laju toto Casino & Sportsbook Data Care

This page describes what we collect when you use laju toto and how we keep that data protected. We collect personal information (name, email, phone, national ID) during account registration and verification. We collect payment information (e-wallet or bank account details) during deposits and withdrawals. We collect gameplay data (bets placed, games played, account balance history) during your sessions. We do not sell this data to third parties for marketing purposes.

Our servers may sit outside your jurisdiction, but we encrypt all data in transit and at rest. We share personal information only with payment processors, compliance partners, and law enforcement when legally required. Your account password is hashed and never stored in plain text. We retain your data according to applicable law — typically five to seven years for financial records, indefinitely for account history unless you request deletion.

This policy applies to all members of laju toto, regardless of location. If you have questions about how we handle your data, contact our support team.

What we collect on laju toto

We collect several categories of data when you use our platform. During registration, we collect your email address, phone number, full legal name, date of birth, and national ID number (KTP, passport, or driver's license). We use this information to verify your identity and comply with anti-money-laundering regulations.

During deposits and withdrawals, we collect payment information — your e-wallet account details (DANA, e-wallet, mobile banking, local payment, online payment) or bank account number (e-wallet, mobile banking, local payment, online payment, or e-wallet). We do not store full card numbers or bank account details on our servers; instead, we tokenize this information and pass it to certified payment processors. The processors handle the actual transfer; we retain only a reference token.

During gameplay, we collect data about your bets, games played, stakes, outcomes, and account balance. This data is stored in your account history and is accessible only to you. We use this data to settle bets, process withdrawals, and detect fraud. We do not use this data for marketing or to profile your behavior.

How we use your data on laju toto

We use your personal data for account verification, payment processing, and compliance with anti-money-laundering and know-your-customer (KYC) regulations. We verify your identity by comparing your submitted ID against government databases and cross-checking your address. This verification is mandatory before your first withdrawal.

We use your payment data to process deposits and withdrawals. We share your payment information with certified payment processors (e-wallet providers and banks) to complete transactions. These processors are contractually bound to protect your data and use it only for payment processing.

We use your gameplay data to settle bets, calculate payouts, and maintain your account history. We also use this data to detect fraud — unusual betting patterns, rapid account cycling, or suspicious withdrawal requests may trigger manual review. If we detect fraud, we may suspend your account pending investigation.

Third-party processors and data sharing

Our platform relies on third-party processors for payment handling, identity verification, and compliance. When you deposit via mobile banking, local payment, online payment, e-wallet, or mobile banking, we route your transaction through the e-wallet provider's API. When you deposit via local payment, online payment, e-wallet, mobile banking, or local payment, we route your transaction through inter-bank clearing networks. These processors receive your payment information (account number, transaction amount, reference ID) but do not receive your full personal profile.

We use third-party identity verification services to validate your national ID and address. These services compare your submitted documents against government databases. They receive your name, ID number, and address but do not receive your email, phone, or gameplay data.

We may share aggregated, anonymized data with compliance partners and regulators. For example, we may report total transaction volumes or user counts, but we do not report individual member names, IDs, or betting patterns. This data sharing is required by law in jurisdictions where we operate.

Data security and encryption

We encrypt all data in transit using TLS (Transport Layer Security). When you log into your laju toto account, your password travels over an encrypted connection. When you submit payment information, it travels over an encrypted connection. We do not transmit sensitive data over unencrypted channels.

We encrypt all data at rest using AES-256 encryption. Your personal information, payment tokens, and account history are stored in encrypted form on our servers. Our database encryption keys are stored separately from the encrypted data, so even if someone gains access to our servers, they cannot decrypt your information without the keys.

Your account password is hashed using a one-way cryptographic function. We do not store your password in plain text, and we cannot retrieve it. If you forget your password, we cannot send it to you — instead, we send you a password reset link that allows you to create a new password.

We do not sell your data. We encrypt it. We protect it. We share it only when legally required.

Your rights and data access

You have the right to access your personal data. You can log into your laju toto account and view your profile information, payment history, and bet history. You can download your account data in a portable format by contacting our support team.

You have the right to correct inaccurate data. If your name, address, or ID information is incorrect in our system, contact our support team and we will update it. You may need to resubmit verification documents if the changes are significant.

You have the right to object to data processing for marketing purposes. We do not use your data for marketing, so this right does not apply to laju toto. However, if you receive marketing emails from us (which should not happen), you can unsubscribe by clicking the unsubscribe link in the email.

Cookies and tracking

We use cookies to maintain your login session and remember your preferences (language, theme, etc.). These cookies are essential for the platform to function. We do not use cookies for tracking or behavioral profiling.

We do not use third-party analytics services that track your behavior across the web. We do not use Google Analytics, Facebook Pixel, or similar tracking tools. We do not know what websites you visit outside laju toto, and we do not care.

You can disable cookies in your browser settings, but this may prevent you from logging into your account. We recommend keeping cookies enabled for laju toto.

Data retention and deletion

We retain your account data indefinitely — you can review your bet history from years ago if you wish. We retain your financial records (deposits, withdrawals, settlements) for five to seven years, as required by anti-money-laundering law. After this period, we may delete financial records, but we retain account history for your reference.

If you close your account, we retain your data according to the same schedule. We do not immediately delete your information; instead, we mark your account as closed and restrict access. After the legal retention period expires, we delete your data.

If you request data deletion before the legal retention period expires, we cannot comply — we are legally required to retain financial records. However, we can anonymize your data (remove your name and ID) while retaining the records for compliance purposes.

Data breaches and incident response

If we discover a data breach or security incident, we will notify affected members within a reasonable timeframe. We will describe what data was compromised, what steps we took to contain the breach, and what steps you should take to protect yourself (e.g., change your password).

We maintain incident response procedures and regularly test our security systems. We conduct penetration testing and vulnerability assessments to identify weaknesses before attackers do. We do not guarantee that breaches will never occur — no system is perfectly secure — but we take reasonable steps to prevent them.

International data transfers

Our servers may be located outside your jurisdiction. When you use laju toto from Jakarta, Surabaya, Bandung, or Medan, your data may be transferred to and stored on servers in other countries. We ensure that these transfers comply with applicable data protection law. We use standard contractual clauses and other legal mechanisms to protect your data during international transfers.

By using laju toto, you consent to international data transfers. If you do not consent, you cannot use our platform.

Contact and policy updates

If you have questions about our privacy practices, contact our support team. We will respond to your inquiry within a reasonable timeframe. If you believe we have violated your privacy rights, you can file a complaint with your local data protection authority.

We may update this privacy policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of laju toto after a policy update constitutes acceptance of the new policy. We recommend reviewing this policy periodically to stay informed about how we handle your data.

This privacy policy is effective as of the date posted on our website. We reserve the right to modify this policy at any time. If you have questions or concerns, contact our support team or visit our FAQ page for additional information.