Privacy & Data – Your Questions Answered
We collect your full name, date of birth, email, phone number, home address, and identity document number for account verification. Players in Yogyakarta and Jakarta provide the same details. When you add a payment method, we also collect your DANA, OVO, GoPay or QRIS account identifier and bank details for withdrawal processing.
We retain your account records for seven years after closure where local law permits, to meet anti-money-laundering and tax obligations. Transaction logs and activity history stay for five years. Personal identification documents are deleted after five years. You may request earlier deletion of non-critical data by contacting support.
Yes. Go to Account > Privacy & Data in the lobby and select 'Export My Data'. We compile your profile, transaction history, payment methods, and activity logs into a file within five business days. Alternatively, email our support team with your request and your account username.
We do not sell your data to marketers or advertisers. We share information only with payment processors (DANA, OVO, GoPay, QRIS), fraud-prevention partners, and legal advisors when required by local law. All third parties sign confidentiality agreements and are prohibited from using your data for other purposes.
Payment credentials are never stored on our servers. Deposits are processed through encrypted tokens so toto238 only sees a reference code, not your actual account number. DANA, OVO, GoPay and QRIS handle the real transaction on their secure networks. Withdrawals reverse the flow — we send funds directly to your verified account.
Change your password immediately and enable two-factor authentication in Account > Security. Contact our live chat or email support with details of the suspected breach. We log all account access attempts and can review login history for unauthorized activity. We may suspend your account while investigating where local law permits.
Go to Account > Profile to update your email, phone number, and address. Account name and date of birth cannot be changed once verified because they are tied to your identity document. To request deletion of non-essential data or close your account entirely, email support with your username and reason.