Your Data Stays Yours
We built totogp around one principle: your account, your payments, your privacy. Every piece of information you share — from your QRIS details to your betting history —...
What We Collect & Why
When you open your totogp account, we collect your name, email, phone number and payment details to verify your identity and process deposits via DANA, OVO, GoPay and QRIS. We also track your gameplay, session times and betting patterns to improve our platform, detect fraud and comply with local regulations in supported Indonesian regions. We never share this data with advertisers or
data brokers. Your information stays within our secure systems and is deleted according to our retention schedule.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
How We Earn Your Trust
Encryption Standard
All data in transit and at rest uses AES-256 encryption. Your QRIS, DANA, OVO and GoPay details are tokenized so we never store raw payment credentials on our servers.
Regular Audits
We conduct quarterly security audits and penetration testing to identify vulnerabilities before they become threats. Results are reviewed by our compliance team and external partners.
Data Minimization
We collect only what's necessary to run your account and process your bets. Unnecessary data is deleted automatically after 90 days unless you request longer retention.
Staff Training
Every totogp employee with access to user data completes privacy and security training annually. Violations result in immediate access revocation and disciplinary action.
Incident Response
If a breach occurs, we notify affected users within 24 hours with details of what was compromised and steps we've taken to prevent recurrence.
Third-Party Vetting
Any vendor we work with — payment processors, hosting providers, analytics tools — signs a data processing agreement and meets our security standards before access is granted.
Consistency Across Our Platform
| Mobile App | The privacy protections in this policy apply equally to our iOS and Android apps. Data syncs securely between your phone and desktop account. |
|---|---|
| Live Casino Tables | When you join a live dealer session, your video feed and chat are encrypted end-to-end. We don't record your face or voice without explicit consent. |
| Sportsbook Markets | Your betting slips and market history are private. We don't share your sports preferences with third-party analytics or marketing platforms. |
| Slot Lobbies | Your slot play history and favorite games list stay on your account. We use this data only to personalize your lobby view and improve game recommendations. |
| Payment Processing | DANA, OVO, GoPay and QRIS transactions are processed through PCI-DSS compliant gateways. We never see your full payment credentials, only a secure token. |
| Account Closure | When you close your totogp account, we delete your personal data within 30 days. Betting records required by law are anonymized and retained separately. |
| Cookie Policy | We use cookies only for session management and fraud prevention. No tracking cookies follow you across the web. You can disable non-essential cookies anytime. |
What Defines Our Privacy Approach
Zero-Knowledge Architecture
Our systems are built so that even totogp staff cannot access your raw payment data or betting history without your explicit request. Encryption keys are held separately.
Transparent Logging
Every access to your account is logged with a timestamp and reason. You can review this audit trail in your account settings to spot unauthorized activity.
Consent-First Design
We ask permission before using your data for anything beyond account operation. Marketing emails, game recommendations and analytics are all opt-in, not opt-out.
Portable Data
You can request a complete export of your totogp data in machine-readable format. This includes your account details, transaction history and betting records.
Right to Deletion
You can request deletion of your account and all associated data at any time. We process these requests within 14 days, subject to legal retention obligations.
Privacy by Default
Your account is private by default. Your betting history, favorite games and payment methods are never visible to other users or shared on leaderboards.