Reference

kartu toto Privacy Policy and How It Works

This Privacy Policy sets out exactly what personal data kartu toto collects when you open an account, make a deposit via DANA or QRIS, or contact our support…

Account data protectedDANA & QRIS transaction recordsCookie controls availableData request path openIndonesia-based contact support
kartu toto kartu toto Privacy Policy and How It Works
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you have a question about how your data is stored, want to request a correction, or need to delete account information, our support team handles…

Live Chat Connect to our live chat from inside your account to raise a data query…
Email Support Send a detailed request to our privacy contact address for account data reviews, deletion…
In-Account Help Form Submit a privacy request directly through the help form in your account settings.
HOW WE HANDLE YOUR DATA

Data Handling, Cookies and Account Security

We apply consistent security practices across every layer of your account — from the moment you verify your phone number to each time you check a QRIS deposit status.

Data Minimisation

We collect only the information needed to run your account and process payments via DANA, OVO, GoPay, or QRIS. No unnecessary fields are requested at registration or during wallet linking.

Cookie Controls

Cookies on kartu toto track session state and payment flow only. You can adjust non-essential cookie preferences through the settings panel accessible after login.

Account Security

Phone verification is required before account access is granted. This step protects your wallet connections — including linked OVO or GoPay accounts — from unauthorised access.

Data Retention

Transaction records, including bank transfer references for BCA, BRI, Mandiri and BNI, are retained for the period required by applicable regulations. After that window closes, data is deleted or anonymised.

Third-Party Sharing

We share data with payment processors — such as the networks that clear DANA and QRIS transactions — only to the extent needed to complete your deposit or withdrawal. We do not share data for advertising.

Your Request Rights

You may request a copy of the data we hold, ask us to correct inaccuracies, or submit a deletion request. All requests are routed to our privacy team and handled where local law permits.

Common Questions About Our Privacy Policy

These are the questions we hear most often about how kartu toto handles personal data. If your question is not covered here, our support team can address it directly through live chat or email.

We collect your name, phone number, and email at registration. Once you link a payment method — DANA, OVO, GoPay, QRIS, or a bank account — we also store the associated wallet or account reference needed to process transactions.

Transaction data is used to confirm deposits, verify withdrawals, and resolve payment disputes. We retain timestamps and reference numbers for the period required by applicable rules, then delete or anonymise them.

We share data only with payment processors — such as the networks clearing OVO or bank transfer transactions — when needed to complete a payment. We do not sell your data or share it for marketing purposes.

Submit a data access request through the in-account help form or by emailing our privacy team. Include your registered phone number and account reference. We respond within 24 hours on business days, where local law permits.

Yes. Send a deletion request via live chat or email. We will process it in line with our retention obligations. Some transaction records may need to be kept for the legally required period before full deletion.

We use session cookies to maintain your login state and track payment flow steps — for example, confirming a QRIS deposit status. You can adjust non-essential cookie preferences in the settings panel after you log in.

The policy applies to all registered accounts. Specific data-handling arrangements — including certain retention rules and third-party sharing — depend on local law in the region where you access the platform.