Reference

How ah toto protects your privacy

When you open an account with us, your personal information and account activity stay secure under our privacy framework.

Data you controlAccount security firstTransparent practicesYour rights explained
ah toto How ah toto protects your privacy
REACH OUT

How to contact us about your privacy

Team online

Live chat

Open a ticket in your account settings; our team in Semarang responds between 08:00 and 23:00 WIB, seven days a week.

Email

Send privacy requests to [email protected] with your account number and specific request. We aim to reply within 48 hours.

Account settings

Visit your privacy dashboard under Account > Privacy to download your data, update consent preferences, or delete your account.

SECURITY & TRANSPARENCY

How we keep your account and data safe

Encryption everywhere

All payments via DANA, OVO, GoPay and QRIS, plus login credentials and gameplay records, travel encrypted. Your withdrawal verification happens on a secure server with no third-party access.

Cookie clarity

We use session cookies to keep you logged in during play and analytics cookies to measure page speed and error rates where local law permits. You can disable non-essential cookies in your browser settings.

Data retention

We keep account and transaction records for five years after account closure to comply with financial reporting rules. Gameplay logs are held for two years. You can request earlier deletion where legal.

Fraud detection

We monitor login patterns, device changes and payment anomalies to block unauthorized access. If we flag your account, we'll send a notification with next steps and a support contact.

Third-party limits

We never sell your email or gameplay data to advertisers. We share data only with payment processors, fraud-prevention vendors and compliance authorities when local law requires.

Your control

Log in, go to Account > Privacy Settings to update your contact details, review what data we hold, opt out of marketing emails, or download your full data file.

Privacy questions we hear often

Yes. Go to Account > Privacy Settings and select 'Close Account'. We'll anonymize your gameplay history immediately and delete personal details within 30 days, unless we're required to keep records for financial or legal reasons.

DANA, OVO, GoPay and QRIS payment tokens are deleted 30 days after your last withdrawal. Bank account details are stored encrypted for five years for audit purposes. You can request deletion earlier if you've no pending transactions.

Only you, through your account dashboard. Our compliance team may review gameplay records if you request a refund or we investigate fraud. Third parties cannot access your play history without your written consent.

We record your IP address and approximate location from your device at login to detect fraudulent access from unusual countries. We do not use GPS or real-time location tracking. You can review recent login locations in Account > Security.

Yes. Click 'Unsubscribe' at the bottom of any email, or go to Account > Preferences > Email Settings and uncheck promotional emails. We'll stop sending promotions within 24 hours but may still send account alerts and withdrawal confirmations.

Change your password immediately and contact live chat or email [email protected]. Include the date and time of the activity. Our security team will review your account, freeze it if needed, and guide you through verification steps.