lucky toto Privacy Policy

Data We Collect and Why

When you create a lucky toto account, we collect your email address, password (encrypted), and full name. During identity verification, we collect a scanned or photographed copy of your national ID or passport. We use this data to confirm your identity, comply with anti-fraud and anti-money-laundering regulations, and prevent account duplication.

When you deposit funds, we collect payment method details—your wallet name (for DANA, e-wallet, mobile banking, local payment, online payment), e-wallet reference, or bank account number (for mobile banking, local payment, online payment, e-wallet). We do not store full credit card numbers; our payment processors handle card data separately under their own security standards. We collect transaction history (deposit date, amount, payment method used) to reconcile your account balance and generate account statements.

When you place wagers on Liga 1 matches, Piala Indonesia fixtures, Piala AFF tournaments, Champions League games, or other sportsbook categories, we log your selections, stake amounts, odds offered at the time of wager, and settlement outcomes. We collect this data to settle your bets fairly, track your account balance, and comply with gambling regulations in supported jurisdictions. We also collect information about which live-dealer games (blackjack, roulette, baccarat, Dragon Tiger) you play, slot game sessions (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports market activity (Mobile Legends, Free Fire, PUBG Mobile).

Technical data we collect on lucky toto

We collect technical information automatically: your IP address, device type (mobile or desktop), browser type, operating system, and pages visited on our platform. We use this data to detect fraud, prevent unauthorized access, and optimize platform performance. We also collect usage patterns—how long you spend in each game category, which features you access most often, and when you typically use lucky toto. This helps us improve our interface and fix bugs that affect the user experience.

We use cookies and similar tracking technologies to remember your login status, store your game preferences, and analyze how you navigate our platform. Cookies are small text files stored on your device; you can disable cookies in your browser settings, but some platform features may not work correctly if cookies are disabled. We do not use cookies to track you on third-party websites unrelated to lucky toto.

• 1
  Account registration dataEssential

  Email, password, full name, and identity documents required for account creation and verification.

• 2
  Payment informationFinancial

  Payment method details, transaction history, and deposit/withdrawal records linked to your account.

• 3
  Wagering activityOperational

  Bets placed, game selections, stakes, odds, and settlement outcomes across all lucky toto categories.

• 4
  Technical and usage dataPlatform optimization

  IP address, device type, browser, cookies, and usage patterns for fraud detection and service improvement.

How We Use and Share Your Data

We use your data primarily to operate lucky toto—processing your deposits, settling your wagers, confirming your withdrawals, and maintaining your account. We also use data to verify your identity, comply with anti-fraud and anti-money-laundering laws, and prevent unauthorized access to your account.

We share your data with trusted third-party service providers only as necessary. Our payment processors (who handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers) receive your payment details to complete transactions. Our identity verification partner receives your name and ID document to confirm your identity. These partners are contractually bound to protect your data and use it only for the services they provide to us.

We may share data with law enforcement or regulatory authorities if required by applicable law or court order. We do not sell your personal information to advertisers, data brokers, or other third parties. If we are acquired or merge with another company, we may transfer your data as part of that transaction, but we will notify you and provide options to opt out if the new entity's privacy practices differ materially from ours.

We at lucky toto collect only the minimum data necessary to verify your identity, process your payments, settle your wagers, and operate our platform securely in compliance with applicable regulations.

Data Retention and Security

We retain your account data for as long as your account remains active. Once you close your account, we retain transaction records, betting history, and payment documentation for seven years to comply with financial record-keeping laws. We delete your email address, password, and identity documents after one year of account closure unless law requires longer retention.

We protect your data using industry-standard encryption (HTTPS), firewalls, and secure servers. Our servers may be located outside your jurisdiction (for example, in regional data centres outside Indonesia). We do not store unencrypted payment information; payment processors handle card and wallet data directly. We require all staff with access to personal data to sign confidentiality agreements and undergo security training.

Despite our security measures, no system is completely risk-free. If we detect a data breach affecting your personal information, we notify you within a reasonable timeframe and provide guidance on steps to protect your account. We also notify relevant authorities if legally required.

Encryption standard

HTTPS encryption protects all data transmitted between your browser and our servers.

Payment security

Payment processors handle sensitive card and wallet data; we do not store full payment credentials on our servers.

Data retention

Active account data retained indefinitely; closed accounts retained per legal requirements (typically seven years for financial records).

Staff access

Only authorized personnel can access personal data; all staff sign confidentiality agreements and receive security training.

Your Rights and Contact Information

You have the right to access your personal data by logging into your lucky toto account and viewing your profile. You may request a copy of all data we hold about you by contacting our support team. You have the right to correct any inaccurate information (for example, if your name or email is wrong). You may request deletion of your data, subject to legal retention requirements (for example, we must retain transaction records for financial compliance).

If you believe we have misused your data or violated this privacy policy, you may lodge a complaint with our support team or escalate your concern to the relevant data protection authority in your jurisdiction (if one exists). We will investigate complaints within a reasonable timeframe and provide a written response.

Our services are available only where local law permits. This privacy policy is subject to the laws of our operational jurisdiction and any data protection regulations applicable to supported regions. If you access lucky toto from a jurisdiction with stricter privacy laws than ours, those local laws may provide you with additional rights beyond what we outline here.

Contacting our lucky toto support team

To exercise your data rights, request access to your information, report a privacy concern, or delete your account, contact our support team via email or live chat. Provide your account email, account username (if applicable), and a clear description of your request. We respond to data access requests within 14 business days. We respond to deletion requests within 30 days, subject to legal retention requirements and any active disputes or pending payouts on your account.

We update this privacy policy periodically to reflect changes in our practices or applicable law. We notify you of material changes by email or by displaying an updated version on our platform. Continued use of lucky toto after updates constitutes acceptance of the revised policy. If you disagree with policy changes, you may close your account and request withdrawal of your remaining balance.