98toto Privacy Policy

This page describes what we collect when you use 98toto and how we keep that data protected. We take data privacy seriously. When you register an account, deposit via DANA or e-wallet, place a football bet on Liga 1, or play live-dealer tables, we collect specific information to verify your identity, process payments, and prevent fraud.

Our 98toto privacy practices follow data protection principles: we collect only what we need, use it only for stated purposes, and keep it secure. We do not sell your data to advertisers or third parties for marketing. We share information only with payment processors, service providers, and authorities when legally required.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

What data we collect on 98toto

When you create a 98toto account, we collect your legal name, email address, phone number, date of birth, identity number (e.g., KTP or passport), and residential address. This information is mandatory for account verification and compliance with anti-money-laundering rules.

Once your account is active, we track your activity on 98toto: which games you play (football betting on Liga 1 or Piala AFF, live-dealer sessions, slot games), your bet amounts, your winnings and losses, your session times, and your device information (IP address, browser type, operating system). We log all deposits and withdrawals, including the payment method you used (DANA, e-wallet, mobile banking, local payment, online payment, etc.) and transaction amounts.

We also collect technical data: your device ID, browser cookies, login timestamps, and geographic location (inferred from IP address). If you contact our support team, we store your messages and our responses. If you enable two-factor authentication (2FA), we record the phone number or email you use for 2FA codes.

How we use your 98toto data

We use the data we collect on 98toto for these purposes:

Account verification: We verify your identity to prevent duplicate accounts, fraud, and underage access. This process happens once at account opening and again if we detect suspicious activity.
Payment processing: We share deposit and withdrawal details with our payment partners (e.g., e-wallet, mobile banking, local payment, online payment) to facilitate transactions. We also use this data to detect unauthorised charges and dispute fraud claims.
Regulatory compliance: We report transaction data to financial regulators and anti-money-laundering authorities as required by law. We maintain records of your identity, account activity, and withdrawal patterns for audit purposes.
Platform security: We use your IP address, device ID, and login history to detect account compromise, bot activity, and suspicious betting patterns. If we notice unusual activity (e.g., logins from different countries within minutes, rapid large withdrawals), we may flag your account for review or temporarily restrict access.
Customer support: We review your account history, transactions, and support tickets to answer your questions and resolve disputes quickly.
Service improvement: We analyse aggregated (anonymised) usage data to understand which games are popular, which payment methods work best, and which times of day see the most traffic during Idul Fitri, Piala AFF tournaments, or Champions League matches.

We do not use your 98toto data for marketing emails, SMS campaigns, or third-party advertising unless you explicitly opt in. If you prefer not to receive occasional promotional messages, you can disable them in your account settings.

On 98toto data security: We encrypt your personal data and payment information in transit (using TLS 1.3) and at rest (using AES-256 encryption). Our 98toto servers are protected by firewalls and regularly audited for vulnerabilities. We do not store full credit card numbers or sensitive payment details; we use tokenised references instead.

Our 98toto data partners and processors

We share your data with trusted service providers who help us operate 98toto. These include:

Payment processors: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and bank partners (local payment, online payment, e-wallet, mobile banking) receive your transaction data to process deposits and withdrawals. These partners have their own privacy policies; we recommend reviewing them.
Cloud hosting providers: We store 98toto data on secure cloud servers in Asia Pacific. Our hosting partner is subject to strict data protection agreements.
KYC verification provider: We use a third-party identity verification service to confirm your name, ID number, and address against official records. This provider does not retain your data after verification.
Customer support platform: Our support ticket system is hosted by a third-party vendor. Your support messages are stored on their encrypted servers.
Fraud detection service: We use automated tools to detect suspicious betting patterns, bot activity, and account compromise. These tools analyse your data without storing it long-term.

All our data partners are contractually bound to protect your privacy and use your data only for the specific services they provide to 98toto.

Your rights regarding data on 98toto

You have the right to request access to, correction of, or deletion of your personal data held by 98toto, subject to legal and operational constraints. For example, we may need to retain your data for regulatory compliance or dispute resolution even if you ask for deletion.

To exercise these rights, contact our privacy team via email or in-app help. We will respond within thirty days and confirm what data we hold, how we use it, and what action we can take.

If you believe we have misused your data or violated your privacy, you may file a complaint with your local data protection authority or our own complaint mechanism. We will investigate and respond within sixty days.

98toto privacy essentials

We collect your name, ID, address, email, phone, and activity data when you use 98toto.
We use this data to verify your identity, process payments, prevent fraud, and comply with law.
We share data only with payment partners, service providers, and regulators — never with advertisers.
Your data is encrypted and stored securely on protected servers.
You can request access, correction, or deletion of your data by contacting our privacy team.

Cookies and tracking on 98toto

We use cookies and similar tracking technologies on 98toto to enhance your experience. Essential cookies keep you logged in and maintain your session. Functional cookies remember your preferences (e.g., language, theme). Analytical cookies help us understand how you navigate 98toto and which football markets or live-dealer tables are most popular.

We do not use cookies for third-party advertising or tracking. You can disable cookies in your browser settings, but this may affect 98toto functionality (e.g., you may lose your session unexpectedly). Most cookies on 98toto expire after thirty days or when you log out.

We also use web beacons (small tracking pixels) in emails we send you. These help us know if you opened an email or clicked a link. If you prefer not to be tracked this way, you can disable images in your email client or unsubscribe from our email list.

Data retention on 98toto

We retain your personal data while your 98toto account is active and for a period after closure for legal, regulatory, and dispute resolution purposes. Typically, we keep data for five to seven years after account closure to comply with financial regulations and respond to potential disputes.

We automatically delete activity logs (session data, bet histories, device logs) after two years, unless we are investigating a dispute or security incident. We retain your name, ID, address, and transaction history for longer to satisfy regulatory requirements.

If you request data deletion, we will remove personal data from our active systems but may retain anonymised or aggregated data for statistical and regulatory purposes.

International data transfers and our 98toto servers

Our 98toto servers are located in Asia Pacific. When you use 98toto from Jakarta, Bandung, Surabaya, or Medan, your data may be stored on servers outside Indonesia. International data transfers are governed by data protection agreements that ensure your data receives equivalent protection to Indonesian standards.

By using 98toto, you consent to the transfer of your data to and processing on servers in other countries. If you do not consent, do not use our platform.

We do not share data with authorities outside Indonesia unless we receive a valid legal order or are required by the laws of the jurisdiction where our servers are located.

Changes to our 98toto privacy policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be announced via email or in-app notification at least thirty days before they take effect. Your continued use of 98toto after the effective date constitutes acceptance of the updated policy.

We keep a history of policy versions on this page so you can see what has changed. If you have questions about this privacy policy or our data practices, contact our privacy team via email or in-app help at any time.

We are committed to protecting your privacy and keeping 98toto a safe and trustworthy platform. Your data is yours — we are just custodians of it. Thank you for trusting us with your information.