LEGAL REFERENCE

Your data. Your control. Our commitment.

At togaplay, we keep your account secure and your personal information private. Our privacy policy is built around Indonesian standards and international practice, so you know exactly how...

Data SecurityPayment PrivacyAccount ProtectionTransparencyYour Rights

Browse the Lobby Read FAQ

Privacy Policy Overview

togaplay respects your privacy and complies with applicable data protection laws in Indonesia and supported regions. We collect only the information needed to verify your identity, process deposits through QRIS, DANA, OVO and GoPay, manage your account and deliver our gaming services. Your data is encrypted in transit and at rest. We do not sell personal information to third parties. You retain

the right to access, correct or request deletion of your data, subject to legal retention obligations. Contact us anytime to exercise these rights or clarify how we use your information.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Privacy Questions? Reach Us.

Email Support Contact our privacy team at [email protected] with any concern about how we handle your data, account details or payment history.

Live Chat Open the chat widget on togaplay.app during business hours to ask about data access, deletion requests or privacy settings tied to your account.

Account Settings Log into your account and visit Privacy & Security to view what we store, manage communication preferences and update personal information.

WHY VISITORS TRUST US

How We Earn Your Trust

Encrypted Data Transfer

All communication between your device and our servers uses industry-standard TLS encryption, protecting account credentials and payment information in real...

Third-Party Audits

Our security practices are reviewed by independent auditors who verify encryption, access controls and data segregation across our infrastructure.

No Data Broker Sales

We explicitly do not sell, rent or share your personal data with marketing brokers, data aggregators or unrelated third parties...

Payment Tokenization

QRIS, DANA, OVO and GoPay transactions are tokenized; we never store full card or wallet credentials on our servers, reducing...

Rapid Breach Response

If a security incident occurs, we notify affected users within 48 hours and cooperate with regulators to prevent unauthorized access...

Compliant Retention

We keep account and transaction records only as long as required by Indonesian law and our licensing framework, then securely...

Consistency Across Our Policies

Terms of Service	Our Terms define what data you give us and why; this Privacy Policy explains how we protect it and your rights over it.
Cookie Policy	Covers tracking pixels and session cookies on togaplay.app; complements this policy by explaining analytics and advertising tracking separately.
Payment Security	Our payment policy details QRIS, DANA, OVO and GoPay handling; this policy covers the personal data attached to those transactions.
Account Deletion	Our account closure process is detailed here; includes data deletion timelines and what records we legally must retain after closure.
Child Safety	We prohibit minors from opening accounts; this policy explains verification steps we take and data we retain to enforce age restrictions.
Dispute Resolution	Privacy complaints follow our dispute resolution process; escalation paths and timelines are documented in our full terms alongside this policy.
Updates & Notices	Material privacy changes are announced via email and in-app notification; we log update dates so you know when rules affecting your data changed.

What Defines Our Privacy Promise

Identity Verification

We ask for name, date of birth and ID number to comply with Indonesian anti-money-laundering rules and protect your account from fraud or impersonation.

Payment Data Separation

QRIS, DANA, OVO and GoPay credentials are processed by certified payment partners using separate encryption; togaplay never holds full payment details.

Session Tracking

We log login times, device types and IP addresses for your security—so we can alert you to unauthorized access and help recover compromised accounts.

Gameplay Analytics

Bets, wins and play patterns are recorded to calculate RTP, detect fraud and improve game fairness; this data is anonymized in aggregate reports.

Communication Records

Chat, email and support tickets are stored to resolve disputes, answer questions and comply with dispute documentation rules set by regulators.

Legal Compliance Holds

Indonesian tax authority requests, court orders and licensing audits may require us to hold account data beyond your preferred deletion date.

Privacy & Your Account—Answered

We collect your name, email, phone number, date of birth, ID number and address for account verification. We also log payment method details (tokenized), device info, login history and gameplay data to verify your identity, process QRIS, DANA, OVO and GoPay deposits, prevent fraud and comply with local regulations.

Payment credentials are tokenized by certified payment processors and never stored in full on our servers. Transactions use TLS encryption end-to-end. We hold only a reference token linked to your account, so even if our database were breached, attackers could not access your actual wallet or card information.

Yes. Log into your account, go to Privacy & Security and select 'Download My Data' to receive a file of all information we hold about you, including deposits, withdrawals, gameplay history and support interactions, usually within 14 days.

We retain transaction records for seven years to comply with Indonesian tax and licensing rules. Your name, contact info and ID number are deleted within 30 days of closure unless we're investigating a dispute or fraud claim. You can request faster deletion; we'll confirm what can't be removed due to legal holds.

We share only what is necessary: payment processors handle QRIS, DANA, OVO and GoPay transactions; tax authorities receive regulatory reports; support partners may access anonymized data. We do not sell personal information to advertisers, data brokers or marketing firms without your explicit consent.

Every marketing email includes an unsubscribe link at the bottom. Click it to stop promotional messages. You can also log into Account Settings, select Notifications and toggle off 'Promotional Email' to manage frequency and content type instantly.

If we detect unauthorized access to your data, we notify you and regulators within 48 hours, provide details of what was accessed and offer free identity-monitoring support. We investigate the cause immediately and deploy fixes to prevent recurrence, with updates published throughout.