Home
Introduces our lobby, payment rails and game count. Privacy policy link is in the footer.
LEGAL REFERENCE
Your Data. Your Control. Our Commitment.
We built toto22 around your privacy. Every account detail, payment transaction and gaming session stays encrypted and protected. This policy explains exactly how we handle your information across...
Data EncryptedQRIS ProtectedAccount SecurePayment PrivateIndonesia Compliant
What We Collect & Why
When you open your toto22 account, we collect your name, email, phone number and identity details to verify your age and location. Payment information — your DANA, OVO, GoPay or QRIS identifier — is tokenized and never stored in plain text on our servers. We log your gaming activity (bets placed, tables visited, session timestamps) to detect fraud and honour your account
balance. Where local law permits, we may share anonymized gameplay data with our game providers (Pragmatic, Evolution, PG Soft) to improve lobby performance. You can request a full data export or deletion by contacting our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
PLATFORM TRUST SIGNALS
How We Earn Your Trust
SSL Encryption
Every login, payment and bet is encrypted end-to-end. Your session token expires after 30 minutes of inactivity to prevent unauthorized access.
Third-Party Audit
Our data handling practices are reviewed annually by independent security firms. Audit reports are available on request to account holders.
No Selling Data
We never sell your personal information to advertisers or brokers. Payment details stay between you, toto22 and your bank or e-wallet provider.
GDPR Aligned
Although toto22 operates in Indonesia, we follow GDPR principles for data minimization, retention limits and user rights across all regions.
Fraud Detection
We monitor account activity for suspicious logins, unusual bet patterns and payment anomalies. You'll be notified immediately if we flag a concern.
Retention Policy
Account data is kept for 7 years after closure to comply with Indonesian financial regulations. Gaming logs are archived after 2 years.
SIDE BY SIDE
Privacy Across toto22 Pages
Terms of Service
Covers account rules, betting limits and dispute resolution. References this privacy policy for data handling specifics.
Player guidance
Outlines account controls like session limits and self-pause features. Does not duplicate privacy details.
Payment Methods
Details DANA, OVO, GoPay and QRIS integration. Directs users here for encryption and tokenization info.
FAQ
Answers common account and lobby questions. Links to this policy for data access and deletion queries.
Contact Us
Lists support channels and response times. Privacy team email is listed separately for urgent data requests.
Cookie Policy
Explains session cookies, analytics tracking and ad pixels. Complements this policy with technical cookie details.
What Defines Our Privacy Stance
Transparent Logging
We log every login, bet and withdrawal so you can audit your account history. No hidden activity. No surprise charges.
Payment Tokenization
Your DANA, OVO, GoPay and QRIS details are converted to secure tokens. We never see your full account number or PIN.
Two-Factor Auth
Enable 2FA in Settings to add a second verification step at login. SMS or authenticator app — your choice.
Data Portability
Request your full account data in JSON or CSV format. Download it, share it with advisors or migrate it elsewhere.
Deletion on Demand
Close your account and request permanent data deletion. We remove your profile within 30 days, except where law requires retention.
Breach Notification
If we detect unauthorized access to your account, we notify you within 24 hours with steps to secure your profile.
Privacy Policy Questions
We retain your bet logs and session data for 2 years after your last activity. Account profile data (name, email, identity) is kept for 7 years to comply with Indonesian financial regulations. You can request deletion earlier by contacting support.
Yes. Go to Settings > Privacy > Download My Data. We'll email you a JSON file with your profile, payment history, bets and account settings within 48 hours. No charge.
We share anonymized gameplay metrics (total bets, session count, game preferences) with Pragmatic, Evolution and PG Soft to improve lobby performance. Your name, email and payment details are never shared.
Your account is deactivated immediately. Your data is archived for 7 years per Indonesian law. Request permanent deletion and we'll remove your profile within 30 days, except for records required by regulators.
Yes. Payment details are tokenized — converted to encrypted codes — and never stored in plain text. Your bank or e-wallet provider handles the actual transaction. We only see the token and transaction ID.
Open Settings > Security > Enable 2FA. Choose SMS or an authenticator app like Google Authenticator. You'll enter a code every time you log in from a new device.
Contact support immediately via live chat or [email protected]. We'll freeze your account, review login history and help you reset your password. If unauthorized bets were placed, we'll investigate and reverse them.