master toto Platform Privacy Notice
This page describes what we collect when you use master toto and how we keep that data protected. We at master toto take your privacy seriously. Our commitment is to be transparent about the information we hold, how we process it, and the rights you have over your own data.
We understand that trust is essential when you access our sportsbook markets — whether you're following Liga 1, Piala Indonesia, or placing stakes on live-dealer tables. Your personal information remains confidential and is used only for the purposes we outline here. We do not sell your data to third parties for marketing. We do not share your account details with external advertisers.
Our privacy policy complies with applicable data-protection frameworks in the jurisdictions where we operate. If you have questions about how we handle your information, you can reach our support team through the channels listed at the end of this page.
What we collect on master toto
We collect several categories of data when you register an account and use our platform. Your email address, phone number, and name are required during sign-up. We also collect your date of birth and identity details — such as your national ID or passport number — as part of our account verification process. This information helps us comply with anti-money-laundering requirements and confirm your eligibility to access our services where local law permits.
When you make a deposit or withdrawal, we record the payment method you use — whether that's DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or one of our partner banks such as mobile banking, local payment, online payment, or e-wallet. We store the date, amount, and status of each transaction. We do not retain your full card or bank account number; our payment processor handles that separately under their own security protocols.
We also collect your device information — your IP address, browser type, and mobile operating system — when you access master toto. This allows us to detect fraudulent activity, prevent account takeover, and provide you with a smoother experience across different devices. If you use our mobile app or progressive web app, we may collect diagnostic data about app performance and crashes.
Cookies and tracking
We use session cookies to keep you logged in. We do not use cookies to track you across other websites. You can manage cookie preferences in your browser settings at any time.
How we use your data
- Account management: We use your name, email, and phone number to maintain your account, send you transaction confirmations, and notify you of account activity.
- Payment processing: Our payment team uses your deposit and withdrawal information to process your requests and reconcile bank statements. This data flows to our financial partners and, where required, to your bank.
- Compliance: We retain your identity documents and verification details to satisfy regulatory obligations. We may share anonymised transaction data with financial-intelligence units if legally required.
- Security: We analyse your device fingerprint, login patterns, and IP address history to identify and block unauthorised access attempts. This helps protect your account from fraud.
- Support: When you contact our customer service team, we keep a record of your inquiry, our response, and any account notes so that we can help you more quickly next time.
Third parties who may see your data
Our payment processors — the companies that handle mobile banking, local payment, online payment, e-wallet, and mobile banking transactions — receive your transaction details as part of the normal payment flow. These processors are bound by their own privacy agreements. We also share data with our banking partners (local payment, online payment, e-wallet, mobile banking) when you deposit or withdraw via bank transfer.
We may disclose your information to law enforcement or regulatory authorities if required by law. During major tournaments such as Piala AFF or Champions League, if we detect unusual betting patterns or suspected fraud, we may be obliged to report specific details to the relevant financial-crime agency in your jurisdiction.
Your rights on master toto
You have the right to request a copy of all data we hold about you. You can ask us to correct any inaccurate information — for example, if your phone number has changed or your registered address is outdated. If you close your account with master toto, you can request that we delete your personal data after the retention period required by law (typically three to seven years for financial records).
We do not sell your betting history, payment methods, or personal details to marketers or data brokers.
To exercise any of these rights, contact our support team using the methods listed below. We will respond within thirty days. Our servers may be located outside your jurisdiction, but the data we hold about you is protected by the same standards regardless of where it is stored.
Data retention
We keep your account information as long as your account is active. After you close your account, we retain transaction records for the minimum period required by financial-crime legislation — typically five to seven years. We delete your password hash and login history after twelve months of account inactivity. Your identity documents are securely destroyed once they are no longer needed for compliance purposes, unless we are legally obliged to retain them longer.
Contact us about your data
If you have questions about how we use your data, want to request a copy of your information, or believe we have mishandled your privacy, our support team is available to help. You can reach us through live chat in the master toto app, or by emailing our data-protection coordinator at the address listed in our contact section. We will acknowledge your request within three business days and provide a full response within thirty days.