goltotoPrivacy Policy

This page describes what we collect when you use goltoto and how we keep that data protected. We at goltoto handle your personal information—name, email, phone, government ID, and payment details—with encryption and restricted access. Your data is used only to verify your account, process deposits and withdrawals, and comply with financial regulations. We do not sell, share, or repurpose your information.

We at goltoto operate across multiple regions, including Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta. Some of our servers and payment processors sit outside Indonesia. By using goltoto, you consent to data processing under this policy. If you do not agree, do not use our platform.

Read this page carefully to understand our data practices, your rights, and how to contact us if you have concerns.

Data We Collect on goltoto

We at goltoto collect different types of data depending on what you do on our platform:

Account information: Full name, date of birth, email address, phone number, residential address (for KYC verification).
Identity documents: Government-issued ID (KTP, passport, or equivalent) uploaded during account verification.
Payment details: Bank account numbers, e-wallet identifiers, QRIS codes, and transaction history for e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and mobile banking deposits and withdrawals.
Betting and game activity: Bets placed, games played, outcomes, balance changes, and withdrawal requests.
Device and network data: IP address, device type, browser type, operating system, and approximate location (for fraud detection and security).
Communication: Support tickets, emails, and in-app messages you send to our support team.

We do not collect sensitive data beyond what is necessary for account verification and payment processing. We do not use facial recognition, biometric scanning, or continuous location tracking on goltoto.

Note: We at goltoto collect data automatically through cookies and server logs. You can manage cookie preferences in your browser settings, though some cookies are necessary for goltoto to function.

How We Use Your Data on goltoto

We at goltoto use your data for these purposes:

Account verification: We verify your identity by comparing your ID document against your provided name and date of birth. This is mandatory and required by Indonesian financial regulations.
Payment processing: We send your payment details to our processors (e-wallet operators and banks) to deposit and withdraw funds. We do not store full credit-card numbers or bank passwords.
Fraud and compliance: We analyse your account activity to detect suspicious patterns, money laundering, or account takeovers. If we flag activity as fraudulent, we may freeze your account and request additional documents.
Customer support: We use your communication history to resolve disputes, answer questions, and improve our support service.
Service improvement: We analyse aggregated, non-identifiable data to improve goltoto's features, security, and user experience.
Legal obligation: We retain and disclose data if required by law enforcement, tax authorities, or regulatory bodies in any jurisdiction where we operate.

We do not use your data for marketing

We at goltoto will not email, call, or message you with promotional offers unless you explicitly opt in. You can manage your communication preferences in your goltoto account settings anytime.

Data Retention on goltoto

We at goltoto retain your data for as long as your account is active, plus an additional retention window for regulatory and dispute-resolution purposes. After account closure:

Account information: Retained for 7 years to comply with Indonesian financial recordkeeping rules.
ID documents: Deleted after 2 years unless we are under investigation or legal obligation to retain them.
Payment records: Retained for 7 years for tax and anti-money-laundering compliance.
Support tickets: Retained for 2 years for dispute resolution, then archived or deleted.

If you request account deletion during the active period, we will anonymise your personal identifiers but retain transaction records as required by law. We cannot fully delete your data if it relates to an ongoing dispute or legal matter.

Third-Party Data Processing on goltoto

We at goltoto share your data with external partners only when necessary to provide our service:

Payment processors: We share your payment details with local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and online payment to process deposits and withdrawals. These partners have their own privacy policies.
Game providers: We share your account ID (not your personal details) with live-dealer studios and slot-game providers so they can credit your winnings.
Fraud and security services: We may share your IP address and device data with third-party fraud-detection services to prevent account takeovers and money laundering.
Cloud storage: Our servers may be hosted on cloud infrastructure outside Indonesia. Data is encrypted in transit and at rest.

We do not sell your data to marketers, advertisers, or data brokers. We require all third parties to sign data-protection agreements and limit their use of your information to the specific service they provide.

Security Measures on goltoto

We at goltoto employ industry-standard security practices:

SSL encryption: All communication between your device and goltoto servers is encrypted with TLS 1.2 or higher.
Password storage: Your password is never stored in plain text. We use industry-standard hashing algorithms.
Two-factor authentication: You can enable two-factor authentication (2FA) on your goltoto account for additional security.
Access controls: Only authorised goltoto staff can access your personal data, and access is logged and monitored.
Breach notification: If we detect a data breach affecting your account, we will notify you within 48 hours and explain what happened.

No security system is perfect. We at goltoto cannot guarantee that your data will never be compromised. However, we take reasonable precautions and review our security practices regularly.

Your Rights Regarding Your Data on goltoto

You have the right to:

Access: Request a copy of all personal data we hold about you on goltoto. Contact our support team with your request.
Correction: Ask us to update or correct inaccurate information in your goltoto account.
Deletion: Request deletion of your account and associated data, subject to our retention obligations.
Portability: Ask for your data in a portable format so you can transfer it to another service.
Objection: Opt out of certain data uses (e.g., fraud monitoring does not apply; KYC verification is mandatory for account operation).

To exercise any of these rights, email our support team or use the data-request form in your goltoto account settings. We will respond within 30 days. Some requests may take longer if they require extensive review.

Cookies and Tracking on goltoto

We at goltoto use cookies and similar tracking technologies to:

Session management: Keep you logged into goltoto.
Security: Detect suspicious login attempts and fraud.
Analytics: Understand how users interact with goltoto (page views, feature usage, etc.).
Preferences: Remember your display currency, language, and notification settings.

Most browsers allow you to disable cookies. If you disable cookies on goltoto, some features may not work correctly (e.g., you may be logged out frequently). We do not use third-party advertising cookies unless you explicitly consent.

Contact Us About Privacy on goltoto

If you have questions about this privacy policy, how we use your data, or how to exercise your rights on goltoto, contact our support team:

Email: our support email address is available in the goltoto app and on this website.
In-app chat: Use the Help section in your goltoto account.
Mailing address: Our registered office address is available in our legal notice

We aim to respond to privacy inquiries within 30 days. If you are unsatisfied with our response, you may file a complaint with the Indonesian data-protection authority or a consumer-protection agency in your jurisdiction.

Changes to This Policy

We at goltoto may update this privacy policy at any time. We will notify you of material changes by email or by posting a notice in the goltoto app. Continued use of goltoto after a change constitutes acceptance of the updated policy.

Summary of Our Privacy Practices

We at goltoto collect only what is necessary: account information, ID documents for verification, and payment details. We use this data to verify accounts, process payments, prevent fraud, and comply with law. We do not sell or market your data. We protect it with encryption, limited access, and regular security reviews. You have the right to access, correct, and request deletion of your data (subject to retention obligations). If you have concerns, contact our support team.

Our privacy commitment is straightforward: we respect your data, we protect it, and we use it only for the service you signed up for on goltoto. We recognise that your trust is essential, and we take that responsibility seriously.

For more details on your rights and legal obligations when using goltoto, consult our Terms of Use and legal noticeIf you have urgent privacy concerns, reach out to our support team immediately.