LEGAL REFERENCE

Your Data Stays Yours

We built bawang toto around Indonesia's payment rails and your account security. This privacy policy explains how we collect, use and protect your information across live tables, slot...

Data ProtectionPayment SecurityAccount PrivacyTransparent PracticesIndonesia-Compliant
Tour the Lobby Read FAQ
bawang toto Your Data Stays Yours

What We Collect and Why

When you open an account with bawang toto, we collect your name, email, phone number and payment details to verify your identity and process transactions through DANA, OVO, GoPay and QRIS. We also track your gaming activity, session history and account balance to deliver the lobby experience you expect. We do not sell your data to third parties. Where local law permits,

we retain account records for compliance and dispute resolution. Your information stays encrypted and accessible only to authorised team members.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Privacy Questions? Reach Out

Email Support Send privacy concerns to our data team at...
Live Chat Open the chat widget in your account dashboard...
Account Settings Manage your privacy preferences directly in your account...
EDITORIAL CLARITY

How We Earn Your Trust

Encryption Standard

All payment data and account credentials use TLS 1.3 encryption. Your DANA, OVO, GoPay and QRIS transactions are isolated in secure vaults separate from gaming records.

Third-Party Audit

We commission annual security audits from independent firms to verify data handling practices. Audit summaries are available to account holders upon request.

Compliance Framework

bawang toto operates under Indonesia's data protection guidelines and payment processor standards. We align with regional regulations for supported markets.

Data Minimisation

We collect only what's needed to run your account and process payments. We do not track your browser history, location data or device identifiers beyond session management.

Breach Protocol

If a security incident affects your account, we notify you within 24 hours with details and next steps. We maintain incident logs and share findings with relevant authorities.

Retention Policy

Account data is kept for the duration of your membership plus 12 months after closure for compliance. You can request deletion of non-essential records anytime.

Consistency Across Our Policies

Terms of ServiceOur terms outline account rules and gameplay conduct. Privacy policy focuses on data handling; terms cover account suspension and dispute resolution.
Payment PolicyPayment policy details DANA, OVO, GoPay and QRIS transaction flows. Privacy policy explains how we store and protect payment credentials during those transactions.
Cookie PolicyCookies track your session and preferences on bawang toto. Privacy policy explains why we use them; cookie policy lists each cookie and its purpose.
Affiliate DisclosureIf you refer friends to bawang toto, affiliate data is covered under this privacy policy. We do not share your referral list with third parties.
Marketing PreferencesYou control email and SMS frequency in account settings. Privacy policy governs how we use your contact details; marketing preferences let you opt out of specific channels.
API & IntegrationIf you connect third-party tools to your bawang toto account, this policy covers data shared with those integrations. You approve each connection before it activates.
Account ClosureWhen you close your account, we delete personal data within 30 days except where law requires retention. Privacy policy explains the closure process and data timeline.
QUICK SIGNAL

What Defines Our Privacy Approach

01
Indonesia-First Design We built bawang toto around DANA, OVO, GoPay and QRIS from day one. Your payment method is never sold or shared; it stays between you and the processor.
02
Session Isolation Your live casino tables, slot lobbies and sportsbook activity are logged separately. We do not cross-reference gaming data with payment records for marketing purposes.
03
Account Transparency Download a full copy of your account data anytime. See every login, transaction, game session and preference we hold. No hidden records or shadow profiles.
04
Vendor Accountability Our game providers, payment processors and hosting partners sign strict data-handling agreements. We audit them annually and hold them to the same privacy standards.
05
Dispute Resolution If you believe your data was misused, we investigate within 14 days. You can escalate to Indonesia's data authority if our response does not resolve your concern.
06
No Profiling We do not build psychological profiles or sell your gaming habits to advertisers. Your account data is used only to run your lobby and process your payments.

Privacy Policy Questions

We delete personal data within 30 days of closure. Payment records and gaming history are retained for 12 months where local law requires it, then purged. You can request earlier deletion of non-essential records.

Yes. Go to Account Settings > Privacy > Download My Data. You'll receive a complete export of your profile, transactions, game sessions and preferences within 7 business days in a standard format.

No. Your payment credentials are processed only by the payment provider you choose. We never store full card or wallet numbers and never share them with game providers, advertisers or third parties.

We notify you within 24 hours with details of what was accessed and steps to secure your account. We file incident reports with Indonesia's data authority and provide free credit monitoring if payment data was exposed.

We use it to personalise your lobby, detect fraud and comply with regulations. We do not sell it to advertisers or use it to build psychological profiles. You can opt out of personalisation in Account Settings.

You can close your account instantly. Personal data is deleted within 30 days. Payment and gaming records are kept for 12 months for compliance, then deleted. Expedited deletion of non-essential records is available on request.

Only authorised support staff and fraud-prevention teams can view your data, and only when needed to resolve your issue. All access is logged and audited. You can request an access log anytime from [email protected].