daffatoto Casino & Sportsbook Data Care
This page describes what we collect when you use daffatoto and how we keep that data protected. We take data security seriously because your personal information—email, name, payment details, ID documents—is essential to our service and must be handled responsibly. We collect only what is necessary for account opening, payment processing, regulatory compliance, and customer support.
We at daffatoto do not sell your data to third parties for marketing. We share information only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and regulatory authorities where required by law. Your data is encrypted during storage and transmission. We retain it only as long as needed—typically seven years for regulatory purposes after account closure.
This privacy policy applies to all daffatoto users regardless of location. If you access daffatoto from Jakarta, Surabaya, Bandung, Medan, Semarang, or elsewhere, the same protection applies. If you have questions about how we handle your data, contact our support team.
What Data We Collect from daffatoto Users
We collect personal data at account opening and during ongoing use of daffatoto. At registration, we require your full name, email address, date of birth, phone number, and a government-issued ID (such as a national identity card or passport). We use this information to verify your identity, prevent fraud, and comply with know-your-customer (KYC) regulations in our service areas.
During account use, we collect information about your deposits, withdrawals, game activity, and login history. We record which games you play, your tournament participation, and your sportsbook bets. We also collect your IP address, device type, and browser information. This data helps us detect unauthorized access, investigate disputes, and improve our platform.
When you contact our support team, we record your messages and our responses. When you report a dispute or complaint, we document all details. This information remains in your account file so we can provide consistent support and resolve issues accurately.
- Account data
- Name, email, date of birth, phone, government ID, address verification documents.
- Transaction data
- Deposits, withdrawals, payment method used, settlement confirmation, timestamp.
- Activity data
- Game plays, tournament entries, sportsbook wagers, tournament scores, support inquiries.
- Technical data
- IP address, device identifier, browser type, login times, session duration.
How We Use Your Data on daffatoto
We use your data for essential platform operations. We verify your identity to prevent account fraud and ensure only legitimate owners access funds. We process your deposits and withdrawals using your payment information. We use your email to send account notifications, tournament results, and support responses. We retain transaction records to comply with Indonesian financial regulations and anti-money-laundering (AML) standards.
We analyze activity data to detect suspicious behavior—for example, multiple login attempts from different countries in a short timeframe, or deposits from payment methods not registered to you. If we detect unusual activity, we may freeze your account temporarily and contact you for verification. This protects you from account takeover.
We do not use your data for marketing purposes without your explicit consent. We do not sell your email or contact details to third parties. We do not profile you based on game preferences or betting patterns to target advertisements at you.
Our Data Sharing Practices
We share your data only with essential partners. Payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your payment details and transaction records to process deposits and withdrawals. These processors may also be required by their regulators to retain your data. We do not control how they use it beyond payment processing—check their privacy policies for details.
We share data with regulatory authorities if required by law. If an Indonesian financial regulator, tax authority, or law enforcement agency requests information about your account, we comply. We do not notify you of these requests unless permitted to do so.
Our support team may share your data internally when handling disputes or complaints. For example, if you report a deposit that never arrived, our technical team accesses your transaction records to investigate. This is internal to daffatoto and does not involve third parties.
Data Security and Encryption
All daffatoto deposits and withdrawals occur over HTTPS encryption. Your password is never transmitted or stored in plain text. Payment card or bank account details are encrypted and never displayed in full on your screen—only the last four digits are shown for verification. Your ID documents are scanned and stored on encrypted servers with limited access.
We use firewalls and intrusion detection to prevent unauthorized access to our systems. Our servers sit in data centers with physical security controls. We conduct regular security audits and penetration testing to identify vulnerabilities.
If we discover a data breach affecting daffatoto users, we investigate immediately and notify affected users via email. We work with relevant authorities and assist you in protecting your account. We do not cover financial losses from breaches we fail to prevent through negligence—we maintain cyber liability insurance to cover our obligations.
Data Retention and Your Rights
We retain your account data for seven years after you close your account. This is required by Indonesian financial regulations. After seven years, we delete personal information except for aggregate statistical data. We retain your payment transaction history for seven years; you cannot access the full details after account closure, but your payment processors may retain them longer per their own regulations.
You have the right to request access to all data we hold about you on daffatoto. Contact our support team with your account details and we provide a copy of your information within ten business days. You have the right to request correction of inaccurate data. If we discover errors in your account (incorrect name, birthdate, etc.), we correct them immediately and notify you.
You have the right to request deletion of your account and personal data, subject to legal holds. If you owe daffatoto funds or are involved in an active dispute, we cannot delete your data until the matter is resolved. If your account is in good standing, we process deletion requests within 30 days.
Cookies and Tracking
We use cookies to remember your login session and preferences. These cookies are stored on your device and contain a session token—not sensitive information like passwords. We use analytics cookies to track how users interact with daffatoto so we can improve the interface and fix bugs. These cookies do not contain personal identifiers.
You can disable cookies in your browser settings, but some daffatoto features may not work properly without them. We do not use third-party tracking services like Google Analytics that identify individual users. Our analytics aggregate activity data without linking it to identities.
Jurisdiction and Data Transfers
Our servers are located in supported jurisdictions. If you access daffatoto from outside Indonesia, your data may be transferred to our processing centers. We comply with Indonesian data protection standards regardless of where your data physically resides. If you object to data transfers, you cannot use daffatoto—contact our support team if you have concerns.
Privacy Policy Updates
We may update this privacy policy from time to time. We notify users of material changes via email and account notification at least 30 days before they take effect. Continued use of daffatoto after notification constitutes acceptance of the updated policy. If you disagree, you may close your account.
Contact daffatoto
If you have questions about how we handle your data on daffatoto, contact our support team. We respond in English and Indonesian during business hours. You can also request a formal data subject access request (DSAR) in writing—we process these within ten business days. Send your request to our registered support email.