LEGAL REFERENCE

Your Privacy Matters to Us

We built toto98 around your account security and data protection. This policy explains how we collect, use and safeguard your information across live tables, slot lobbies and sportsbook...

Data EncryptedPayment SecureAccount ProtectedPrivacy FirstIndonesia Compliant
Account access Read FAQ
toto98 Your Privacy Matters to Us

Our Privacy Commitment

toto98 operates under privacy frameworks designed for supported regions in Indonesia. We collect personal data — your name, email, phone number and account preferences — only to deliver your gaming experience, process withdrawals and withdrawals via DANA, OVO, GoPay and QRIS, and comply with local regulations. Your data is never sold to third parties. We use industry-standard encryption to protect payment information.

Access to your account is restricted to authorised staff only. We retain your data for as long as your account remains active, plus a retention period for legal compliance.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Privacy Questions? Reach Out

Team online

Email Support

Send privacy concerns to our data protection team. We respond within 48 hours to requests about your personal information, data deletion or account closure.

Live Chat

Chat with our support team during lobby hours. They can walk you through privacy settings, data requests and account security options in real time.

Account Settings

Manage your privacy preferences directly in your account dashboard. Update contact details, communication preferences and data-sharing settings anytime.

PLATFORM TRUST SIGNALS

Privacy Standards We Follow

Encryption Standard

All payment data — DANA, OVO, GoPay and QRIS transactions — travels over TLS 1.2+ encryption. Your account credentials are...

Data Minimisation

We collect only the information needed to run your account, process payouts and meet local compliance. No unnecessary tracking or...

Third-Party Audit

Our privacy practices are reviewed annually by independent security auditors. Audit reports confirm our encryption, access controls and data retention...

Vendor Agreements

Payment processors, hosting providers and analytics partners sign data-processing agreements. They cannot use your data for their own marketing or...

Incident Response

If a data breach occurs, we notify affected users within 72 hours and provide guidance on account security steps. We...

User Rights

You can request a copy of your data, correct inaccuracies, or ask for deletion where local law permits. Submit requests...

How Our Privacy Policy Stands

Data RetentionWe keep your account data active for as long as you play. After closure, we retain records for 7 years to meet tax and anti-money-laundering requirements.
Payment PrivacyDANA, OVO, GoPay and QRIS transactions are tokenised. We never store full card or wallet numbers on our servers; payment gateways handle sensitive details.
Cookie PolicyWe use session cookies to keep you logged in and analytics cookies to improve lobby speed and game load times. You can disable non-essential cookies in your browser.
Location DataWe collect your IP address to verify your location is in a supported region and to detect fraudulent account access. We do not track your physical movement.
Marketing ConsentWe send promotional emails and SMS only if you opt in. You can unsubscribe anytime via email footer links or account notification settings.
Child Safetytoto98 is for users 18 and older. We do not knowingly collect data from minors. If we discover a child's account, we close it and delete their data immediately.
Policy UpdatesWe update this policy when regulations change or we add new features. We notify you of material changes via email and ask for your consent before they take effect.
AT A GLANCE

What Defines Our Privacy Approach

Transparent Logging Every login, withdrawal and account change is logged with a...
Two-Factor Authentication Protect your account with SMS or email verification on login...
Session Timeout Your session expires after 30 minutes of inactivity for security...
Withdrawal Verification When you request a payout to DANA, OVO, GoPay or...
Privacy by Design We build privacy into every feature from the start —...
Compliance Roadmap We track Indonesia's evolving data protection laws and update our...

Privacy Policy Questions

We tokenise all payment details — your wallet or card number is replaced with a unique token that only our payment processor can decode. Your actual payment credentials never touch our servers. All transactions are encrypted end-to-end.

Yes. Submit a data-access request via email or your account settings. We'll compile your profile data, transaction history and account preferences into a file and send it within 14 days. No charge applies.

We anonymise your gaming history and delete personal identifiers like your phone number and email. We retain transaction records for 7 years to comply with tax and anti-fraud laws, but they're encrypted and inaccessible to our support team.

No. We never sell your personal data. We share information only with payment processors, hosting providers and compliance partners — all under strict data-processing agreements that prohibit secondary use.

We review our policy quarterly and update it when regulations change or we launch new features. Material changes are communicated via email at least 30 days before they take effect. You can always view the current version on this page.

Change your password immediately and enable two-factor authentication in settings. Contact our support team via email or live chat with details of the suspicious activity. We'll review your account logs and help you secure it.

We collect your IP address to verify you're in a supported region and to detect fraudulent logins from unusual locations. We do not track your physical movement or share location data with third parties.