Can I download a copy of my personal data?

Yes. Submit a data request through your account settings or email support@excototo.app. We'll provide a complete export within 14 days in a standard format.

LEGAL REFERENCE

Your Data. Your Control. Our Commitment.

We built excototo around your trust. This privacy policy shows exactly how we collect, use and protect your personal information — from account signup through every deposit, withdrawal...

Data SecurityPayment PrivacyAccount ProtectionTransparencyYour Rights

See the Lobby Read FAQ

How We Handle Your Information

excototo collects personal data to operate your account, process transactions via DANA, OVO, GoPay and QRIS, and comply with local regulations in supported Indonesian regions. We encrypt sensitive information, limit staff access to what's necessary, and never sell your details to third parties. Your data stays with us unless you request deletion or local law requires disclosure. We review this policy regularly

and notify you of material changes.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Questions About Your Privacy

REVIEW SIGNALS

Why This Policy Matters to You

Encryption Standard

All payment data and account credentials use industry-standard TLS encryption, protecting your DANA, OVO, GoPay and QRIS transactions from interception.

No Third-Party Sales

We never sell your personal information to advertisers, data brokers or unrelated companies — your profile stays yours alone.

Audit Trail

Every login, deposit and withdrawal is logged and tied to your account, so you can verify activity and spot unauthorized access.

Compliance Ready

Our policy aligns with Indonesian data protection standards and payment regulations, ensuring your rights are recognized and enforced.

Breach Response

If we detect unauthorized access to your account or payment details, we notify you immediately and guide you through recovery steps.

Annual Review

We audit our data practices yearly and update this policy to reflect new security measures, payment methods and regulatory changes.

Consistency Across Our Platform

Account Privacy	Your login credentials and profile data follow the same encryption and access controls whether you're on mobile, desktop or tablet.
Payment Data	DANA, OVO, GoPay and QRIS transactions are protected by the same security standards as your account balance and withdrawal history.
Session Security	Live casino tables, slot lobbies and sportsbook markets all operate under identical privacy and data-handling rules — no exceptions.
Cookie Policy	We use cookies to remember your preferences and keep you logged in, but never to track you across unrelated websites or apps.
Third-Party Tools	Analytics and fraud-detection services we use are bound by the same confidentiality agreements as our internal teams.
Retention Schedule	Account data is kept for the duration of your membership plus seven years for regulatory compliance, then securely deleted.
Dispute Resolution	If you believe your privacy rights have been violated, you can escalate through our support team or contact local Indonesian authorities.

PLATFORM SNAPSHOT

What Shapes Our Privacy Approach

Indonesia-First Design We built this platform for Indonesian players, so our privacy rules reflect local expectations, payment habits and regulatory requirements.

Mobile-Centric Security Most of you access excototo on your phone, so we prioritize mobile app security, biometric login options and one-tap session controls.

E-Wallet Integration DANA, OVO, GoPay and QRIS are woven into our privacy framework — your e-wallet data never leaves your device unless you authorize a transaction.

Transparent Logging Every action tied to your account is timestamped and stored, so you can review your own activity history and spot anything unusual.

Minimal Data Collection We ask only for information needed to verify your identity, process payments and meet regulatory obligations — nothing extra.

Your Deletion Right Once you close your account, we delete your personal data within 30 days unless local law requires us to retain records for compliance.

Privacy Questions We Hear Often

Your e-wallet credentials never touch our servers. When you deposit, we redirect you to the payment provider's secure gateway, then receive only a confirmation token. Your actual payment details stay encrypted on their platform.

No. We see only the transaction amount and confirmation code. Your e-wallet balance, transaction history and other account details remain private between you and your payment provider.

We delete your personal information within 30 days of closure, except for records we're required to keep for tax or anti-fraud compliance. You can request a final data export before deletion.

No. Your data stays within excototo unless you explicitly authorize a third-party service or local law requires disclosure to authorities in supported regions.

We review it annually and whenever we add new payment methods, change data practices or respond to regulatory updates. We'll email you about material changes before they take effect.

Yes. Submit a data request through your account settings or email [email protected]. We'll provide a complete export within 14 days in a standard format.

Contact support immediately with the date and time of the activity. We'll review your login history, freeze your account if needed and guide you through recovery steps.