Reference

How buah toto protects your privacy

When you open an account with us, we collect only what we need to verify your identity, process your DANA, OVO, GoPay and QRIS deposits, and keep your…

Account verification onlyPayment data encryptedYour request, your choice
buah toto How buah toto protects your privacy
REACH OUR TEAM

How to contact us about privacy

If you have questions about how we handle your data, want to request access to your information, or need to report a privacy concern, our support team is here to help. We respond to data requests and privacy inquiries within five business days. You can reach us through live chat in your account lobby, email, or WhatsApp — all channels are staffed Monday through Friday, 8am to 10pm Jakarta time.

Team online

Live chat in lobby

Open your account and tap Support. Select Privacy or Data Request from the menu. Our team replies within two hours during business hours.

Email privacy requests

Send your question to [email protected] with 'Privacy Request' in the subject line. Include your account email and a clear description of what you need.

WhatsApp support line

Message our WhatsApp team for urgent privacy questions. Available Monday–Friday, 8am–10pm Jakarta time. Response time: under four hours.

SECURITY & RETENTION

How we keep your data safe and what you can do

Your account information is held on encrypted servers and separated from our transaction systems.

Data encryption

All personal data travels over SSL/TLS encrypted connections. Your password is hashed and never stored in plain text. Payment details are tokenised and never held on our main database.

No third-party sales

We do not sell your email, phone or play history to advertisers or data brokers. Payment processors see only what they need to complete your deposit or withdrawal.

Your access rights

Request a copy of all data we hold about you in your account or via [email protected]. We'll send it within five business days. Format: downloadable PDF or CSV.

Data correction

Found an error in your profile? Update your name, email or phone directly in account settings. For transaction disputes, email [email protected] with proof of the error.

Deletion requests

You may request deletion of your account and associated data where local law permits. We'll remove all personal information within 30 days, except records we must keep for financial compliance.

Cookie management

Manage login cookies, analytics trackers and preferences in your browser privacy settings. Our support team can walk you through this on request via WhatsApp or live chat.

Privacy questions players ask us

Below are real questions from our community about how we handle privacy. If your question isn't here, reach out to our support team.

When you close your account, we stop active collection immediately. Personal details like your name and email are retained for up to seven years where local law requires it for anti-fraud and financial compliance. Transaction records are kept indefinitely. You can request deletion where local law permits; email [email protected] to start.

DANA, OVO, GoPay and QRIS payments never expose your full details to us. We receive only a transaction token and confirmation code. Your payment method stays encrypted on the provider's servers. We never store card numbers or bank account details.

Yes, we can see which games you play and your bet history while you're logged in. This data helps us detect fraud and spot account abuse. We do not share this with third-party advertisers. You can request a full download of your play history from your account settings anytime.

Only our compliance and security teams can see your personal data. Payment processors (DANA, OVO, GoPay and QRIS) see deposit and withdrawal records. Local authorities may request account details where local law requires it. We notify you of legal requests where we are permitted to do so.

Yes. We use cookies to remember your login, language preference and game settings. Analytical cookies help us spot platform issues. You can disable all cookies in your browser settings, but you may need to log in again each visit. Support can help if you get stuck — reach us via live chat or WhatsApp.

Deposit and withdrawal records are kept for a minimum of seven years where local law requires it. This helps us comply with anti-money-laundering rules and respond to fraud claims. After seven years, we may delete them unless a legal hold applies. Contact support to request a copy of your transaction history anytime.

If we discover unauthorized access to personal data, we notify affected account holders within 72 hours via email and in-account alert. We document the breach, inform relevant authorities where local law requires it, and provide guidance on securing your account. Our security team reviews and strengthens systems to prevent recurrence.