LEGAL REFERENCE

Legal clarity at every step

We've built our terms and policies around your account safety, payment security and regional compliance. Every section below explains what we do, how we protect your data, and...

Account ProtectionPayment SecurityRegional ComplianceData PrivacyTransparent Terms
totoxl Legal clarity at every step

Our legal posture

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Legal support paths

Team online

Account & Policy Questions

Reach our support team for clarifications on account terms, payment policies or compliance questions. We respond within 24 hours with detailed guidance tied to your specific inquiry.

Data & Privacy Requests

Request copies of your personal data, account history or transaction records. We process data subject requests within the timeframe required by Indonesian privacy frameworks.

Dispute Resolution

If a transaction, payout or account action needs review, file a formal dispute through our legal contact. We investigate with full audit access and respond with findings in writing.

WHY VISITORS TRUST US

Our policy credentials

Encryption Standards

All transactions and account data use TLS 1.2+ encryption. Your QRIS, DANA, OVO and GoPay credentials never touch our servers...

Third-Party Audits

Our payment flows and account security undergo independent audits twice yearly. Reports are filed with compliance teams and shared with...

Account Verification

We verify identity documents and phone numbers before account activation. This protects you from fraud and ensures payouts reach the...

Transaction Logging

Every deposit, withdrawal and lobby action logs to your account statement. Logs persist for 7 years and are accessible via...

Complaint Handling

Complaints are logged, assigned a case number and tracked to resolution. You receive email updates at each stage. Escalations reach...

Regulatory Alignment

We align our terms with Indonesian consumer protection standards and e-wallet regulations. Our payment partners comply with OJK and local...

SIDE BY SIDE

Policy consistency across the platform

01

Terms of Service

Account creation, gameplay conduct and account closure rules. Applied equally to all regions where totoxl operates.

02

Privacy Policy

How we collect, store and share your personal data. Aligned with Indonesian data protection law and GDPR for international users.

03

Payment Policy

Deposit holds, withdrawal timelines and currency handling. Covers QRIS, DANA, OVO, GoPay and all supported bank transfers uniformly.

04

Dispute Resolution

Process for filing claims about transactions, payouts or account errors. Same escalation path and documentation for all dispute types.

05

Account Security

Password rules, two-factor authentication and session timeouts. Enforced consistently across mobile app and desktop lobby.

06

Responsible Account Use

Account limits, Account closure options and session reminders. Available to all players and reviewed on a monthly basis.

07

Cookie & Tracking

How we use cookies for login sessions and analytics. You can review stored cookies in your browser settings anytime.

PLATFORM SNAPSHOT

What makes our legal framework work

01
Transparent Fee Schedule Deposit and withdrawal fees are listed before you confirm. No hidden charges appear after payment. Fees are identical whether you use QRIS, DANA, OVO or GoPay.
02
Instant Account Statements Download monthly statements showing every deposit, withdrawal and gameplay session. Statements include timestamps, amounts and running balances for full audit clarity.
03
Direct Payout Verification Track each withdrawal from request to arrival in your e-wallet. Payout status updates appear in real time on your account dashboard with reference numbers.
04
Encrypted Account Access Login uses HTTPS encryption. Your password hash never appears in logs. Session tokens expire after 30 minutes of inactivity for extra security.
05
Dispute Documentation Every dispute includes full transaction records, screenshots and communication logs. You receive copies of all evidence used in investigation and resolution.
06
Annual Policy Review We update our legal terms once a year after regulatory review. Changes are emailed 30 days in advance. You can opt out or close your account before changes take effect.

Legal questions answered

We store your name, phone number, email and identity document images encrypted on secure servers. Your data is never sold to third parties. Payment processors handle your QRIS, DANA, OVO and GoPay credentials separately under their own privacy agreements. You can request a full data export anytime via your account settings.

We retain your account history, transactions and dispute records for seven years after closure. This ensures we can respond to complaints and audits. After seven years, records are securely deleted unless legal holds apply. You can download your statement at any time during the retention period.

File a dispute through your account dashboard or email support with your transaction ID. We investigate within five business days by reviewing payment processor records, account logs and any communication. You'll receive our findings in writing with evidence. If the dispute is upheld, we issue a corrective transaction immediately.

Yes. We use tokenization so payment details never pass through our systems directly. Each e-wallet processor encrypts transactions at their end. Your totoxl account never stores credit card numbers or full wallet credentials. All payment data complies with PCI DSS and OJK banking standards.

If we close your account for policy violation, we email a detailed explanation within 48 hours. Any balance remaining in your account is returned to your registered payment method within 5–10 business days. You can request the full closure log and reason via support before the refund is processed.

We maintain compliance with Indonesian consumer protection law and e-wallet regulations enforced by Bank Indonesia and OJK. Our payment partners are licensed with local authorities. We publish our compliance certifications on request and undergo third-party audits twice yearly covering data security and transaction integrity.

Yes. Submit a data deletion request to our privacy team and we'll remove personal identifiers from active systems within 30 days. Transaction records are retained for seven years for regulatory purposes but de-identified so they cannot be linked to your name or contact details.