Reference

How We Protect Your Privacy

When you open an account with 18toto web, your personal information—name, payment details, account activity—is handled with clear, documented safeguards.

Data collection explainedPayment security verifiedYour access rights assured
18toto web How We Protect Your Privacy
REACH OUR TEAM

How to Contact Us About Your Privacy

If you have questions about how we handle your data, want to update your personal information, or need to request access to or deletion of your account details, our support team is ready to help. We respond to privacy requests through multiple channels so you can choose what works best for you. All privacy inquiries are logged and handled in the order they arrive.

Team online

Email Support

Write to [email protected] with your account email and specific request. We aim to reply within 24 hours on weekdays. Include your username and the date range of data you're asking about.

In-Account Messages

Log into your 18toto web account, open the help panel, and send a message directly. Your ticket gets a reference number so you can track the status. This channel is fastest for urgent requests.

Live Chat Hours

Our live chat team is available Monday to Friday, 9 AM to 6 PM Indonesia time (Makassar timezone). They can answer basic privacy questions and escalate complex requests to our data officer.

SECURITY & RETENTION

How We Keep Your Data Safe and How Long We Store It

Your account information, payment history, and game activity are protected by encryption and firewall systems.

Encryption in Transit

All data sent between your device and our servers uses HTTPS/TLS encryption. Payment details for DANA, OVO, GoPay and QRIS transfers are never logged in plain text.

Password & Login Security

Your password is hashed and stored separately from your account profile. We support two-factor authentication via email to add an extra layer when you log in from a new device.

Cookies & Tracking

We use session cookies to keep you logged in and analytics cookies to understand which games and features you use most. You can disable non-essential cookies in your account preferences without losing access.

Third-Party Processors

Payment processors and identity-verification vendors we work with sign data-protection agreements and are audited annually. They can only access data necessary for their service.

Data Retention Timeline

Active account data is kept as long as you play. After account closure, we retain financial records for 5 years and game history for 2 years where local law permits, then securely delete the rest.

Request Your Data

You have the right to request a copy of all personal data we hold on you. Email [email protected] with 'Data Subject Request' in the subject line, and we'll send a CSV file within 10 business days.

Privacy Policy Questions Answered

We know privacy matters. Below are answers to the questions we hear most from players in Indonesia and beyond—about data rights, payment safety, account access, and what happens to your information.

We collect your full name, email, phone number, date of birth, residential address, and chosen username. During deposits via DANA, OVO, GoPay or QRIS, we also record the transaction ID and amount. We log your IP address, device type, and browser on each login for security and fraud prevention.

Your account profile is private; only you and our support team can see it. Payment processors (DANA, OVO, GoPay, QRIS operators) see only what's needed to process your transaction—they don't see your game history or balance. Other players never see your personal data, only your username and game-room presence.

Yes. Email [email protected] with 'Data Subject Request' as the subject, include your account email, and we'll prepare a full export—your profile, transaction history, game logs, and any correspondence—as a downloadable file within 10 business days.

When you request account closure, we immediately lock your balance and login access. Financial records stay for 5 years where local law permits, for tax and dispute resolution. Non-regulatory data—game history, preferences, session logs—is deleted within 30 days unless you ask us to retain it for your own records.

No. When you deposit, your payment app handles the transfer directly; we never store your account numbers or credentials. We log only the transaction ID, amount, and timestamp. Withdrawal requests are routed through the same secure payment gateway, so your banking details stay with your payment provider.

Log in, go to Account Settings > Privacy, and toggle off analytics and marketing cookies. Session cookies required for login cannot be disabled, but you can clear them from your browser anytime. Disabling cookies does not affect your access to the lobby, games, or live tables.

Contact our support team immediately via live chat (Monday–Friday, 9 AM–6 PM Indonesia time) or email [email protected]. Include the date, time, and any transaction IDs you see. We'll freeze your account, investigate, and if fraud is confirmed, reverse unauthorized transactions within 48 hours.