Reference

Legal Terms That Matter to Your Account

Your account and the way we handle your data, deposits and withdrawals are built on clear, transparent terms.

Account security & verificationData protection & retentionPayment & withdrawal rulesYour support channelsAccess where local law permits
18toto web Legal Terms That Matter to Your Account
REACH US ANYTIME

How to Contact Us About Your Account

We offer multiple contact paths so you can ask about your account, your data, or any legal question whenever you need. Our support team responds during operating hours; email is monitored 24/7 and responses are typically sent within 8 hours. All communication is logged so you have a record of every conversation.

Team online

Live Chat

Open the chat window in your account dashboard. Available during support hours. Submit questions about account access, withdrawals, data requests or policy topics.

Email Support

Send your request to [email protected] with your account details. Response within 8 hours. Use email for formal data requests or legal inquiries.

Account Settings

View your stored personal data, payment methods and account history in Settings > Privacy & Security. Update or remove information anytime; changes take effect immediately.

SECURITY & TRANSPARENCY

Data, Cookies & Account Safeguards

Your account security is our priority. We use industry-standard encryption for all data in transit and at rest, two-factor authentication on login, and automated fraud detection on every deposit and withdrawal.

Encryption & Transport Security

All account data, payment details and communication between your device and our servers are encrypted using TLS 1.2 or higher. No data leaves your device unprotected.

Account Verification

When you open an account or change your payment method, we verify your identity using government ID and address confirmation. Withdrawals trigger re-verification to match the original account holder.

Cookie & Session Management

We use session cookies to keep you logged in and preference cookies to remember your language and game settings. Analytics cookies are optional; you can disable them in Privacy > Cookie Settings.

Fraud & Anomaly Detection

Our system flags unusual deposit patterns, login locations and withdrawal requests. If we suspect unauthorized access, we pause the account and contact you immediately via email and SMS.

Data Retention & Deletion

We keep your account data active while your account is open. After closure, we retain records for seven years to comply with tax and anti-money-laundering rules. You may request deletion where local law permits.

Third-Party Access & Audit

Payment processors (DANA, OVO, GoPay, QRIS partners) and our compliance auditors may access your data under strict confidentiality agreements. You always have the right to know who has seen your information.

Common Questions About Legal & Your Rights

Yes. Email [email protected] with 'Data Request' and your account number. We'll send you a complete copy of your stored information — name, contact details, payment history, account settings and login records — within 10 business days. Access this summary anytime in Settings > Privacy & Security.

We retain your data for seven years following account closure to meet tax, anti-money-laundering and regulatory requirements in Indonesia. During this period, we do not use your data for marketing or contact you unless required by law. After seven years, your data is securely deleted.

Contact [email protected] immediately with your transaction ID and issue description. Our team investigates within 48 hours. If the transaction failed, we reverse it to your wallet. If you initiated it but want to cancel, we may halt it if it hasn't reached your bank yet. Bank or payment processor delays are tracked separately.

No. Your DANA, OVO, GoPay and QRIS details are processed directly by those payment providers under their own privacy terms. We do not store your full card or wallet numbers; we store only a secure token. Compliance auditors and fraud-detection partners may access encrypted transaction records, but never your raw payment credentials.

Yes. You can update your name, email, phone and address in Settings > Account Details anytime. For deletion requests, email [email protected] with 'Delete My Data' and your account number. Where local law permits, we'll delete non-essential data immediately; tax and legal records are kept for seven years as required.

We monitor all logins from new devices and unusual locations. If we detect suspicious activity, we'll send you an email and SMS alert with the login details and ask you to confirm it was you. You can immediately change your password or request account lockdown through Settings > Security > Lock Account.

The legal terms apply consistently across Indonesia. Where local law differs, we follow the stricter rule. Access to the platform depends on local law. Your payment options — DANA, OVO, GoPay and QRIS — work nationwide. Support is available in English and regional languages by email and chat.