Live Casino Tables
When you join a live baccarat or roulette table, only your username appears to other players. We never share your payment method, location or betting history with table participants.
LEGAL REFERENCE
Your data. Your control. Our commitment.
We've built totoxl around one principle: your account, payment methods and gaming history belong to you. This policy explains exactly how we collect, store and protect that information...
Data SecurityPayment PrivacyAccount ControlIndonesia CompliantTransparent Practices
Privacy Policy & Your Rights
totoxl operates under privacy frameworks aligned with Indonesian data protection principles and the Personal Data Protection Law. We collect information necessary to verify your identity, process deposits and withdrawals through DANA, OVO, GoPay and QRIS, and maintain account security. Your gaming activity, payment records and personal details are encrypted and stored on secure servers. We do not sell your data to third
parties. In supported regions, you may request access to, correction of, or deletion of your personal information by contacting our support team. We retain data only as long as legally required or necessary for account operations.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
24/7 SUPPORT
Privacy Questions & Support
Team online
Email Support
Reach our privacy team at [email protected] with any data requests, concerns or questions about how we handle your account information and payment history.
In-App Messages
Open your account and send a privacy enquiry directly through the help menu. We'll respond within 48 hours with answers or next steps for your request.
Account Settings
Review or update your personal details, notification preferences and linked payment methods anytime in your profile settings without leaving the lobby.
WHY VISITORS TRUST US
Privacy Standards We Follow
Encryption Standard
All personal data and payment information transmitted between your device and our servers use industry-standard TLS encryption. Your login credentials...
Payment Data Isolation
DANA, OVO, GoPay and QRIS transactions are processed through PCI-DSS compliant payment gateways. We never see your full card or...
Regular Security Audits
We commission third-party security assessments annually to identify vulnerabilities. Audit reports confirm our infrastructure meets data protection benchmarks for Indonesia's...
Access Logging
Every login, withdrawal request and account change is logged with timestamps. You can review your account access history in the...
Staff Data Minimization
Only authorised support staff with formal privacy training can view account data, and only when you request help. All access...
Incident Response
If a data breach occurs, we notify affected account holders within 72 hours with details of the incident and steps...
SIDE BY SIDE
How Our Policy Aligns Across totoxl
Slot Lobbies
Slot play is tied to your account but not tracked by game provider. Pragmatic, PG Soft and other slot suppliers see play volume only — not your personal ID or payment details.
Sportsbook Markets
Your sports bets and odds selections are encrypted at rest. Market data and odds feeds come from external providers but are divorced from your account identity.
Payment Processing
DANA, OVO, GoPay and QRIS transfers route through tokenised payment rails. We store a reference ID, not your wallet credentials or linked bank account number.
Account Verification
ID verification for Indonesian accounts is handled by a third-party KYC provider. Your passport or ID number is encrypted and deleted after verification succeeds.
Promotional Communications
We send updates about new slot rooms, live table schedules and sportsbook markets only to your email or in-app inbox — never SMS unless you explicitly opt in.
Data Retention
Closed account data is anonymised after 12 months. Active accounts retain full history indefinitely unless you request deletion under your privacy rights.
PLATFORM SNAPSHOT
What Defines Our Privacy Approach
01
One Account, Full Lobby
You sign in once with your email and password. We don't ask for payment details repeatedly. Your DANA, OVO, GoPay or QRIS link is stored securely and reused across slots, live tables and sportsbook.
02
Transparent Data Use
We collect your name, email, phone and payment method only to operate your account and process deposits. We don't build marketing profiles or sell your gaming patterns to advertisers.
03
Player-Controlled Visibility
Your username appears on leaderboards and live table chat only if you choose. Disable profile visibility anytime in settings and other players won't see your account history.
04
Secure Session Management
Sessions expire after 30 minutes of inactivity on mobile and 60 minutes on desktop. Logout clears all stored session data. You can remotely terminate all active sessions from your account.
05
Privacy by Design
Our product teams build features with data minimisation in mind. We ask for the smallest amount of information needed to deliver live casino, slots and sportsbook functionality.
06
Compliance & Updates
This policy is reviewed quarterly. When Indonesian data protection law changes, we update our practices and notify you in-app. Your consent remains valid unless the update is material.
Privacy Policy Questions
We collect your name, email address, phone number, date of birth and a verified ID document for KYC. For payment processing via DANA, OVO, GoPay or QRIS, we also store a tokenised payment reference — never your full wallet credentials or bank account number.
Active account data is retained indefinitely for audit and compliance purposes. When you close your account, we anonymise personal identifiers after 12 months. You may request earlier deletion under Indonesian privacy law where legally permitted.
Yes. Open your account, go to Settings > Privacy & Data, and download a full copy of your stored information including personal details, payment records and gaming history. Export runs within 24 hours.
No. We don't sell your gaming history, betting patterns or account behaviour to third parties. Live table providers and slot studios see only aggregated play counts — never your identity or payment details linked to gameplay.
All payment transactions are routed through PCI-DSS compliant gateways using TLS encryption. We never store your full wallet credentials or bank details — only a tokenised reference for future deposits and withdrawals.
We conduct quarterly security audits and monitor our systems 24/7. If a breach occurs, we notify affected account holders within 72 hours with details of the incident, remedial steps and advice on how to secure your account.
Absolutely. Go to your notification preferences and disable marketing communications anytime. You'll continue to receive essential account updates (login alerts, withdrawal confirmations) but no promotional content about new games or offers.