Payment Data Handling
Unlike many platforms, we do not store full card numbers or e-wallet credentials. DANA, OVO, GoPay and QRIS tokens are tokenized and encrypted separately.
LEGAL REFERENCE
Your Data Stays Yours
We built 98toto login around your privacy. Every account detail, every transaction through DANA, OVO, GoPay or QRIS, and every session you spend in our live tables or...
Encrypted StorageQRIS ProtectedAccount SecureData TransparentIndonesia Compliant
How We Collect and Use Your Information
When you open an account with 98toto login, we collect your name, email, phone number and payment details to verify your identity and process deposits via DANA, OVO, GoPay or QRIS. We use this information to deliver your lobby access, process withdrawals, detect fraud and comply with local regulations in supported regions. We do not sell your data to third parties. Your
session activity—which games you browse, which tables you join—helps us improve your experience but remains tied only to your account.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
EDITORIAL CLARITY
Why This Policy Matters
Encryption Standard
All payment data—DANA, OVO, GoPay and QRIS transactions—travels through TLS 1.2+ encryption. Your account credentials are hashed and never stored in plain text.
Third-Party Audits
We undergo annual security reviews by independent firms to verify our data handling meets industry standards and local Indonesian compliance requirements.
Transparent Logging
Every access to your account—login, deposit, withdrawal, game session—is logged and available for your review in your account history.
No Data Broker Sales
We do not sell, rent or share your personal information with data brokers, advertisers or marketing firms outside our direct service delivery.
Breach Notification
If a security incident affects your data, we notify you within 48 hours with details of what occurred and steps you should take.
Retention Limits
We keep your account data only as long as your account is active. After closure, we retain transaction records for 7 years per local law, then delete.
PLATFORM COMPARISON
How Our Policy Compares
Session Tracking
We log your game activity for fraud prevention and account security, but do not sell session data to analytics firms or third-party marketers.
Cookie Transparency
Our cookie policy lists every tracking cookie by name and purpose. You can disable non-essential cookies in your browser without losing account access.
Withdrawal of Consent
You can withdraw consent for marketing emails, SMS and push notifications at any time through your account settings or by replying 'STOP' to any message.
Data Portability
Request your data in machine-readable format (CSV or JSON) and we'll deliver it within 14 days so you can move it to another platform if you choose.
Child Protection
We do not knowingly collect data from anyone under 18. If we discover a minor account, we suspend it immediately and delete associated personal data.
Dispute Resolution
Privacy disputes are handled first through our support team, then escalated to an independent ombudsman if you remain unsatisfied.
SERVICE CONTEXT
What This Policy Covers
Account Registration
Your name, email, phone and identity verification details are encrypted...
Transaction Records
Every deposit, withdrawal and bet is logged with timestamp and...
Device & Location
We record your device type, IP address and approximate location...
Communication Logs
Emails, SMS and chat messages between you and our support...
Preference Settings
Your choices about notifications, marketing contact and game recommendations are...
Cookies & Analytics
We use cookies to remember your login, language preference and...
Privacy Policy Questions
We delete your account profile and personal details within 30 days of closure. Transaction records are retained for 7 years to comply with Indonesian financial regulations, then permanently removed.
Yes. Log into your account, go to Settings > Privacy > Download My Data. We'll prepare a CSV file with your profile, transaction history and preferences within 14 days.
We share only your account ID and session token with game providers so they can deliver live tables and slots. We do not share your name, email, phone or payment details.
No. Payment credentials are tokenized by our payment processor and never stored in full on our servers. We keep only a reference token to process future transactions securely.
We notify you within 48 hours with details of what data was affected and steps to protect your account. We also file a report with local authorities where required by law.
You can disable non-essential cookies in your browser settings. Essential cookies (login, security) cannot be disabled without losing account access, but you can turn off analytics and marketing cookies.
Email [email protected] with your concern. If unresolved within 30 days, you can escalate to our independent privacy ombudsman or file a complaint with local Indonesian data protection authorities.