daffatoto Casino & Sportsbook Data Care

This page describes what we collect when you use daffatoto and how we keep that data protected. We at daffatoto treat your personal information as a core part of our service—not as an afterthought or compliance checkbox. When you create an account, deposit via DANA or e-wallet, or place a bet on Liga 1 matches, we handle that data with the same care we apply to your account security and withdrawal flow.

Our privacy practice rests on three commitments. First, we collect only the data we need to run the platform—your email, proof of identity, and payment history. Second, we do not sell your data to third parties. Third, we give you direct control: you can request access to what we hold, ask us to correct it, or ask us to delete it once your account is closed and any withdrawal disputes are resolved.

Our servers may sit outside your jurisdiction; we store some data in regional data centres and some with backup processors. We disclose each processor's role so you know where your information goes. This page sets out the detail.

What we collect and why

We collect data in three categories. Account data includes your email, phone number, name, date of birth, and residential address. We need this to create your daffatoto account and verify your identity before you can withdraw funds. Payment data includes the payment method you use (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the amounts you deposit and withdraw, and transaction dates. We store this to process your transfers, detect fraud, and comply with anti-money-laundering rules that apply in your jurisdiction. Activity data covers which games you play (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways, or live-dealer tables), how long you stay on daffatoto, and what device you use.

We do not log your keystroke patterns, screen recordings, or voice data. We do not collect your location via GPS unless you give us explicit permission.

We use account and payment data to protect your account. If you forget your password, we verify your identity through your registered email or your phone number before we let you reset it. If we detect suspicious withdrawals—for example, a request to send funds to a bank account in a different name—we pause the transfer and contact you. This is why accurate data matters: a phone number that bounces or an email that no longer works can lock you out of your own account recovery.

Third-party processors on daffatoto

We do not process payments ourselves. When you deposit via mobile banking, local payment, online payment, or any other method, those companies handle the transaction. We receive confirmation that the deposit arrived, but e-wallet and mobile banking hold your payment details, not us. We share your name and amount with them so they can process the payment. We do not give them permission to use your data for marketing.

We also use a document-verification service to check your KYC upload (your KTP and proof of address). That service scans your documents for validity—checking that the ID number is real and the address is readable—then deletes the images after verification. We keep only a record that you passed verification, not the images themselves.

Cookies

We use session cookies so you stay logged in while you play. We do not use tracking cookies or third-party analytics cookies that follow you across the web.

Device data

We log your device type (mobile, tablet, desktop) and browser to help you recover your account and to check for fraud patterns across daffatoto accounts.

Retention

We keep your account and payment data for five years after your account closes, to comply with tax and anti-money-laundering law. Activity logs (gameplay records) are kept for two years.

Your rights and our commitments

You have the right to ask us what data we hold about you. You can request a copy of your account history, deposit and withdrawal records, and gameplay logs. We provide this within fourteen days. You also have the right to ask us to correct data if it is wrong—for example, if your address changed and we have an old one on file. If you want us to delete your data after your account is closed, we do so except where law requires us to keep records (tax records, dispute records, and anti-money-laundering compliance data must be retained).

To exercise these rights, contact our support team during business hours. We are based in Jakarta but operate across supported Indonesian jurisdictions. Our multilingual team answers in English, Indonesian, and Mandarin. If you are unhappy with how we handle your data request, you can lodge a complaint with the data protection authority in your jurisdiction.

We update this policy from time to time. If we make a material change—for example, if we start sharing data with a new processor or change how long we store gameplay records—we will notify you by email or by posting a notice on daffatoto. We do not sell your data. We do not share your data with advertisers or third-party marketing companies. Our commitment stands: your information stays with daffatoto and the processors we name here.

Questions about your data

If you have questions about this policy, or if you want to submit a data access request, contact us at [email protected]. Our team will respond within four business hours during office hours (weekdays, Jakarta time). For urgent account-recovery requests, you can also contact our main support channel, and we will escalate your data concern to our privacy team.