LEGAL REFERENCE

Your Data. Your Control. Our Commitment.

We built toko123 around your privacy. Every account detail, payment record and gaming session stays encrypted and protected. This policy explains exactly how we handle your information, where...

Data EncryptedQRIS SecureAccount ProtectedPayment PrivateIndonesia Compliant
Explore Games Read FAQ
toko123 Your Data. Your Control. Our Commitment.

What We Collect and Why

When you open an account with toko123, we collect your name, email, phone number and payment details to verify your identity and process transactions. We also track your gaming activity, session logs and account balance to deliver the lobby experience you expect. Your data never leaves our secure servers without your consent. We comply with Indonesian data protection standards and regional privacy

frameworks. Payment information for DANA, OVO, GoPay and QRIS transactions is tokenized and never stored in plain text.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Questions? We're Here.

Email Support Send privacy concerns to our data team. We respond within 24 hours with clear answers about how your information is used and stored.
Account Settings Review and update your personal data anytime. Your account dashboard shows every permission you've granted and lets you revoke access instantly.
Data Request Request a full copy of your account data in machine-readable format. We'll compile and deliver it within 7 business days.
WHY VISITORS TRUST US

How We Earn Your Trust

Third-Party Audit

Our encryption and data handling pass annual security audits by independent firms. Results are available to account holders on request.

No Third-Party Sales

We never sell your gaming history, payment methods or contact details to advertisers, brokers or data brokers. Your information stays yours.

Transparent Logging

Every access to your account is logged with timestamp and purpose. You can review the full audit trail in your security settings.

Encryption Standard

All data in transit and at rest uses AES-256 encryption. Payment tokens are rotated every 90 days to prevent replay attacks.

GDPR-Aligned Practices

Although toko123 operates in Indonesia, we follow GDPR principles for data minimization, retention limits and user rights.

Incident Response Plan

If a breach occurs, we notify affected users within 48 hours with details, remediation steps and free credit monitoring where applicable.

Privacy Across Our Platform

Live Casino TablesYour table session data is encrypted end-to-end. Dealer feeds and chat logs are retained for 90 days for dispute resolution only.
Slot LobbiesSpin history and RNG seeds are logged for fairness verification. You can download your complete slot session report anytime.
Sportsbook MarketsBet slips and odds snapshots are archived for 12 months. Your betting patterns are never shared with odds providers or syndicates.
Account BalanceReal-time balance updates are encrypted. Transaction history is immutable and timestamped for your protection and ours.
Payment MethodsDANA, OVO, GoPay and QRIS tokens are stored separately from your account profile. Withdrawal requests trigger re-verification.
Device & LocationWe log your IP, device type and login location to detect unauthorized access. You can whitelist trusted devices to skip re-auth.
Communication PreferencesEmail, SMS and in-app notifications respect your choices. Unsubscribe from any channel without losing account access or promotions.
AT A GLANCE

What Defines Our Privacy Approach

01
Zero-Knowledge Architecture Our servers never see your DANA, OVO, GoPay or QRIS credentials. Payment gateways handle tokenization; we store only encrypted references.
02
Retention Limits Account data is purged 24 months after closure. Session logs expire after 90 days unless you request archival for personal records.
03
Consent-First Design We ask before collecting location, device fingerprints or behavioral analytics. Every permission is revocable from your settings panel.
04
Indonesia-First Compliance Our data centers are hosted in Indonesia where local law permits. Cross-border transfers require explicit user consent and legal basis.
05
User Rights Portal Access, correct, delete or port your data through a dedicated dashboard. No forms, no waiting—changes take effect immediately.
06
Privacy by Default Your account launches with the strictest privacy settings enabled. Relaxing them is optional; we never push you toward data sharing.

Privacy Policy Questions Answered

Session logs and bet slips are retained for 90 days for dispute resolution and fairness audits. After that, they're deleted. Account balance history stays for 12 months for tax and reconciliation purposes. You can request deletion anytime.

Yes. Go to Account Settings > Privacy > Data Export and request a full copy in CSV or JSON format. We'll compile and email it within 7 business days. The file includes account details, transaction history, gaming logs and communication records.

We share only tokenized payment references with DANA, OVO, GoPay and QRIS processors—never your full card or wallet credentials. These providers see transaction amounts and timestamps only. They're bound by their own privacy agreements.

Your account data is anonymized immediately. Identifiable information is deleted within 24 months. We retain anonymized gaming statistics for platform analytics only. You can request immediate deletion of all data by contacting our privacy team.

All data is encrypted with AES-256. We run monthly penetration tests and annual third-party audits. If a breach occurs, we notify you within 48 hours with details and remediation steps. We also offer free credit monitoring for affected users.

Yes. Disable analytics in Account Settings > Privacy > Tracking Preferences. This stops behavioral tracking and device fingerprinting. You'll still receive essential security alerts and transaction confirmations—those can't be disabled.

We log your IP and device location for security purposes only—to detect unauthorized access and prevent fraud. You can whitelist trusted devices to skip location re-verification. Location data is deleted after 90 days unless a dispute is open.