Reference

How lucky toto Handles Your Personal Data

At lucky toto, we collect only the data we need to run your account, process withdrawals and keep your sessions secure — nothing more.

Data encrypted at rest and in transitDANA, OVO, GoPay & QRIS transaction records protectedAccount deletion requests answered within 7 daysNo data sold to third-party advertisersSupport available 24/7 for privacy queries
lucky toto How lucky toto Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct or delete the personal data we hold on your lucky toto account, our privacy support team is available around the clock. You can reach us through live chat inside your account dashboard, by email at [email protected], or via WhatsApp during Indonesian business hours. Our team in Yogyakarta coordinates privacy requests and aims to send a written acknowledgement within 24 hours of receiving your inquiry.

Team online

Live Chat

Open the chat widget inside your account dashboard at any hour. A privacy support agent will confirm receipt of your data request and provide a case reference number within 15 minutes during peak hours.

Email

Send your written data request to [email protected]. Include your registered account email so we can verify identity before processing any deletion, correction or export request on your behalf.

WhatsApp

Our WhatsApp line is open 08:00–22:00 WIB seven days a week. Use it to ask about data retention periods, request a copy of your account data or query how your DANA or OVO transaction history is stored.

HOW WE PROTECT YOU

Six Ways We Safeguard Your Account Data

Data protection at lucky toto is built around specific technical controls and clear internal policies, not vague promises.

TLS Encryption in Transit

All data exchanged between your browser or device and our servers travels over TLS 1.3 encryption. This applies to every login attempt, account update, payment initiation and session token refresh across all devices you use.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand how account pages are used. You may manage or reject non-essential cookies through the preference centre linked in the site footer at any time.

Account Security Alerts

Any login from an unrecognised device or IP address triggers an automatic email alert to your registered address. You can then confirm the session or lock your account immediately from the security section of your profile.

Data Retention Schedule

We keep active account data for the lifetime of your account plus 12 months after closure, as required for financial reconciliation. Payment transaction references — including DANA and GoPay records — are retained for five years per Indonesian financial reporting standards.

No Third-Party Data Sales

We do not sell, rent or barter your personal data to advertisers or data brokers. We share data only with payment processors such as DANA, OVO, GoPay and QRIS and only to complete the transaction you initiated.

Right to Access and Deletion

You may request a full export of your account data or ask us to delete your profile entirely. We complete verified deletion requests within seven calendar days and send written confirmation to your registered email address once the process finishes.

What You Most Often Ask About Your Data

The questions below cover the privacy scenarios our account holders ask about most often — from how long we store payment records to what happens when you close your account. If your question is not listed here, our live chat team can give you a specific answer within minutes, any time of day.

We collect your name, email address, phone number and the payment method you register. If you use DANA, OVO, GoPay or QRIS, we also log transaction references to reconcile deposits and withdrawals against your account balance.

Payment records — including DANA, OVO, GoPay and QRIS transaction references — are kept for five years after the transaction date to meet Indonesian financial reporting requirements. Non-financial account data is retained for 12 months after account closure.

Yes. Email [email protected] from your registered address and request a data export. We will prepare and send a structured file containing your account, session and transaction data within seven calendar days of verifying your identity.

Submit a deletion request via live chat or email to [email protected]. After identity verification, we remove your profile and account data within seven days and send written confirmation. Statutory financial records are retained as required by law.

We share data only with payment processors — DANA, OVO, GoPay and QRIS — and only to complete transactions you initiate. We do not sell or rent your personal information to advertisers, data brokers or any unrelated third party.

We use session cookies for login continuity and analytics cookies to improve account page usability. Non-essential cookies can be managed or switched off through the preference centre in the site footer — changes take effect immediately on your current session.

Your profile and gameplay history are deleted within 12 months of account closure. Payment transaction references linked to DANA, OVO, GoPay or QRIS deposits are kept for five years as required under Indonesian financial regulations, then permanently erased.