Reference

Understanding bangtoto's Legal Framework

We've built bangtoto with clear policies on how your account works, where your data goes, and how we handle withdrawals and disputes.

Account Rights & DataPayment & Withdrawal RulesSecurity & Privacy
bangtoto Understanding bangtoto's Legal Framework
REACH OUR LEGAL TEAM

How to Contact Us About Policy or Account Rights

Team online

Email Support

Send account or data queries to [email protected]. Our team replies within one business day on weekdays and within 48 hours on weekends.

Live Chat — Policy Desk

Open the chat widget in your account lobby and select 'Legal & Disputes'. Available Monday–Friday 08:00–20:00 Indonesia time for immediate clarification on terms.

Account Appeal Request

If your account is restricted or closed, submit a formal appeal via your account settings under 'Account Status'. We review appeals within three business days.

HOW WE PROTECT YOU

Data Security, Cookies and Account Access

Encryption & Data Storage

All transactions and account information are encrypted in transit and at rest using TLS 1.2 or higher. Servers are located in Indonesia where local law permits and isolated from public networks.

Cookie & Session Policy

We use session cookies to keep you logged in and analytics cookies to track site performance. You can disable non-essential cookies in your browser; login will still work. Cookies expire after 90 days of inactivity.

Account Verification

Your identity is verified at signup and before any withdrawal. We cross-check your name, phone number and ID document against our records. Verification typically completes within one hour on business days.

Withdrawal Verification

Withdrawals to DANA, OVO, GoPay or QRIS are verified against your deposit account to prevent fraud. Funds clear within two hours once approved. You can request a withdrawal history from your wallet page anytime.

Data Retention & Deletion

After account closure, we retain minimal data (ID number, deposit total) for regulatory purposes for two years. Personal details are deleted after 30 days unless local law requires longer retention.

Your Rights & Requests

You may request a copy of your data, correct personal details, or request account deletion. Email [email protected] with 'Data Request' in the subject line. We respond within five business days.

Frequently Asked Questions About Policy and Rights

Your account remains active and your balance is held. No inactivity fees apply. However, if you request account closure and do not log in within 12 months of closure, we may archive your data according to local retention laws. You can reactivate by logging in anytime.

Yes. Log into your account, open the 'Wallet' or 'History' tab, and download a CSV or PDF statement. Statements show all deposits, withdrawals, and game activity by date. You can also request a certified statement from [email protected] for official documentation.

We may restrict or close accounts if we detect fraud, age misrepresentation, or violation of our terms. You will receive an email notification with the reason. You may appeal the decision within 14 days by submitting a request in your account settings.

Go to 'Account Settings' in your profile, then 'Personal Details'. Update your phone or email and confirm via OTP sent to your current number. Payment account changes require re-verification for security. Changes take effect within one hour.

We share only the minimum required information with your bank (payment provider) to process DANA, OVO, GoPay or QRIS deposits and withdrawals. We do not share account data with other third parties unless required by law or court order where local law permits.

Contact our Disputes team via live chat or email [email protected] within 30 days of the transaction. Provide your account number, transaction ID and description of the issue. We investigate and respond within five business days. If unresolved, depends on local law for further options.

We send account notifications (verification codes, withdrawal confirmations) automatically. Promotional emails or SMS are sent only if you opt in via your notification preferences. You can disable all marketing communications anytime in settings without affecting account access.