LEGAL REFERENCE

Your Privacy Comes First

We built data toto around your trust. This privacy policy shows exactly how we handle your account details, payment information and personal data across every lobby, live table...

Account SecurityPayment ProtectionData EncryptionIndonesia CompliantTransparent Practices
data toto Your Privacy Comes First

What We Collect and Why

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Questions? We're Here

Email Support Reach our privacy team at [email protected] with any data concerns. We respond within 24 hours and can help you request, update or delete your personal information.
Live Chat Open the chat widget in your account dashboard to speak with our support team about privacy settings, data requests or account security questions in real time.
Account Settings Manage your privacy preferences directly in your account. Update contact details, adjust marketing opt-ins and review your recent login activity anytime.
WHY THIS PLATFORM

How We Protect Your Trust

SSL Encryption

Every transaction and login uses 256-bit SSL encryption. Your DANA, OVO, GoPay and QRIS payments travel through secure channels that meet international banking standards.

Regular Audits

We conduct quarterly security audits and penetration testing to identify and fix vulnerabilities before they affect your account. Third-party firms verify our encryption protocols.

Data Minimization

We only ask for information we actually need to run your account and process payments. We don't collect unnecessary personal data and delete records after the retention period ends.

Staff Training

Our team completes annual privacy and security training. Every employee who touches customer data signs a confidentiality agreement and follows strict access controls.

Incident Response

If a breach occurs, we notify affected users within 48 hours and work with authorities to investigate. We maintain cyber insurance and a documented incident response plan.

Transparent Logging

We keep detailed logs of who accesses your data and when. You can request an audit trail of your account activity through our support team anytime.

Consistency Across Our Brand

Same Policy Everywhere
Whether you're on desktop, mobile or our app, the same privacy rules apply. Your data handling is identical across all platforms.
Unified Payment Security
DANA, OVO, GoPay and QRIS deposits follow the same encryption and verification process on every device and lobby section.
Consistent Retention
We keep your account data for the same duration whether you're active or inactive. Deletion timelines don't change based on your play history.
Equal Access Rights
You have the same right to request, update or delete your data regardless of which payment method you use or how long you've been with us.
Unified Support Standards
Privacy requests through email, chat or account settings receive the same priority and response time from our team.
Aligned Compliance
Our privacy practices meet the same legal standards across all supported regions in Indonesia and comply with local data protection requirements.
Transparent Updates
When we change this policy, we notify you via email and in-account message. You'll always know what's different and why.

What Defines Our Privacy Approach

Zero Third-Party Sales

We never sell your personal data to advertisers, brokers or data companies. Your information stays within data toto unless you explicitly consent otherwise.

Instant Deletion

Request account closure and we delete your personal data within 30 days. Payment records stay for tax compliance, but your profile and activity logs are gone.

Payment Method Privacy

Your DANA, OVO, GoPay and QRIS details are tokenized. We never store full card or wallet numbers on our servers, only secure reference tokens.

Geo-Restricted Access

Your account data is stored in data centers within supported Indonesia regions. We don't transfer personal information outside your jurisdiction without consent.

Session Privacy

Your gameplay activity and betting history are tied to your account only. We don't share session data with other players, even if you're at the same live table.

Marketing Control

Opt out of promotional emails, SMS and push notifications anytime in your account settings. We respect your preference immediately without delay.

Privacy Policy Questions Answered

We retain your account information for as long as your account is active. After closure, we keep payment records for seven years for tax and legal compliance, then delete everything else within 30 days.

Yes. Email [email protected] with 'Data Request' in the subject line. We'll send you a complete export of your account details, transaction history and gameplay logs within 14 days.

Completely. We use tokenization so we never store your actual payment details. Your wallet or card number is replaced with an encrypted token that only our payment processor can decode.

We share anonymized gameplay data with Evolution, Pragmatic and PG Soft to improve game performance and stability. Your name, email and payment details are never shared with any third party.

We notify you within 48 hours and work with authorities to investigate. We maintain cyber insurance and have a documented incident response plan to minimize impact on your account.

Yes. Unsubscribe from any promotional email or adjust your preferences in account settings. We stop sending marketing messages immediately and respect your choice permanently.

Your account information is stored on secure servers within supported Indonesia regions. We don't transfer personal data outside your jurisdiction without explicit consent from you first.