Reference

Your account, your data, your control

When you open an account at sobat toto, we're transparent about how we handle your personal information, verify your payments, and keep your account secure.

Account verification & securityPayment method protectionData retention claritySupport contact paths
sobat toto Your account, your data, your control
REACH OUR TEAM

How to contact us about legal matters

We're available across multiple channels so you can ask about your account rights, data requests, or any policy question in real time. Our support team in Jakarta handles escalations personally, and we respond to formal data-access requests within 10 business days.

Team online

Live Chat

Open 24/7 in the account sidebar. Ask about account verification, withdrawal holds, or data deletion requests in real time without waiting.

Email Support

Send formal requests to our legal-support inbox. Formal data-access requests, account closures and regulatory inquiries are logged and answered within 10 business days.

Account Settings

Review your personal data, payment methods and activity logs directly in the Security tab. Request export or deletion there without contacting support first.

DATA & SECURITY

How we protect your account and information

Your account security is built on verified login credentials and optional two-factor authentication. We encrypt all data in transit (HTTPS/TLS) and store sensitive account details in isolated, access-controlled databases.

Encryption & Storage

All data moves over HTTPS. Passwords are hashed. Payment card tokens are isolated and never stored in plaintext. Your account database is encrypted at rest and access-logged.

Two-Factor Authentication

Enable 2FA in Account Settings to add a PIN or authenticator app step on login. Protects against unauthorized access even if your password is compromised.

Session & Cookies

We use session cookies to keep you logged in. You can clear them in your browser settings anytime. Cookies are not used for payment or identity storage.

Withdrawal Verification

Withdrawal requests to a new bank account or DANA, OVO, GoPay ID trigger a manual review. We may contact you to confirm the request, preventing fraud.

Data Retention

Your account data stays on file while your account is active. We retain records 12 months after you close your account, then delete them unless we face a legal hold.

Your Data Rights

You can request an export of your personal data, request deletion of non-essential data, or download your account history through Account Settings or live chat.

Frequently asked questions about legal rights and data

We collect your name, email, phone number, date of birth and residential address to verify your identity and comply with payment regulations. You'll also set a username and password. This information is used to process deposits via DANA, OVO, GoPay and QRIS and to flag withdrawals to new accounts.

Yes. Go to Account Settings → Security → Data Export, or contact live chat. We will email you a CSV file of your account details, transaction history and personal information within 5 business days. You can also request deletion of non-essential data there.

We retain your account records for 12 months after closure. This supports dispute resolution, tax compliance and fraud investigation. After 12 months, we delete personal data unless we are under a legal hold or regulatory investigation.

Withdrawal requests to a new account are flagged for manual review. Our team may contact you via email or phone to confirm the request. This protects your account from unauthorized transfers. Verification typically takes 24 hours.

No. We use tokenization: your payment provider (DANA, OVO, GoPay, QRIS or your bank) stores your full card or account details. We store only a token that links your account to that payment method, so we never see your full card or bank number.

You can close your account in Account Settings → Account Closure. We will immediately deactivate your login. Personal data is retained for 12 months for regulatory reasons, then deleted. You can request earlier deletion of non-essential data by contacting live chat.

We use cookies to maintain your login session and remember your preferences. Cookies do not contain payment or identity data. You can disable cookies in your browser settings; you'll then need to log in again after each session. Functional cookies are required for the lobby to work.