Your Data. Your Control. Our Commitment.
We handle your account details, payment history and personal information with the same care you'd expect from a platform built for Indonesia. This policy explains exactly what we...
Privacy Policy Overview
udin toto operates under applicable Indonesian regulations and international data protection standards. We collect personal information — your name, email, phone number and payment details — only to verify your account, process transactions through DANA, OVO, GoPay and QRIS, and keep your account secure. We never sell your data to third parties. Your information stays encrypted and accessible only to authorised team
members who need it to serve you. Where local law permits, we retain transaction records for compliance and dispute resolution. You have the right to request, update or delete your personal data at any time by contacting our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Questions? We're Here.
Have concerns about how we handle your data? Reach out through any of these channels and we'll respond within 24 hours.
Email Support
Send privacy requests to [email protected]. Include your account email and we'll verify your identity before sharing or updating any information.
Live Chat
Open the chat widget in your account dashboard. Our team can walk you through privacy settings, data requests and account controls in real time.
Account Settings
Log in and visit Settings > Privacy & Data. You can review what we hold, download your data or request deletion directly from your dashboard.
How We Earn Your Trust
Privacy isn't a checkbox for us — it's built into every system we run. Here's what backs our commitment.
Encryption Standard
All payment data and personal information travels over TLS 1.3 encryption. Your DANA, OVO, GoPay and QRIS transactions are protected end-to-end.
Third-Party Audits
We undergo annual security audits by independent firms. Results are available to regulators and inform our ongoing data protection roadmap.
Compliance Team
Our legal and compliance officers monitor Indonesian regulations and international standards. Policy updates reflect changes in local law and best practices.
Data Minimisation
We collect only what's needed to verify your account and process payments. No unnecessary fields, no hidden tracking, no data hoarding.
Incident Response
If a breach occurs, we notify affected users within 72 hours and work with authorities. We maintain a public incident log for transparency.
User Rights Portal
Request, download or delete your data anytime. We process requests within 30 days and confirm completion via email to your registered address.
Consistency Across Our Platform
This privacy policy applies to udin toto across all devices and regions where we operate. Whether you're on mobile, desktop or tablet, your data protection stays the same.
| Mobile App | Same encryption, same data handling, same user rights. Download from official app stores only to avoid phishing. |
|---|---|
| Desktop Browser | Full policy applies. We recommend using HTTPS connections and keeping your browser and OS updated for extra security. |
| Live Casino Tables | Video streams and table interactions are logged for fairness audits. Your viewing history is never shared with other players. |
| Sportsbook Markets | Betting history and odds data are stored securely. We use this only to settle bets and prevent fraud — never for marketing profiling. |
| Payment Processing | DANA, OVO, GoPay and QRIS transactions follow the same encryption and audit trail. We never store full payment credentials on our servers. |
| Account Linking | If you link multiple payment methods, each is encrypted separately. You can unlink or update methods anytime from your account settings. |
| Supported Regions | This policy covers Indonesia and supported regions. Local regulations may add extra protections; we apply the strongest standard in each area. |
What Defines Our Privacy Approach
Privacy isn't just a legal requirement — it shapes how we build features, handle data and talk to you. Here's what sets our approach apart.
Account Verification
We verify your identity once during signup using your phone number and email. No repeated verification requests unless you change account details.
Session Management
Your login session expires after 30 minutes of inactivity. You can log out anytime. We never keep you logged in across devices without your consent.
Cookie Transparency
We use cookies only for login, preferences and fraud prevention. No tracking cookies, no ad networks, no third-party profiling on our site.
Marketing Opt-Out
Promotional emails are opt-in only. Unsubscribe anytime from the footer of any email or your account notification settings.
Data Retention
We keep transaction records for seven years for compliance. Personal details are deleted within 90 days of account closure unless law requires retention.
API & Integrations
Third-party services (payment gateways, analytics) sign strict data-processing agreements. They cannot use your data for their own marketing.