Reference

How we keep your account safe

When you open an account at link dafatoto, your personal information and payment details are encrypted and stored securely.

Encrypted account accessLocal payment securityYour data control rights
link dafatoto How we keep your account safe
PRIVACY QUESTIONS

Contact us about your privacy

You have the right to ask us what data we hold about you, request corrections, or ask us to delete your information. Our support team is available through multiple channels to help you exercise these rights and answer any questions about how we handle your privacy.

Team online

Email Support

Send privacy requests and data inquiries to our dedicated support inbox. We respond to all privacy requests within five business days.

Live Chat

Open the chat widget in your account dashboard during support hours. Our team can walk you through your privacy options and data requests immediately.

Account Settings

Update your contact information, review login history and manage cookie preferences directly from your account dashboard without contacting support.

DATA PRACTICES

How we handle your information

Our privacy system is built on three principles: collect only what we need, keep it secure, and let you control it.

Account Verification

We confirm your identity using your email, phone number and payment method to prevent fraud. Withdrawals trigger an additional security check via your registered DANA, OVO, GoPay or QRIS account.

Payment Data Security

Deposit and withdrawal details are encrypted end-to-end. We never store full card or bank details — only a token that lets us process your next transaction securely.

Session Logging

We record your login times, device type and IP address to detect unusual account activity. If we spot a login from a new city or device, we alert you immediately.

Data Retention

We keep your account data active for as long as you play with us. After account closure, we retain anonymised transaction records for regulatory periods where local law permits.

Third-Party Sharing

We share your data only with payment processors, fraud-detection services and legal authorities when required by law. We do not sell your information to advertisers or marketing firms.

Your Privacy Rights

You can request a copy of your data, correct information, delete your account, or opt out of marketing emails. Email support or use your account settings to start a privacy request.

Privacy policy questions answered

Your account and personal information are deactivated immediately. We retain transaction records for the legal retention period to comply with anti-money-laundering rules. After that period, your data is securely deleted. You can request full data deletion sooner by contacting our support team.

Yes. Open your Account Settings, go to Payment Methods, and you'll see the last four digits of each DANA, OVO, GoPay or QRIS account you've used. We do not display full account numbers for security. Contact support if you need a full data export for your records.

Passwords are hashed using industry-standard encryption the moment you set them. We never store your actual password — not even our team can see it. If you forget it, we send a reset link to your email so you can create a new one securely.

We use cookies to remember your lobby preferences, keep you logged in, and track which games you've played. You can disable non-essential cookies in your account dashboard or through your browser settings. Essential cookies (login, security) cannot be turned off without breaking your account access.

We send account and security updates by default. Marketing emails (game releases, promo updates) are optional — you can unsubscribe from the link in any email or toggle them off in your Account Settings under Communication Preferences.

Change your password immediately and contact our support team via live chat or email. We'll review your login history, disable any suspicious sessions, and help you re-secure your account. If funds were withdrawn, we investigate and may reverse fraudulent transactions.

We process data deletion requests within ten business days. We'll send you a confirmation email when your deletion is complete. Transaction records required by law are retained separately and anonymised, not linked to your personal identity.