Reference

How rec toto Handles Your Personal Data

This Privacy Policy explains exactly what personal information rec toto collects when you open an account, make deposits via DANA, OVO, GoPay or QRIS, and interact with our…

Data collected only as neededDANA, OVO, GoPay & QRIS transactions logged securelyNo sale of personal data to third partiesRetention periods clearly definedJakarta & Surabaya accounts covered equally
rec toto How rec toto Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Our Privacy Team

Have a question about how your personal data is handled, or want to request a correction or deletion? Our privacy support team is reachable through three direct channels, seven days a week between 08:00 and 23:00 WIB. We aim to acknowledge every privacy request within 24 hours and resolve it within seven business days. For account-specific data queries, have your registered email address ready to speed up verification.

Team online

Live Chat

Open the chat widget from any page inside your account dashboard. Privacy requests are flagged to our data team immediately, with a written transcript emailed to your registered address.

Email Support

Send your data access or deletion request to our privacy address listed in the account settings page. Include your full registered name so we can verify identity before processing any change.

Account Settings

Many data updates — display name, contact number, communication preferences — can be actioned directly inside your account settings without contacting support, available 24 hours a day.

DATA HANDLING PRACTICES

Six Ways We Protect Your Information

rec toto applies layered technical and operational controls to your personal data from the moment your account is created.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to understand which lobby sections you visit most. You can disable non-essential cookies via the cookie banner shown at first visit; this will not affect your ability to deposit.

Account Security

Your password is stored as a salted hash — we cannot read it ourselves. Two-step verification is available in account settings and we strongly encourage you to activate it, especially if you deposit regularly via DANA or OVO.

Data Retention

Transaction data linked to DANA, OVO, GoPay and QRIS deposits is retained for 12 months from the date of the transaction. Account profile data is held while your account remains active and deleted within 90 days of a verified closure request.

Third-Party Processors

Payment processors handling QRIS and GoPay transactions receive only the minimum data required to complete the transfer. These processors are contractually bound not to use your data for any purpose beyond processing your transaction.

Your Right to Access

You may request a full export of the personal data we hold about you at any time. Submit the request through live chat or email; we will deliver a structured data file to your registered email within seven business days.

Policy Change Notification

When this Privacy Policy changes materially, we will notify you via the email address on your account at least 14 days before the change takes effect. Continued use of your account after that date constitutes acceptance of the revised policy.

Common Questions About Your Privacy on rec toto

The questions below cover what real account holders in Indonesia ask when they want to understand how their personal data is collected, stored and managed. If your question is not answered here, our privacy team is available via live chat from 08:00 to 23:00 WIB every day.

We collect your name, email address, phone number and country of residence at registration. Once you make a deposit via DANA, OVO, GoPay or QRIS, we also store a record of that transaction amount, date and payment method — but never your full payment credentials.

No. We do not sell, rent or trade your personal data to advertisers, data brokers or any unaffiliated third party. Data is shared only with payment processors like QRIS and GoPay strictly to complete your transactions, under confidentiality agreements.

Account profile data is kept while your account is active. Transaction logs tied to DANA, OVO, GoPay and QRIS are retained for 12 months from the transaction date. After a verified account closure, profile data is deleted within 90 days.

Yes. Submit a data access request through live chat or to the privacy email in your account settings. We will send a structured export file to your registered email address within seven business days of verifying your identity.

Contact our privacy team via live chat or email with a deletion request and your registered email address. Where local law permits us to delete data without conflicting retention obligations, we will process the request within seven business days.

We use essential cookies to keep sessions active and optional analytics cookies to improve the lobby layout. You can decline non-essential cookies on the banner shown at your first visit; this does not affect login, deposits or withdrawals.

We will email your registered address at least 14 days before any material change takes effect. The updated policy date is always shown at the top of this page so you can check what version applies to your account at any time.