, are described below.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, NIK (Indonesian national identity number) | Account registration & KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, residential address (city, province, postal code) | Account registration & profile updates |
| Financial Data | Bank account name, account number, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja) | Deposit & withdrawal setup; KYC verification |
| Identity Documents | Scan or photograph of KTP (Indonesian identity card), passport, or driving licence; proof of address documents | KYC verification upon request |
| Communications Data | Live chat transcripts, support email content, survey responses | Any time you contact our support team |
When you visit or use the 2mtoto platform, we automatically collect the following technical and behavioural data:
We may receive additional Personal Data about you from the following third-party sources, where permitted under applicable law:
2mtoto uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or as required by applicable law.
For each processing activity, 2mtoto relies on one or more of the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration, service delivery, deposits & withdrawals | Performance of a contract — necessary to provide the service you have requested |
| KYC verification, AML checks, licence-required record retention | Legal obligation — required under the Licence Holder's regulatory and licensing conditions |
| Fraud prevention, multi-account detection, platform security | Legitimate interests — protecting the financial integrity of the platform and the rights of other Members |
| Responsible gaming monitoring and intervention | Legitimate interests & legal obligation — promoting Member welfare and complying with licence conditions |
| Marketing communications (email, SMS, in-platform notifications) | Consent — you may withdraw consent at any time via Account settings or by emailing [email protected] |
| Platform analytics and performance improvement | Legitimate interests — improving the service for all Members using anonymised aggregate data |
2mtoto does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.
We engage carefully vetted third-party service providers who process Personal Data on our behalf and under our instructions. These include:
All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the services they provide to 2mtoto.
2mtoto may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required by law or a valid legal process. This includes disclosures required under the Licence Holder's international gaming licence and AML obligations. We will notify you of such a disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the Licence Holder's assets, your Personal Data may be transferred to the successor entity as part of that transaction. We will notify affected Members by email prior to any such transfer and you will have the option to close your Account if you do not wish your data to be transferred.
What we will never do: 2mtoto will never share your Personal Data with third-party advertisers, data brokers, affiliate marketing networks, or social media platforms for their own commercial use. Your data is not a product.
2mtoto uses cookies and similar browser-based technologies to operate certain essential platform functions and to understand how Members use the platform in aggregate. A cookie is a small text file stored on your device by your browser.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your language preference, prevent CSRF attacks, and ensure platform security | No — disabling these will prevent the platform from functioning correctly |
| Functional | Remember your preferred odds format, default deposit method, and responsible gaming limit settings between sessions | Yes — via browser settings; some features may be affected |
| Analytics | Collect anonymised aggregate data on page views, navigation paths, device types, and feature usage to improve the platform | Yes — via browser settings or by contacting support |
2mtoto does not use third-party advertising cookies, cross-site tracking pixels, or social media widgets that report your activity back to external platforms. You can manage cookie preferences through your browser's settings. Note that disabling strictly necessary cookies will impair your ability to use the platform.
2mtoto retains your Personal Data only for as long as is necessary for the purposes described in this policy, or as required by applicable law or our gaming licence obligations. The following retention periods apply as a general guide:
When Personal Data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
2mtoto implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, disclosure, or destruction. Our technical and organisational security measures include:
Your role in security: 2mtoto's security measures protect data on our end, but account security also depends on you. Use a strong, unique password for your 2mtoto Account. Never share your login credentials with anyone. 2mtoto staff will never ask for your password — treat any such request as fraudulent and report it immediately to [email protected].
As a Member of 2mtoto, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected] or via live chat. We will respond within five business days.
Response timeframes: All data rights requests will be acknowledged within 24 hours and fully responded to within five business days. Where a request is particularly complex or involves a large volume of data, we may extend this by a further ten business days — in which case we will notify you of the extension and the reason for it.
2mtoto operates a strict 21+ only policy. The platform is not intended for, and does not knowingly collect Personal Data from, individuals under the age of 21. Age verification is a mandatory step during Account registration, and KYC procedures are designed to detect and prevent underage access.
If 2mtoto discovers that Personal Data has been collected from an individual who was under 21 at the time of registration, the Account will be closed immediately, all Bonus Funds will be forfeited, Real Money Funds will be returned to the payment method used, and all Personal Data associated with the underage Account will be deleted from our systems as promptly as our legal obligations permit.
If you believe a minor may have created an Account on the 2mtoto platform, please contact our support team immediately at [email protected]. We treat reports of potential underage access as a priority matter and will investigate and act within 24 hours.
Parental controls: We strongly recommend that parents and guardians in Indonesia use device-level parental control software to restrict access to online gambling platforms. While 2mtoto enforces age verification at the registration stage, parental controls provide an additional layer of protection at the device level.
The 2mtoto platform is operated by an internationally incorporated Licence Holder. This means that your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia, including countries in which data protection laws may differ from those in your country of residence.
Wherever Personal Data is transferred internationally, 2mtoto ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that which would apply in the source jurisdiction. These safeguards include:
By using the 2mtoto platform and accepting this Privacy Policy, you consent to the transfer of your Personal Data to jurisdictions outside Indonesia under the safeguards described above.
The 2mtoto platform does not contain links to third-party websites for commercial or advertising purposes. Any references to payment providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) or game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) on the platform are informational only and do not constitute endorsement of those entities' own data practices.
If you interact directly with any third-party service — for example, by logging in to your BCA mobile banking app to initiate a deposit — that interaction is governed by the privacy policy of the third party concerned, not by this policy. 2mtoto is not responsible for the data practices of third-party services.
2mtoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. When material changes are made, we will:
Your continued use of the 2mtoto platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amended policy, you must close your Account and cease using the platform before the effective date of the change.
We encourage you to review this page periodically so that you remain informed about how we protect your Personal Data. Archived versions of previous Privacy Policy iterations are available upon request by contacting [email protected].
If you have any questions about this Privacy Policy, wish to exercise any of your data rights set out in Section 9, or wish to raise a complaint about the way 2mtoto has handled your Personal Data, please contact our Data Privacy team using the details below:
Email: [email protected]
Subject line: Privacy — [brief description of your request]
Response time: Acknowledgement within 24 hours; full response within 5 business days (WIB, UTC+7)
Support languages: English and Indonesian
When submitting a data rights request, please include your registered Account username or email address and a clear description of your request. We may need to verify your identity before processing certain types of request — particularly access, portability, and erasure requests — to ensure we do not disclose or delete data in response to a fraudulent or mistaken request.
If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction governing the Licence Holder's operations, or to seek judicial remedy through the courts of competent jurisdiction.