Reference

How 500toto Handles Your Personal Data

When you open an account with us, we collect only what we need to run your wallet, process your DANA, OVO or GoPay transactions, and keep your session secure.

Data collected only for account operationDANA, OVO, GoPay transaction records protectedYou can request access or deletionNo data sold to third partiesContact support to update your details
500toto How 500toto Handles Your Personal Data
REACH US DIRECTLY

How to Contact Us About Your Privacy

If you have a question about your data, want to see what we hold, or need to correct something on your account, our support team handles privacy requests directly. Reach us through any of the channels below and tell us your registered account email or phone number so we can locate your record without delay. Players in Yogyakarta and across Indonesia can use the same contact paths.

Live Chat Start a chat session from the account dashboard. Share your registered email and state your privacy request clearly so the team can route it to the right desk.
Email Support Send your data access, correction or deletion request to our support email. Include your registered phone number or wallet ID linked to DANA, OVO or GoPay.
Account Help Page Log in, go to Account Settings, and use the Data Request form. You can submit a subject-access request or flag a data concern directly from your profile page.
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

We apply a layered approach to data security — not just a single lock. Every login session uses encrypted connections, and account changes trigger an OTP sent to your registered mobile number. Payment data tied to DANA, OVO or GoPay flows through encrypted channels and is never stored on our servers in plain text. Cookie data is used to keep your session active and remember your lobby preferences; it is not used to build advertising profiles. If you want to clear stored cookies, you can do so through your browser or mobile app settings at any time.

Encrypted Sessions

Every account login and payment action runs over an encrypted connection. Session tokens expire automatically after a period of inactivity to reduce exposure from unattended devices.

OTP Verification

Account changes — including password resets and withdrawal requests — require a one-time passcode sent to your registered number, adding a second layer beyond your password alone.

Cookie Policy

We use session cookies to keep you logged in and functional cookies to remember your game lobby state. No third-party advertising cookies are placed without your consent.

Data Retention Limits

We do not hold your data longer than necessary. Active account data is kept while your account exists; once you close your account, personal identifiers are removed within the period local rules require.

Your Privacy Questions, Answered

These are the questions we hear most from account holders about how their data is managed. If your question is not covered here, reach out through live chat or the account help page and we will respond with the specifics of your account situation.

We collect your name, email, phone number and date of birth at registration. When you transact, we log payment references from DANA, OVO or GoPay — not your full wallet credentials or PIN.

We share data only with payment processors needed to complete your transaction and with authorities where Indonesian law requires it. We do not sell your data to advertisers or marketing companies.

Log in, go to Account Settings and use the Data Request form. Alternatively, contact support by email or live chat with your registered phone number and we will provide a summary of your data.

Yes. Submit a deletion request through Account Settings or via our support email. We will remove personal identifiers within the timeframe local rules allow, unless a legal obligation requires us to retain specific records.

Payment references travel over encrypted connections and are stored in hashed form — never as plain text. Only the transaction reference and timestamp are retained; your e-wallet PIN is never seen or stored by us.

Contact our support team immediately via live chat or email. You also have the right under applicable local law to raise a concern with the relevant data authority in Indonesia where local rules permit.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.