Reference

How toto28 Handles Your Personal Information

When you open an account with us, you share information we take seriously — your name, contact details, and the payment methods you use, whether that's DANA, OVO, or GoPay.

Account data kept secureDANA, OVO, GoPay transaction data handled with careYou can request your data at any timeCookies explained clearlyContact us to update or remove information
toto28 How toto28 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you want to access, correct, or delete the data we hold on your account, contact our support team directly. We will confirm receipt and respond within the timeframe required by applicable rules. Use any of the channels below and reference your registered account email so we can verify your identity before making any changes.

Team online

Live Chat

Open the live chat widget from your account dashboard. Available for data access requests, correction queries, and deletion requests on your registered account.

Email Support

Send your data request to our support email address shown in the account help section. Include your registered email so our team can verify the request.

Account Help Centre

Visit the Help Centre from your account settings page to find the data request form. Submit the form and we will confirm receipt with a reference number.

HOW WE PROTECT DATA

Data Handling, Cookies and Account Security

We use a combination of technical and access controls to protect what you share with us. Your account session is encrypted, and any payment details passed through DANA, OVO, or GoPay are handled via the respective e-wallet provider's own secure channel — we never receive your wallet credentials directly. Here is how each key area works in practice.

Cookies and Tracking We use session cookies to keep you logged in and analytics cookies to understand how the lobby pages are used. You can adjust cookie preferences from your browser settings at any time.
Data Retention We keep your account data for as long as your account is active and for the period required by applicable law after closure. Inactive accounts are reviewed on a regular schedule.
Account Security Login to your account uses OTP verification sent to your registered phone number. If we detect a login from an unfamiliar device or IP, we may prompt an additional verification step before granting access.
Requesting Changes To update your registered email, phone number, or request deletion, contact support via live chat or email. We verify your identity first, then process the change within the applicable timeframe.

Common Questions About Your Privacy on toto28

These are the data and privacy questions we hear most often. If your question is not covered here, reach out through live chat or the account Help Centre and our team will walk you through it.

We collect your name, email address, phone number, and date of birth. If you deposit via DANA, OVO, or GoPay, we also record the transaction reference to match the payment to your account.

Yes. Submit a data access request through the Help Centre or by emailing support with your registered account email. We will verify your identity and provide the relevant data within the required timeframe.

We share data only where required by applicable law or where necessary to process your payment through your chosen e-wallet provider. We do not sell personal data to any third party.

We use session cookies to maintain your login and analytics cookies to see how pages are used. You can block or delete cookies via your browser settings, though some account functions may be affected.

We retain account data for the period required by applicable law following account closure. After that retention period, your data is deleted or anonymised in line with our internal data schedule.

Contact our support team via live chat or email and request deletion. We verify your identity first. Deletion is processed within the timeframe applicable under local law for supported Indonesia regions.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.