Wallets Protected
Your DANA, OVO, GoPay and QRIS credentials are never stored on our servers; we only hold tokenised references for faster checkout on your next deposit.
At toman toto, we've built our brand around Indonesia players. That starts with how we handle your account, payment and personal details. This privacy policy shows you exactly...
When you open your account at toman toto, we collect information needed to verify your identity, process deposits via DANA, OVO, GoPay and QRIS, and deliver our casino, slots and sportsbook services in supported Indonesian regions. We store account history, transaction records, gaming preferences and any communications you send us. This data is encrypted and held on servers designed to meet international
security standards. Your payment details remain tokenised — we don't store full card or wallet credentials on our platform. We use your information to prevent fraud, resolve disputes, personalise your lobby experience, and comply with local regulations where applicable.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Contact our data team at [email protected] with any privacy questions, data access requests, or concerns about how we handle your account information.
Open your toman toto account and navigate to Settings > Privacy to review what personal data we hold, request corrections, or adjust data collection preferences.
Our support team is available 24/7 via the live chat icon in your account lobby to answer privacy questions, explain our policies, or help with data requests.
All communication between your device and our servers uses TLS 1.2+ encryption. Your DANA, OVO, GoPay and QRIS transactions flow through PCI DSS-certified payment gateways with real-time fraud monitoring.
We do not sell, lease, or share your personal data with marketing brokers, data brokers, or unaffiliated companies. We only share what's required with payment processors and anti-fraud partners.
Our platform undergoes third-party penetration testing and compliance reviews annually to ensure data handling meets current industry standards and Indonesia regulatory expectations.
We retain account data for the life of your membership plus one year for dispute resolution. Transaction records are archived securely according to local financial regulations.
Although we focus on Indonesia, our data practices align with GDPR principles and respect regional privacy frameworks. You retain the right to access, correct, or delete your personal data.
If any data breach occurs, we notify affected players within 48 hours and provide guidance on protecting your account. We maintain cyber liability insurance and incident logs.
Your DANA, OVO, GoPay and QRIS credentials are never stored on our servers; we only hold tokenised references for faster checkout on your next deposit.
Your gaming history, slot preferences and sportsbook markets you browse are not sold to analytics firms or used to build third-party profiles without your consent.
We send account alerts, deposit confirmations and promotional offers only to the email and phone you provided. You can unsubscribe from marketing mail instantly in Account Settings.
If you notice suspicious activity, you can pause withdrawals, reset your password, and trigger a full account audit through our self-service security dashboard.
All chargeback, payment dispute, and problem-account information is kept confidential and never shared with unrelated gaming platforms or external databases.
We use device data only to detect multi-accounting fraud and payment anomalies, not to track you across the web or build detailed behavioural profiles.
You can request a full export of your account data, gaming history and personal information in machine-readable format within 30 days at no cost.
DANA, OVO, GoPay and QRIS transactions use secure token exchange so your actual wallet credentials never appear in our database or audit logs.
Enable two-factor authentication in your settings to add a second layer: SMS or app-based code required for login, password change, or withdrawal requests.
Auto-logout after 30 minutes of inactivity and option to end all active sessions remotely. No one else can browse your account history or initiate transactions from an old device.
Your slot spins, live baccarat hands and sportsbook bets are logged only for your own history and regulatory compliance. They are not shared with game providers as personal behavioural data.
If you report unauthorized activity, our fraud team investigates within 24 hours. We freeze related transactions and reverse unauthorized deposits immediately upon verification.
Every new feature—live tables, slot rooms, sportsbook markets—is reviewed for privacy impact before launch. We minimise data collection and retain only what's necessary.