dua toto Privacy Policy

This page describes what we collect when you use dua toto and how we keep that data protected. We take your privacy seriously. We do not sell your information to third parties, we do not share your payment details with advertisers, and we do not use your data for purposes beyond running our platform and complying with law.

When you create an account on dua toto, deposit funds through DANA, e-wallet, mobile banking, local payment, or your bank, or place a bet on Liga 1, Piala AFF, or any of our live-dealer tables, we collect certain information. This policy explains what we collect, how we use it, who has access to it, and what rights you have over your data.

Our privacy practices apply to all users of dua toto, whether you access our platform from Jakarta, Surabaya, Bandung, Medan, Semarang, or any other supported jurisdiction. If you have questions about this policy or how we handle your data, contact our support team.

What We Collect

We collect information in several categories. First, account information: your email address, phone number, full name, date of birth, and address. We require this to verify your identity and comply with anti-money-laundering (AML) regulations. Second, identity documents: a photo of your ID (KTP, passport, or driver's license) and a live selfie. We use these to confirm you are who you say you are. Third, payment information: the payment method you use to deposit (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details). We do not store your full card number or bank password—we only store the payment method type and the last few digits for your reference.

Fourth, activity data: your bet history, game results, account balance, login times, and IP address. We collect this to operate our platform, detect fraud, and resolve disputes. Fifth, device information: your phone model, operating system, app version, and browser type. We use this to optimize our mobile app and website for different devices. Sixth, communication data: any messages you send to our support team, including attachments. We keep these to resolve your issue and improve our service.

How We Use Your Data

We use your data for the following purposes. First, account management: we use your email and phone to send you account notifications, password resets, and security alerts. Second, identity verification: we use your ID and selfie to confirm you are eligible to use dua toto and to comply with KYC (Know Your Customer) regulations. Third, payment processing: we use your payment method to process deposits and withdrawals. Fourth, fraud prevention: we analyze your activity to detect suspicious patterns, such as multiple failed login attempts or unusual betting behavior.

Fifth, customer support: we use your communication history to resolve issues and improve our service. Sixth, legal compliance: we use your data to comply with anti-money-laundering (AML) laws, tax regulations, and other legal requirements. Seventh, platform improvement: we analyze aggregate data (not linked to you personally) to understand how players use dua toto and to optimize our games, payment methods, and user interface.

Account data

Used for identity verification, account management, and legal compliance.

Payment data

Used to process deposits and withdrawals; never shared with third parties for marketing.

Activity data

Used to detect fraud, resolve disputes, and improve our platform.

Device data

Used to optimize our mobile app and website for different devices and browsers.

Third-Party Processors

We use third-party service providers to help us operate dua toto. These include payment processors (to handle mobile banking, local payment, online payment, e-wallet, and bank transfers), identity verification services (to confirm your ID and selfie), and cloud hosting providers (to store your data securely). We only share the minimum data necessary for each service to do its job. For example, we share your payment method with our payment processor, but we do not share your bet history or game results.

All third-party processors are bound by confidentiality agreements. They may not use your data for their own marketing or sell it to other companies. Our servers may sit outside your jurisdiction (for example, in Singapore or the United States), which means your data may be transferred across borders. By using dua toto, you consent to this transfer. If you do not consent, you should not use our platform.

Your Rights

You have the right to access your data. You can log into your dua toto account and view your personal information, payment history, and bet history anytime. You have the right to correct your data if it is inaccurate. If your address or phone number has changed, you can update it in your account settings. You have the right to request deletion of your data, subject to legal requirements. If you want to close your account and have your data deleted, contact our support team. We may retain some data for legal or fraud-prevention purposes even after you request deletion.

You have the right to object to certain uses of your data. For example, if you do not want to receive marketing emails, you can opt out in your account settings. You have the right to data portability: we can provide your data in a machine-readable format so you can transfer it to another service. To exercise any of these rights, contact our support team with your request.

Cookies and Tracking

Our website and mobile app use cookies and similar tracking technologies. Cookies are small files stored on your device that help us remember your login status, your language preference, and your account settings. We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until you delete them). We do not use cookies to track you across other websites or to build a profile of your browsing habits outside dua toto.

You can disable cookies in your browser settings, but this may affect your ability to use dua toto. Our mobile app does not use cookies in the same way as our website, but it does store similar information locally on your phone to remember your login status and preferences.

Data Security

We protect your data with encryption, firewalls, and access controls. Your password is hashed (not stored in plain text) so even our staff cannot see it. Your payment details are encrypted and stored separately from your account information. Your bet history and account balance are encrypted at rest and in transit. We conduct regular security audits and penetration tests to identify and fix vulnerabilities.

However, no security system is perfect. If we discover a data breach, we will notify you and our regulators as required by law. We recommend enabling two-factor authentication (2FA) on your dua toto account for extra protection. We also recommend using a strong, unique password and not sharing your login details with anyone.

Data Retention

We retain your data for as long as your account is active and for a period after you close it. Account information (name, email, phone) is retained for at least three years after account closure to comply with AML and tax regulations. Bet history and transaction records are retained for at least five years. Payment information is retained for at least one year after your last transaction. If we are involved in a legal dispute or regulatory investigation, we may retain your data longer.

You can request deletion of your data at any time, subject to legal requirements. Contact our support team to start the deletion process. We will delete your data within 30 days unless we are required by law to retain it.

Contact dua toto

If you have questions about this privacy policy, how we handle your data, or if you want to exercise your rights (access, correction, deletion, portability), contact our support team. We are available in English and will respond to your request within 14 days. You can also contact us if you believe we have violated your privacy rights or if you want to file a complaint with your local data protection authority.

This privacy policy is effective as of the date it was last updated. We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. Your continued use of dua toto after we post changes means you accept the updated policy.