toto39Privacy Policy

This page describes what we collect when you use toto39 and how we keep that data protected. Our privacy commitments are structured around account security, payment processing, regulatory compliance, and your control over your personal information. When you register, deposit, or wager on toto39, we collect only the information necessary to verify your identity, process your transactions, and prevent fraud.

We understand that users in Jakarta, Surabaya, Bandung, Medan, Semarang, and other supported regions depend on toto39 to handle their account details confidentially. Our data handling practices align with international standards for encryption, storage, and third-party access. We do not sell your personal data to external marketers. We do not share your payment methods or account balance with unrelated parties. Your information is retained only as long as necessary to serve you and comply with applicable law.

This policy applies to all toto39 users regardless of location. If you have questions about how we handle your data or wish to exercise your rights, our support team is available during standard business hours.

What data we collect and why

We collect personal data in the following categories. Account registration: We require your email address, username, and password. These are used only to create and secure your toto39 account. Verification: Before your first withdrawal, we request your full name, date of birth, national identification number (KTP), and address. This information is mandatory under anti-money-laundering (AML) regulations and helps us prevent fraud and account takeover. Payment data: When you deposit, we record your payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), transaction date, and amount. We do not store your full card number or wallet password—payment processors handle that securely. Gameplay data: We log your bets, game selections, and results to settle wagers accurately and detect irregular patterns.

We do not ask for and do not retain sensitive data such as your full financial records, employment history, or health information. Your phone number is optional; you provide it only if you want SMS notifications. We do not track your location beyond what your IP address reveals (approximate region/country). We do not access your device's contacts, photos, or camera without explicit permission.

Account credentials
Email, username, password — encrypted and stored securely on toto39 servers.
Verification documents
Name, date of birth, ID number, address — required once for withdrawal eligibility.
Payment records
Method, date, amount — processed by payment providers and logged on our systems for settlement.
Wager and game history
Bet details, outcomes, time stamps — retained for dispute resolution and compliance audits.

How we use your data on toto39

We use your information for four core purposes. Service delivery: Your email and password authenticate your account and allow you to deposit, wager, and withdraw. Regulatory compliance: We verify your identity to comply with AML, know-your-customer (KYC), and anti-fraud laws. Transaction processing: Payment methods and account details are used only to fund your balance and process withdrawals to your chosen channel (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment). Dispute resolution: We retain bet history to investigate claims that a wager was incorrectly settled or that your account was compromised.

We do not use your data for marketing unless you explicitly opt in to email or SMS notifications. We do not create profiles for sale to third parties. We do not use your name or photo in testimonials or advertising. We do not correlate your gameplay patterns with other websites or services to build a cross-platform profile. Your data is compartmentalised—customer support sees only your account history, while finance sees only transaction records.

Note: Our servers and data processors may be located outside your jurisdiction. By using toto39, you acknowledge that your data may be transferred and processed in countries other than Indonesia. We apply the same security standards regardless of server location.

Third-party processors and data sharing on toto39

We share your data only with service providers who handle specific functions on our behalf. Payment processors: We share payment method and transaction details with online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet to complete deposits and withdrawals. These providers have their own privacy policies and are bound by law to protect your information. Identity verification partners: We may use third-party KYC vendors to validate your identification documents. Hosting providers: Our servers are hosted by infrastructure partners who have signed data protection agreements. Compliance and legal: We may disclose information to regulators, law enforcement, or courts when required by law—for example, to investigate fraud, enforce our terms, or respond to a court order.

We do not share your data with marketing companies, data brokers, or any entity unrelated to operating toto39. We do not sell your email address or wager history. When a third party requests your information, we verify the legitimacy of the request and disclose only what is necessary to fulfill the legal or business purpose.

Cookies and tracking on toto39

Our toto39 website and app use cookies and similar tracking technologies for specific functions. Session cookies: These keep you logged in during your gaming session and expire when you log out. Security cookies: We use these to detect and prevent account hijacking and fraud. Preference cookies: We store your language, timezone, and notification preferences locally on your device so you do not have to reset them each time. Analytics cookies: We log aggregate gameplay patterns (e.g., which games are most popular, what times have peak traffic) to improve our platform. These analytics are anonymised and do not identify you personally.

You can disable non-essential cookies in your browser settings; however, disabling session or security cookies may prevent toto39 from functioning correctly. We do not use cookies for cross-site tracking or to build profiles about your web activity outside toto39. Our analytics vendors are contractually obligated not to use our data for their own marketing purposes.

Your rights and how to exercise them

We provide you with rights over your personal data on toto39. Access: You can request a copy of the information we hold about you. We provide this within a reasonable timeframe, typically within business days. Correction: If your registered name, address, or other details are incorrect, you can update them directly in your account settings or contact support. Deletion: You can request that we delete your account and associated data. We will comply unless we are required by law to retain the information (for example, to investigate a dispute or maintain audit records). Objection: You can opt out of non-essential communications or cookies at any time.

To exercise any of these rights, contact our support team during standard business hours. Provide enough detail for us to identify your account (email address and username are sufficient). We will verify your identity and respond within a reasonable timeframe. If you are unsatisfied with our response, you may have the right to lodge a complaint with your local data protection authority, though this depends on your jurisdiction's laws.

  1. Request your data from toto39

    Email support with your account details; we compile a file of information we hold and send it to you.

  2. Update your profile information

    Use the account settings page to correct your name, address, or email; changes take effect immediately.

  3. Delete your account

    Request account closure from support; we remove your account and personal data subject to legal retention requirements.

  4. Opt out of communications

    Adjust notification settings in your account or click the unsubscribe link in any email from toto39.

Data security and retention on toto39

We protect your data using industry-standard encryption and access controls. All communications between your device and our servers are encrypted using TLS (Transport Layer Security). Your password is hashed so that even our staff cannot read it. Sensitive data such as verification documents and payment records are encrypted at rest. Access to your information is restricted to toto39 employees who need it to perform their job (e.g., customer support can view your account history to help resolve disputes, but cannot see your password). We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

We retain your data only as long as necessary. Account credentials and wager history are kept for as long as you have an active account plus a retention period for dispute resolution (typically two years after account closure). Verification documents and payment records are retained for compliance and tax purposes (typically five to seven years depending on applicable law). Once the retention period expires, we securely delete the data. If you request account deletion before the retention period ends, we deidentify your information so it cannot be linked to you personally.

In the event of a data breach, we will notify affected users without unreasonable delay and inform relevant authorities as required by law. Our incident response plan includes immediate investigation, containment, remediation, and transparent communication with you.

Policy updates and contact information

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or new features on toto39. We will announce material changes via email or a notice on our platform at least 30 days before the new policy takes effect. Your continued use of toto39 after the change date constitutes acceptance of the updated policy. We encourage you to review this page periodically to stay informed.

If you have questions, concerns, or requests related to your privacy on toto39, contact our support team. Provide your account email and a clear description of your request. We aim to respond within standard business hours. If you believe we have mishandled your data or violated this policy, you have the right to lodge a formal complaint with us and, depending on your jurisdiction, with your local data protection authority.

Our services are available only where local law permits. Users are responsible for ensuring their use of toto39 complies with their jurisdiction's data protection and privacy regulations.

↑