LEGAL REFERENCE

Your privacy and data protection matter

Q: What happens if I want to delete my account and all my data?

Submit a deletion request via the Help Centre or email privacy@carteltoto.app. We'll verify your identity, process any pending payouts to your registered payment method, then permanently delete all personal data within two weeks.

At carteltoto, we handle your account details, payment history and personal information with security at the centre. This privacy policy shows exactly what we collect, how we use...

Data SecurityPayment PrivacyAccount ProtectionTransparencyIndonesia Compliant

View Game Library Read FAQ

Our privacy posture and what we protect

carteltoto collects information you provide during account registration, deposit and gameplay to deliver the platform securely. We protect payment details tied to DANA, OVO, GoPay and QRIS transactions with encryption standards. Your data is stored in secure facilities and shared only where necessary for payment processing, fraud prevention and legal compliance in supported regions. We do not sell personal data to third

parties. You retain rights to access, correct and request deletion of your information under applicable data protection law.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Privacy questions? Here's how to reach us

PLATFORM TRUST SIGNALS

How we earn privacy trust

Encryption Standard

All account logins, payment transactions and personal data transit through TLS 1.2+ encryption. Stored data is encrypted at rest on redundant secure servers.

Fraud Prevention Layer

We monitor account access patterns and payment flows to detect unauthorized activity. Alerts notify you immediately if unusual behaviour is spotted on your account.

Payment Processor Alignment

DANA, OVO, GoPay and QRIS transactions follow each provider's privacy and security mandates. We never store full payment credentials on our systems.

Cookie Transparency

We use cookies only for session management, performance tracking and fraud detection. You can manage cookie preferences anytime in your account settings.

Third-Party Audit Ready

Our infrastructure meets industry-standard security benchmarks. We share audit reports with regulators and support independent privacy assessments when requested.

Data Retention Policy

Account and transaction data is kept only as long as needed for operations and legal compliance. After closure, personal data is securely deleted within defined timeframes.

Consistency across our policy pages

Privacy Policy

You're reading this now. Covers data collection, storage, use and your rights to access or delete personal information held by carteltoto.

Terms of Service

Outlines your account responsibilities, prohibited behaviour, dispute resolution and our right to modify services. Complements privacy rules with account conduct.

Cookie Policy

Details what cookies we use, why, and how long they persist. Let you manage tracking preferences without breaking core platform functionality.

Responsible Use Statement

Explains age verification, account limits and resources if your gaming needs support. Separate from privacy but linked to account safety framework.

Payment Security Guide

Covers DANA, OVO, GoPay and QRIS fraud prevention, dispute handling and transaction visibility. Reinforces privacy rules specific to payment data.

Affiliate & Partner Privacy

If you refer others or partner with us, this addendum clarifies how we handle affiliate data, commissions and shared analytics within privacy guardrails.

Mobile App Privacy Addendum

Specific to mobile devices: how we access device permissions, location data (if any) and push notification preferences. Extends main policy to app-only scenarios.

What defines our privacy framework

Zero Payment Data Storage

We never store your full card, DANA wallet ID, OVO or GoPay credentials. Tokenized references only, held by payment processors under their own security standards.

Account Activity Visibility

Your transaction history, login timestamps and device activity are visible inside your account dashboard. You control what devices have active sessions.

Withdrawal & Closure Rights

Request account closure anytime. Pending balances are withdrawn to your original payment method within stated timelines. All personal data deleted shortly after.

QRIS Transaction Privacy

QRIS payments route through official banking networks. carteltoto never sees raw transaction details; we receive only confirmation and reference codes for reconciliation.

Opt-Out for Marketing

Unsubscribe from promotional emails and SMS anytime via your notification settings. We respect your preference immediately without affecting account access or payouts.

Data Portability

Request a complete export of your account data in standard format. We'll provide your profile, transaction history and preferences within ten business days.

Privacy questions answered

We collect your name, email, phone number, account address and date of birth during registration. During gameplay and payment, we also log transaction amounts, timestamps, device details and IP addresses for security and fraud prevention across DANA, OVO, GoPay and QRIS channels.

Personal data is retained for six months post-closure to fulfil payment reconciliation and legal compliance obligations. After that period, all data is securely deleted. Transaction records linked to regulatory reporting are kept longer where local law requires it.

Yes. Open your account settings and select 'My Data' or email our privacy team to request a complete data export. We'll send a structured file containing all personal information, transactions and settings we've recorded. Response typically arrives within ten business days.

No. We share only transaction confirmations with payment processors for settlement. Your wallet IDs and credentials remain encrypted and never transmitted externally. Payment providers handle their own security under their privacy policies.

We monitor login patterns, device fingerprints and transaction anomalies in real-time. Unusual activity triggers alerts sent to your registered email or phone. You can revoke device sessions manually. All account data and payments are encrypted end-to-end.

Submit a deletion request via the Help Centre or email [email protected]. We'll verify your identity, process any pending payouts to your registered payment method, then permanently delete all personal data within two weeks.

We use essential cookies for login sessions, security tokens and fraud detection. Optional analytics cookies help us improve site performance. You can disable non-essential cookies in your browser settings or our cookie preferences panel without losing core platform access.