LEGAL REFERENCE

Your Data. Your Control. Our Commitment.

We built aman toto around your privacy. Every account detail, payment transaction and gaming session stays encrypted and protected. This policy explains exactly how we handle your information...

Data EncryptedQRIS SecureAccount ProtectedPayment SafeIndonesia Compliant
aman toto Your Data. Your Control. Our Commitment.

How We Protect Your Information

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Privacy Questions? We're Here.

Email Support Send privacy concerns to our dedicated team. We respond within 24 hours with clear answers about how your data flows through our platform.
Account Settings Review and update your personal information anytime. Your privacy controls live in the security section of your aman toto account dashboard.
Legal Team For formal data requests or regulatory questions, our legal department handles all compliance inquiries with full transparency and documentation.
REVIEW SIGNALS

Why This Policy Matters to You

Encryption Standard

Every transaction—whether QRIS, DANA, OVO or GoPay—travels through 256-bit SSL encryption. Your payment details never touch unprotected channels.

No Third-Party Sales

We don't sell your gaming history, account balance or payment method to advertisers, data brokers or external platforms. Your lobby stays yours.

Indonesia-First Compliance

Our policy aligns with Indonesian data protection standards and local payment regulations. We operate transparently within supported regions.

Session Security

Your live table sessions, slot spins and sportsbook bets are logged securely. Session data expires after logout to minimize exposure.

Audit Trail

Every login, deposit and withdrawal is timestamped and encrypted. You can review your full activity history in your account anytime.

Data Deletion Rights

Request permanent account closure and data removal. We'll purge your records within 30 days, except where law requires retention.

Privacy Across Our Platform

Live Casino Tables
Your dealer session data, bet history and table chat are encrypted separately. We don't cross-reference your live play with sportsbook activity for marketing.
Slot Lobbies
Spin records stay on your account. We track your session length and game preferences only to show you relevant titles—never to profile or sell your behaviour.
Sportsbook Markets
Your betting slips, odds selections and settlement records are private. We don't share your sports interests with external analytics platforms.
Payment Rails
DANA, OVO, GoPay and QRIS transactions are tokenized. We store only a reference ID, not your full wallet credentials or transaction history.
Account Verification
KYC data (ID, address, phone) is encrypted and stored separately from your gaming activity. Verification records are purged after account closure.
Support Tickets
When you contact us, your message and any attached screenshots are logged securely. Support staff access only what's needed to resolve your issue.
Device & Location
We log your IP and device type for fraud prevention only. This data is not used to build a profile or sold to third parties.

What Defines Our Privacy Approach

Transparent Logging

Every action on your account—login, deposit, withdrawal, game session—is timestamped and encrypted. You see the full record; we keep it private.

Minimal Data Collection

We ask only for what we need: account credentials, payment method and gaming preferences. No unnecessary fields, no hidden data requests.

Secure Payment Flow

DANA, OVO, GoPay and QRIS payments are tokenized at entry. Your wallet credentials never reach our servers; only transaction confirmations do.

Encrypted Storage

All personal data—from your email to your betting history—is encrypted at rest. Even our internal teams cannot read raw data without decryption keys.

Session Expiry

Your login session expires after 30 minutes of inactivity. Temporary session tokens are destroyed immediately; no lingering authentication traces remain.

Audit & Accountability

Our privacy practices are reviewed quarterly. We maintain detailed logs of who accessed what data and when, ensuring internal accountability.

Privacy Policy Questions Answered

We retain your encrypted account data for 90 days after closure to process final settlements and refunds. After that, all personal information is permanently deleted, except where Indonesian law requires us to keep records for tax or regulatory purposes.

Yes. Log into your account and visit Settings > Privacy & Data. You'll see your profile, payment history, gaming activity and device logs. For a complete data export, contact our support team and we'll send a full report within 7 business days.

No. Your live table sessions, slot spins and sportsbook bets stay within aman toto. We don't sell, trade or share your gaming history with other websites, apps or data brokers under any circumstance.

Completely. We use tokenization—your wallet credentials are replaced with a secure reference code. Your actual payment details never touch our servers. All transactions are encrypted end-to-end and monitored for fraud 24/7.

We maintain cyber insurance and breach-response protocols. If a breach occurs, we notify affected users within 24 hours with clear steps to secure your account. We also report to relevant Indonesian authorities as required by law.

Yes. Every marketing email includes an unsubscribe link. You can also disable promotional messages in your account settings under Notifications. We'll stop sending marketing content within 48 hours of your request.

We use cookies only to keep you logged in and to prevent fraud. We don't use third-party tracking pixels or behavioural analytics. Your browsing activity on aman toto is not shared with advertisers or social media platforms.