Web and Mobile App
Privacy protections are identical on toto328.bet and our mobile app. Account data syncs with the same encryption and access controls across devices.
At toto 328, your privacy is the foundation of how we operate. This policy outlines exactly how we collect, use, and protect your personal information—from account signup through...
toto 328 collects personal information necessary to operate your account securely and process your transactions. This includes your name, email, contact details, account credentials, and transaction history. We process payment data when you use DANA, OVO, GoPay or QRIS to fund your account or withdraw winnings. Our processing complies with Indonesian data protection principles and supported regional regulations. We do not sell
your data to third parties. Your information remains encrypted and accessible only to authorised personnel. We retain data for the duration of your account and as required by law.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Contact our privacy team at [email protected] with data requests, deletion inquiries or concerns about how we handle your personal information.
Review and update your personal details directly in your account dashboard. Manage communication preferences and data visibility from your profile menu.
Request a copy of all data we hold about you. Submit a formal data access request through your account or email, and we'll respond within supported timeframes.
All account and payment data travels across TLS 1.2+ encrypted channels. Your DANA, OVO, GoPay and QRIS credentials are never stored in plain text on our servers.
Our data handling and account security undergo regular third-party assessments. Audit reports confirm compliance with industry standards and regional requirements.
If a breach occurs, we notify affected users and authorities as required by Indonesian law. Our incident response protocol prioritises account freeze and damage mitigation.
Payment processors like DANA, OVO, GoPay and QRIS gateways sign data-processing agreements. We audit partner security practices annually to maintain standards.
Changes to this policy are communicated 30 days in advance via email and account notice. We never weaken privacy terms without user consent or legal requirement.
You may request account closure and data deletion at any time. We remove personal data within 90 days, except where law requires retention for financial records.
Privacy protections are identical on toto328.bet and our mobile app. Account data syncs with the same encryption and access controls across devices.
Session data from live dealer tables (Evolution, Pragmatic) is covered under this policy. Table feeds and your interaction logs stay encrypted server-side.
Betting slips, odds history and market preferences are protected with the same standards as casino account data. No third-party tracking without consent.
Slot game history, spin logs and feature tracking are stored securely. Providers (PG Soft, Pragmatic, others) receive only aggregated play data, never personal details.
DANA, OVO, GoPay and QRIS transactions pass through encrypted gateways. We do not store wallet credentials; processors handle sensitive payment token security.
If you reset your password or recover your account, we verify identity through email and registered phone. Recovery data is held temporarily then securely deleted.
Emails about new games or promos are sent only if you opt in. Unsubscribe links work immediately; your preference is honoured across all toto 328 channels.