Your Privacy at astatoto
We handle your account details, payment information and gameplay history with the same care you'd expect from a platform built for Indonesia. This policy explains exactly how we...
Our Privacy Commitment
astatoto operates for players in supported Indonesian regions where local law permits. We collect personal data—your name, contact details, payment information and gameplay activity—only to operate your account, process deposits and withdrawals via DANA, OVO, GoPay and QRIS, and comply with applicable regulations. Your data is encrypted, stored securely and never sold to third parties. We may share information with payment partners
and compliance authorities where required by law. You can request access, correction or deletion of your data at any time through your account settings or our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Built Into Our Brand
Encryption Standard
All data—from your login credentials to your QRIS and DANA transactions—travels through SSL 256-bit encryption. We refresh security certificates quarterly and test for vulnerabilities monthly.
Audit Trails
Every account action, login, deposit and withdrawal is timestamped and logged. You can review your activity history anytime and flag suspicious transactions instantly.
No Third-Party Sales
We do not sell, rent or trade your personal data to marketers, data brokers or advertisers. Payment partners and legal authorities see only what's necessary for transactions and compliance.
Vendor Agreements
DANA, OVO, GoPay and QRIS providers sign strict data-processing agreements. Each is audited annually and must comply with our privacy standards before touching your payment information.
Policy Updates
When we update this policy, you'll receive email notice 30 days ahead. Material changes require your consent; minor clarifications are logged in our version history for transparency.
Data Retention
Account data is kept as long as your astatoto account is active. After closure, transaction records are retained for legal compliance; personal details are purged within 90 days unless law requires longer.
astatoto Policy Across Markets
| Indonesia Lobby | DANA, OVO, GoPay and QRIS transactions follow this policy. Bank-transfer players and e-wallet holders enjoy the same data protection and audit access. |
|---|---|
| Account Closure | Close your account anytime from settings. Your gameplay history stays encrypted for 90 days; after that, personal identifiers are deleted unless local law requires retention. |
| Cookie Usage | We use session cookies to keep you logged in and functional cookies to remember your lobby preferences. Analytics cookies help us spot platform errors; you can disable them in browser settings. |
| Minors & Verification | astatoto requires age verification at signup. If we discover a minor on an account, it is immediately suspended and data is flagged for secure deletion per local regulations. |
| Payment Data Storage | DANA, OVO, GoPay and QRIS payment tokens are tokenized—meaning we don't store full card or account numbers. Payment partners hold encrypted tokens; we see only transaction confirmations. |
| Cross-Border Transfers | Data moves between our lobbies only when you request it. International compliance obligations are met; personal data stays in supported Indonesian infrastructure where legally possible. |
| Dispute & Complaints | Privacy complaints can be escalated to our Data Protection Officer. Unresolved issues may be referred to Indonesian regulatory authorities; we'll guide you through every step. |
What Shapes This Policy
Two-Factor Login
Your astatoto account uses 2FA by default. After entering your password, a one-time code arrives via your verified email or phone—adding a layer between your account and unauthorised access.
Monthly Statements
Download a full account statement showing every deposit, withdrawal, gameplay session and timestamp. Statements are encrypted PDFs linked from your dashboard and stored for 24 months.
Privacy Dashboard
See all connected apps, active sessions across devices, payment methods on file and recent login locations. Revoke access, remove payment tokens or end sessions with one click.
Data Export Rights
Request a complete export of your personal data—account history, deposits, withdrawals, gameplay logs and communication records. Export arrives within 7 days in machine-readable format.
Deletion Requests
Close your account and request immediate deletion of personal identifiers. Transaction records required by law are anonymised; everything else purges within 90 days automatically.
Incident Response
If we detect a data breach affecting your account, you receive email notification within 24 hours with breach scope, protective steps we took, and your rights under local law.