ilmu totoPrivacy Policy

This page describes what we collect when you use ilmu toto and how we keep that data protected. We collect personal information only to verify your account, process your deposits and withdrawals, and comply with local financial regulations. We do not sell your data to third parties, and we do not use your information for marketing purposes beyond service notifications.

Our privacy commitments apply to all users of ilmu toto, regardless of whether you access our platform via Android app, iOS browser, or desktop web. We store your data on encrypted servers and limit access to our compliance and finance teams. This policy explains what we collect, how long we keep it, and what rights you have to access or delete your information.

If you have questions about how we handle your data, you can contact our support team at any time. We respond to data requests within 14 days.

What data we collect on ilmu toto

Account registration and identity verification

When you create an account on ilmu toto, we collect your email address, a password you choose, and your full name. We do not collect your phone number at registration, but we ask for it during KYC verification so we can send you security alerts and withdrawal confirmations.

For identity verification, we ask you to upload a photo of your national ID card and a selfie holding the document. We store these images in an encrypted format on servers that are not accessible from the public internet. We retain identity documents for 12 months after your account is closed, then delete them. We do not share your documents with third parties outside our compliance team.

Payment and transaction data

We collect information about every deposit and withdrawal you make on ilmu toto. This includes the payment method you used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the amount, the date, and the status of the transaction. We do not store your full payment card or e-wallet credentials—we store only a reference code that links to your payment processor's records.

We use this transaction data to detect fraud, prevent money laundering, and comply with financial reporting requirements. We share transaction summaries with our payment processors and, if required by law, with financial authorities in your jurisdiction.

Game activity and account balance

We log every bet you place, every game round you participate in, and every balance change in your account. This data is stored in your account history and is available for you to review at any time. We use this data to settle disputes, detect unusual account activity, and comply with gaming regulations.

We do not use your game activity data for marketing or profiling. We do not sell this data to third parties. We do not share your betting history with other players or with external analytics companies.

Device information

We collect your device type, operating system, and IP address to detect fraud and to ensure our platform works correctly on your device.

Cookies and tracking

We use session cookies to keep you logged in. We do not use tracking cookies or third-party analytics that follow you across the web.

Support communications

If you contact our support team, we keep a record of your message and our response. We use this data only to resolve your issue and to improve our support process.

How we protect and use your data

Data security and encryption

We encrypt all data in transit using TLS 1.2 or higher. We encrypt sensitive data at rest, including identity documents and payment references. Our servers are located in data centres with physical security controls and 24/7 monitoring. We do not store passwords in plain text—we hash them using industry-standard algorithms.

We conduct regular security audits and penetration testing to identify vulnerabilities. If we discover a data breach, we notify affected users within 72 hours and provide guidance on how to secure their account.

Third-party processors and data sharing

We share your data with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) only to the extent necessary to process your deposits and withdrawals. We share transaction data with financial authorities if required by law. We do not share your data with marketing companies, data brokers, or any other third party without your explicit consent.

Our servers may be located outside your jurisdiction. By using ilmu toto, you consent to your data being processed in jurisdictions where we operate, subject to the protections described in this policy.

Your rights and data access

You have the right to request a copy of all personal data we hold about you. You can request this through our support channel, and we will provide it within 14 days. You also have the right to request that we delete your data, subject to legal retention requirements. If you request account closure, we delete your account data after 12 months, except for transaction records which we retain for 7 years for regulatory compliance.

You can update your registered email address, phone number, and password at any time through your account settings. If you believe we have mishandled your data, you can file a complaint with your local data protection authority.

Cookies and local storage

We use session cookies to maintain your login state while you use ilmu toto. These cookies expire when you close your browser. We do not use persistent cookies or third-party tracking cookies. We do not store sensitive data in browser local storage.

Policy updates and contact

We may update this privacy policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of ilmu toto after an update constitutes acceptance of the revised policy.

If you have questions about this privacy policy or how we handle your data, contact our support team. We are available to respond to data requests from users in Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, and other supported jurisdictions. Our services are available only where local law permits. We do not offer our services in jurisdictions where online gaming is prohibited by law.