Home Page
Same encryption and data handling as this policy page. Your lobby access doesn't expose you to different privacy standards.
LEGAL REFERENCE
Your Data. Your Control. Our Commitment.
We handle your account details, payment information and gaming history with the same care you'd expect from a platform built for Indonesia. This policy shows exactly how we...
Data SecurityPayment PrivacyAccount ProtectionTransparent PracticesYour Rights
Privacy Policy Overview
toto 98 operates under the laws and regulations applicable to our supported regions, including Indonesia. We collect personal information — your name, email, phone number and payment details — only to set up your account, process transactions via DANA, OVO, GoPay and QRIS, and keep your gaming history secure. We never sell your data to third parties. Your information stays encrypted and
accessible only to authorised team members who need it to serve you. Where local law permits, we may use anonymised data to improve our platform. You have the right to request, update or delete your personal information at any time.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
WHY THIS PLATFORM
How We Earn Your Trust
Privacy isn't a checkbox for us — it's built into every system we run.
Encryption Standard
All data in transit and at rest uses industry-standard AES-256 encryption. Your payment details and account credentials are never stored in plain text.
Regular Audits
We conduct quarterly security audits and penetration testing to identify and fix vulnerabilities before they become risks to your account.
Compliance Framework
Our privacy practices align with GDPR principles and local data protection standards in supported regions, including Indonesia.
No Third-Party Sales
We never sell, rent or share your personal data with advertisers, brokers or unaffiliated companies. Your information stays yours.
Transparent Logging
Every access to your account data is logged and timestamped. You can request a full audit trail of who viewed your information and when.
Data Retention Policy
We keep your data only as long as needed to serve your account and comply with local law. You can request deletion anytime, subject to legal holds.
PLATFORM COMPARISON
Consistency Across Our Platform
Every page on toto 98 follows the same privacy principles.
Account Dashboard
Personal data displayed only to you. Session tokens expire after 30 minutes of inactivity to prevent unauthorised access.
Payment Processing
DANA, OVO, GoPay and QRIS transactions use tokenised payment flows. We never store full card or wallet credentials on our servers.
Live Casino Tables
Your gaming activity is logged for account integrity and fraud prevention, but never shared with game providers or third parties.
Sportsbook Markets
Betting history stays private. We use it only to calculate your balance and detect suspicious patterns that might indicate account compromise.
Slot Lobbies
Spin history and winnings are encrypted and tied to your account alone. No external analytics platform tracks your individual gameplay.
Mobile App
Same privacy standards as the web platform. App permissions are minimal — we request only what's needed to process payments and send notifications.
PLATFORM SNAPSHOT
What Defines Our Privacy Approach
These six principles shape how we build and run toto 98 for you.
01
Account Ownership
Your account is yours alone. Two-factor authentication and security questions ensure only you can access your balance, history and settings.
02
Payment Safety
DANA, OVO, GoPay and QRIS payments are processed through secure gateways. We never see your full payment credentials — only tokenised references.
03
Session Privacy
Your gaming sessions are isolated. Other players can't see your balance, betting patterns or account details, even if you're at the same live table.
04
Data Minimalism
We collect only what's necessary to run your account and comply with local law. No unnecessary fields, no hidden tracking, no data hoarding.
05
Breach Response
If a security incident occurs, we notify affected users within 24 hours and provide clear steps to secure your account and change your password.
06
Deletion Rights
Request account deletion anytime. We remove your personal data within 30 days, except where law requires us to retain records for compliance.
Privacy Questions Answered
We use tokenisation — your payment details are converted into a secure token that we store instead of your actual card or wallet credentials. Payment processors handle the real transaction data, not us. All communication is encrypted end-to-end.
No. We only see the transaction confirmation from your payment provider. We can't access your wallet balance, other transactions or personal payment history. Your e-wallet remains completely separate from our platform.
Only authorised team members who need it to serve you — support staff handling your requests, fraud prevention specialists and system administrators. Access is logged and audited. No one can view your data without a legitimate business reason.
We keep your data as long as your account is active, plus seven years for compliance with local financial regulations in supported regions. You can request deletion anytime, and we'll remove it within 30 days unless law requires us to retain it.
Never. We don't sell, rent, lease or share your personal information with anyone outside toto 98. Your data stays yours. We use it only to run your account and improve our platform for you.
We notify you within 24 hours with details of what happened, what data was affected and what steps you should take. We also notify relevant authorities where required by law and provide free credit monitoring if applicable.
Yes. Go to your account settings anytime to update your name, email, phone or address. To delete your account and all associated data, contact our support team and we'll process your request within 30 days.