Your Data Stays Yours
We built 98 toto around your privacy. Every account, every transaction through DANA, OVO, GoPay or QRIS, and every session in our live casino or slot lobbies is...
How We Collect and Use Your Data
When you open an account with 98 toto, we collect your name, email, phone number and payment details to verify your identity and process deposits via DANA, OVO, GoPay or QRIS. We use this information to deliver your lobby access, manage your account balance, send transaction confirmations and comply with local regulations in supported regions. We do not sell your data to
third parties. Your information is stored on secure servers with restricted employee access and is retained only as long as your account remains active or as required by law.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Questions? Reach Out
Email Support
Send privacy concerns to our data protection team at [email protected]. We respond within 48 hours and can help with data access requests, corrections or account deletion.
Live Chat
Open the chat widget in your account dashboard to ask about how your QRIS, DANA, OVO or GoPay transactions are protected. Our team is available 24/7 to clarify our privacy practices.
Account Settings
Review and update your personal information, communication preferences and payment method details directly in your account settings. Changes take effect immediately.
Privacy Standards We Follow
Data Encryption
All data in transit and at rest uses TLS 1.3 and AES-256 encryption. Your QRIS, DANA, OVO and GoPay payment details are tokenized and never stored in plain text on our servers.
Access Controls
Only authorized staff with verified roles can access your account information. We audit access logs monthly and revoke permissions immediately when employees leave.
Third-Party Audits
We commission annual security audits from independent firms to verify encryption, access controls and data handling. Reports are available to regulators in supported regions.
Incident Response
If a breach occurs, we notify affected users within 72 hours and provide guidance on account protection. We maintain cyber insurance and work with law enforcement where required.
Compliance Framework
Our privacy practices align with data protection standards in Indonesia and other supported regions. We update our policy annually to reflect regulatory changes.
User Rights
You can request a copy of your data, correct inaccuracies, or ask us to delete your account. Submit requests via email or account settings; we process them within 30 days.
Consistency Across Our Brand
| Same Encryption Standard | Whether you're on our live casino tables, slot lobbies or sportsbook, your session uses the same TLS 1.3 encryption. No variation by game type or device. |
|---|---|
| Unified Payment Security | QRIS, DANA, OVO and GoPay transactions follow identical tokenization and fraud-detection rules across all 98 toto properties and partner sites. |
| Single Privacy Team | One data protection officer oversees all 98 toto domains. Policy updates roll out simultaneously so you get consistent privacy rules everywhere. |
| Shared Audit Schedule | Annual security audits cover all 98 toto platforms at once. Results inform improvements across live dealers, slots and sportsbook simultaneously. |
| Coordinated Incident Response | If a breach affects one 98 toto property, all users across our brand are notified together. We don't stagger communications by platform. |
| Aligned Retention Policy | Account data, transaction logs and session records are kept for the same duration across all 98 toto services. No hidden longer retention on specific games. |
| Transparent Data Requests | When regulators request user data, we log the request and notify you unless legally prohibited. This applies uniformly across all 98 toto domains. |