Account Registration
We ask for your name, email, phone and ID number. We verify ID to prevent fraud but do not store full document images unless legally required in your supported region.
We keep your account details, payment info and gaming activity secure. This policy explains exactly how we collect, use and protect your data when you open an account...
totolotre operates in supported Indonesian regions and complies with local data protection standards where applicable. We collect your name, email, phone number and payment details only to set up your account, process DANA, OVO, GoPay and QRIS transactions, and ensure our sportsbook and live casino run smoothly for you. We never sell your data to third parties. Your account information stays encrypted,
and your gameplay activity is logged securely to prevent fraud and keep your rewards accurate. You have the right to request, correct or delete your personal data at any time by contacting our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Send your privacy inquiry to our data protection team and receive a detailed response within 48 hours. We handle all subject access requests and data deletion requests here.
Chat with our support agents during lobby hours to clarify how your payment details or account data are handled. They can escalate to our privacy officer if needed.
Submit a formal data request through your account settings. Our team will verify your identity and fulfil your request within the timeframe set by local law.
Every session between your browser and our servers uses TLS encryption. Your DANA, OVO, GoPay and QRIS transactions move through secure payment gateways only.
Our security practices are reviewed annually by third-party auditors. We disclose audit findings to players who request them via formal privacy inquiries.
DANA, OVO, GoPay and QRIS partners enforce their own PCI-DSS compliance. We align our vault storage and processing logs to meet those standards across all channels.
Every update to this policy is timestamped and archived. You can see what changed and when. We notify you of material changes at least 30 days before they go live.
We keep your account data for the lifetime of your membership plus one year after closure. Historical payment records stay for seven years to meet regulatory requirements.
If a data breach occurs, we notify affected players within 72 hours, explain what happened, and outline steps you should take to secure your DANA, OVO, GoPay or QRIS accounts.
We ask for your name, email, phone and ID number. We verify ID to prevent fraud but do not store full document images unless legally required in your supported region.
Your DANA, OVO, GoPay and QRIS details are tokenized immediately. We never store full card numbers or wallet credentials on our servers—only payment tokens for recurring transactions.
We use session cookies to keep you logged in and analytical cookies to understand lobby usage. You can disable non-essential cookies anytime in your account privacy settings.
We share your name and transaction history only with payment processors (DANA, OVO, GoPay, QRIS) and fraud-prevention partners. No marketing or data broker access.
If you share a referral link, we track your friend's sign-up but do not disclose personal details to the referrer. Rewards are credited to your account only.
Closing your account does not delete historical records needed for compliance. You can request full data erasure in writing; we comply within 30 days unless legal holds apply.
If you file a chargeback via DANA, OVO, GoPay or QRIS, we retain full transaction details and any supporting messages to resolve the dispute fairly and on time.