How prtoto collects, uses, protects, and manages your personal information
Effective Date: January 2026Your Privacy Matters: At prtoto, protecting your personal information is a fundamental responsibility we take seriously. This Privacy Policy explains in clear, transparent language what data we collect, why we collect it, how we use it, and how we keep it secure. We comply with international data protection standards including GDPR principles and Indonesian data privacy regulations.
This Privacy Policy applies to all personal information collected by prtoto through our website at prtoto.cam, mobile applications, and any related services (collectively, the "Services"). By creating an account or using prtoto Services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.
prtoto is committed to maintaining the privacy and security of your personal information in accordance with applicable data protection laws. We process personal data lawfully, fairly, and transparently. If you do not agree with the practices described in this Privacy Policy, please do not register for an account or use our Services.
To provide our Services and comply with legal obligations, prtoto collects several categories of personal information:
prtoto uses collected personal information for the following legitimate purposes:
prtoto does not sell your personal information to third parties. However, we may share your data in the following limited circumstances:
We share personal information with trusted third-party service providers who assist in operating our platform, including:
All service providers are contractually bound to protect your data and may only use it for specified purposes on our behalf.
We may disclose personal information when required by law, including:
In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
We may share your information with third parties when you explicitly provide consent, such as participating in co-branded promotions or connecting your account to third-party services.
Protecting your personal information is a top priority at prtoto. We implement comprehensive security measures including:
| Security Layer | Protection Method |
|---|---|
| Encryption | 256-bit SSL/TLS encryption for all data transmission; AES-256 encryption for stored data |
| Access Control | Role-based access restrictions; multi-factor authentication for staff; principle of least privilege |
| Network Security | Firewalls, intrusion detection systems (IDS), DDoS protection, regular penetration testing |
| Physical Security | Secure data centers with 24/7 monitoring, biometric access control, redundant power and cooling |
| Monitoring | Real-time security monitoring, automated threat detection, incident response procedures |
| Employee Training | Regular security awareness training, background checks, confidentiality agreements |
While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and should notify us immediately of any unauthorized access.
prtoto retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
For active accounts, we retain personal information for the duration of your account relationship plus any period required for legal compliance (typically 5-7 years from account closure for financial records).
Accounts inactive for 12+ months may be archived. Transaction history and essential compliance records are retained according to legal requirements even after account closure.
If you opt out of marketing communications, we will retain your email address on a suppression list to honor your preference, but will not use it for promotional purposes.
Upon request (see Section 7), we will delete personal information not required for legal compliance. Some data must be retained to comply with gaming regulations, anti-money laundering laws, and tax obligations.
Depending on your jurisdiction, you have the following rights regarding your personal information:
You may request a copy of the personal information prtoto holds about you. We will provide this within 30 days in a structured, commonly used, and machine-readable format.
You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings or contact customer support for assistance.
You may request deletion of your personal information, subject to our legal obligations to retain certain data for regulatory compliance, fraud prevention, and dispute resolution.
You can request that we limit how we use your personal information in certain circumstances, such as while disputing data accuracy or contesting the lawfulness of processing.
You may request a copy of your personal data in a portable format to transfer to another service provider.
You can object to processing based on legitimate interests or for direct marketing purposes. We will honor marketing opt-out requests immediately.
Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may request identity verification to protect your privacy.
prtoto uses cookies and similar tracking technologies to enhance user experience, analyze usage, and provide personalized content.
You can control cookies through your browser settings. Note that disabling essential cookies may prevent certain features from functioning properly. Most browsers allow you to:
prtoto operates internationally and may transfer personal information to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure adequate safeguards are in place, including:
Data transferred outside Indonesia receives protections equivalent to those described in this Privacy Policy and required by applicable law.
prtoto Services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. Our KYC verification process is designed to prevent underage registration.
If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete the account, block further access, and erase all associated data from our systems. Parents or guardians who believe their child has provided personal information to prtoto should contact us immediately at [email protected].
prtoto reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically. Your continued use of prtoto Services after changes become effective constitutes acceptance of the updated Privacy Policy.
For questions, concerns, or requests regarding this Privacy Policy or how prtoto handles your personal information, please contact us:
We aim to respond to all privacy inquiries within 48 hours and resolve concerns within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Additional Resources: For more information about your rights and our practices, please also review our Terms & Conditions and Responsible Gaming policies. These documents work together to provide comprehensive information about using prtoto Services safely and responsibly.
256-bit SSL encryption protects all data transmission between your device and our servers, the same security used by banks worldwide.
Personal data stored using AES-256 encryption in secure data centers with redundant backups and 24/7 monitoring.
We never sell your personal information to third parties. Your data is used solely for service provision and legal compliance.
Our privacy practices follow GDPR principles including lawfulness, transparency, data minimization, and accountability.
Access, rectify, delete, or port your personal data. Exercise your privacy rights anytime by contacting our support team.
Personal information retained only as long as necessary for service provision and legal compliance, then securely deleted.
Our team is here to address any privacy-related inquiries. Review our FAQ for quick answers or contact us directly for personalized assistance.