LEGAL REFERENCE

Your Data. Our Responsibility.

We built totowin88 around your account security and privacy. Every deposit through DANA, OVO, GoPay or QRIS, every game session, and every withdrawal is protected by encryption and...

Data EncryptedQRIS ProtectedAccount SecurePayment SafeYour Control
Tour the Lobby Read FAQ
totowin88 Your Data. Our Responsibility.

Privacy Policy Overview

totowin88 collects account information, payment details, and gaming activity to deliver your lobby experience, process withdrawals, and comply with local regulations in supported regions. We do not sell your data to third parties. Your DANA, OVO, GoPay and QRIS transactions are encrypted end-to-end. We retain account records for the duration of your membership and as required by law. Access to your personal

information is restricted to authorised staff and trusted payment processors. You can request a data export or account deletion by contacting our support team.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Questions? Reach Out.

Team online

Email Support

Send privacy concerns to our data protection team. We respond within 48 hours with clarification on how your information is used and stored.

Live Chat

Chat with our support agents during lobby hours. They can walk you through data access requests, deletion options, and account security settings.

Account Settings

Manage your privacy preferences directly in your account dashboard. Update contact details, review login history, and adjust notification settings anytime.

WHY THIS PLATFORM

Privacy Standards We Follow

Encryption Standard

All account logins and payment transactions use TLS 1.2 encryption. Your DANA, OVO, GoPay and QRIS details never travel unencrypted across our network.

Data Minimisation

We collect only the information needed to run your account, process payouts, and meet local compliance rules. No unnecessary tracking or profiling occurs.

Access Control

Staff access to personal data is logged and audited. Only authorised teams see payment information or account details for legitimate operational reasons.

Retention Policy

Account records are kept for the duration of your membership plus seven years for regulatory compliance. Deleted accounts are purged from active systems within 30 days.

Third-Party Processors

Payment processors handling DANA, OVO, GoPay and QRIS transactions sign data protection agreements. We audit their security practices annually.

Incident Response

If a data breach occurs, we notify affected users within 72 hours and provide guidance on account security steps. Our incident team works with local authorities.

How Our Policy Stands

No Data SalesUnlike some platforms, we never sell your gaming history, payment patterns, or contact details to advertisers or data brokers.
Transparent LoggingEvery staff access to your account is timestamped and logged. You can request an audit trail of who viewed your data and when.
Local ComplianceWe follow privacy rules for supported Indonesian regions. Your rights under local law are respected in full.
Payment SecurityDANA, OVO, GoPay and QRIS transactions are tokenised. We never store full payment credentials on our servers.
User RightsYou can access, correct, export, or delete your data anytime. We process requests within 14 days or explain any legal delays.
Cookie ClarityWe use cookies only for session management and fraud prevention. No third-party tracking cookies follow you across the web.
Policy UpdatesChanges to this policy are announced 30 days in advance. You can opt out of non-essential updates by adjusting account preferences.
AT A GLANCE

What Protects Your Account

Two-Factor Authentication Enable 2FA in your account settings to add a second...
Session Timeout Inactive sessions expire after 30 minutes. This prevents unauthorised access...
Device Recognition We track login locations and devices. Unusual activity triggers a...
Withdrawal Verification Large withdrawals to new DANA, OVO, GoPay or QRIS accounts...
Password Strength Your password must meet complexity rules: uppercase, lowercase, numbers and...
Privacy Dashboard View all connected devices, recent logins, and payment methods in...

Privacy Policy Questions

We retain your account records for seven years to comply with local financial regulations in supported regions. After that period, your data is permanently deleted from our systems. You can request early deletion for non-regulatory data within 30 days of closure.

Yes. Log into your account and visit the Privacy section of your dashboard. You can download a complete data export including your profile, transaction history, and login records. Exports are generated within 14 days.

No. Payment details are tokenised and processed by our payment partners. We store only a reference token, not your actual card or wallet credentials. This keeps your payment information secure even if our systems were compromised.

Only authorised support staff and fraud-prevention teams can view your data, and only when necessary to resolve your issue or prevent fraud. All access is logged and audited. You can request an access log anytime from our support team.

We notify all affected users within 72 hours with details of what was compromised and steps you should take. We work with local authorities and provide free credit monitoring if financial data was exposed. Our incident response team investigates immediately.

Yes. In your account settings, toggle off promotional emails and push notifications. You'll still receive essential messages about account security, withdrawals, and policy changes. Opt-out requests take effect within 24 hours.

No. We use cookies only for your session on totowin88 and to prevent fraud. We do not place tracking pixels or third-party cookies that follow you to other sites. Your browsing outside our platform remains private.