Your Data. Your Control. Our Commitment.
We built x toto around your privacy. Every account detail, every transaction through DANA, OVO, GoPay or QRIS, and every moment you spend in our lobby stays protected...
What We Collect and Why
When you open an account with x toto, we collect your name, email, phone number and payment details to verify your identity and process deposits via DANA, OVO, GoPay and QRIS. We also track your gameplay patterns and account activity to detect fraud, improve your lobby experience and comply with local regulations in supported Indonesian regions. Your data is never sold to
third parties. We retain account records for the duration of your membership plus a retention period mandated by local law.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Questions About Your Privacy
How We Earn Your Trust
Encryption Standard
All account logins, payment submissions and personal data transfers use TLS 1.2 or higher encryption, the same standard banks use for online transactions.
Third-Party Audit
Our privacy and security practices are reviewed annually by independent compliance auditors to ensure we meet international data protection benchmarks.
Local Compliance
We follow Indonesian data protection regulations and payment processor requirements for DANA, OVO, GoPay and QRIS transactions in supported regions.
No Data Broker Sales
Your personal information is never rented, sold or shared with marketing firms, data brokers or unaffiliated third parties under any circumstance.
Breach Notification
If a security incident affects your account, we notify you within 48 hours with details of what happened and steps you should take immediately.
Privacy Officer
Our dedicated privacy officer oversees all data handling practices and responds to your requests, complaints and feedback about our policy.
Consistency Across Our Platform
| Mobile & Desktop | Your privacy protections remain identical whether you access x toto on your phone, tablet or desktop browser. |
|---|---|
| Live Tables & Slots | Data handling is consistent across live dealer rooms, slot lobbies and sportsbook sections—no variation by game type. |
| Payment Methods | DANA, OVO, GoPay and QRIS transactions receive the same encryption and fraud-detection standards as bank transfers. |
| Account History | Your deposit records, withdrawal history and gameplay logs are stored with identical security protocols and retention timelines. |
| Support Channels | Email, live chat and account settings all connect to the same privacy infrastructure and response procedures. |
| Policy Updates | When we change this policy, all users receive the same notification and grace period before changes take effect. |
| Regional Access | Users in supported Indonesian regions experience the same privacy commitments and data protections as all other x toto account holders. |
What Defines Our Privacy Approach
Minimal Collection
We ask only for information necessary to verify your identity, process your DANA, OVO, GoPay or QRIS payments and keep your account secure.
Transparent Logging
Every access to your personal data is logged and timestamped. You can request a full audit trail of who viewed your account and when.
Deletion Rights
Close your account and request permanent deletion of your personal data. We remove it within 30 days except where law requires retention.
Cookie Control
Manage your cookie preferences directly from our privacy settings. We never use tracking cookies without your explicit consent.
No Profiling
We don't build psychological profiles or sell your behaviour data to advertisers. Your gameplay stays between you and x toto.
Incident Response
If your data is compromised, we activate our breach protocol immediately: notification, credit monitoring and account recovery support.