LEGAL REFERENCE

Your privacy is how we build trust

We handle your personal information, account details and payment data with care. This policy explains exactly what we collect, how we use it and the safeguards we've put...

Data ProtectionAccount SecurityPayment SafetyTransparencyYour Control
Tour the Lobby Read FAQ
ratutoto Your privacy is how we build trust

What we collect and why

When you open an account with us, we collect information needed to verify your identity, process deposits and withdrawals, and keep your account running smoothly. This includes your name, email, phone number, date of birth and payment details. We also track how you use the lobby—which games you explore, your session times and betting activity—so we can improve the experience and detect

unusual account behaviour. In supported Indonesian regions, we comply with local payment regulations and data-protection standards. We never sell your data to third parties. Your information stays within ratutoto's systems and trusted payment partners.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Questions about your privacy

Email Support Reach our privacy team at [email protected] with any...
Account Settings Log into your account and navigate to Settings...
Data Request Form Submit a formal data access or deletion request...
PLATFORM TRUST SIGNALS

How we protect your data

Encryption Standard

All data transmitted between your device and our servers uses TLS 1.2 or higher. Payment details are encrypted end-to-end and never stored in plain text on our infrastructure.

Payment Partner Vetting

We work only with DANA, OVO, GoPay and QRIS providers that meet strict security and compliance benchmarks. Each partner undergoes annual security audits.

Access Controls

Staff access to your personal data is role-limited and logged. Only teams handling account support or fraud prevention see sensitive information when needed.

Breach Response

If a security incident affects your account, we notify you within 48 hours with details, recommended actions and free monitoring support.

Regular Audits

Third-party security firms audit our systems quarterly. Findings are addressed within 30 days. Reports are available on request for transparency.

Compliance Framework

We follow GDPR principles and Indonesian data-protection standards where applicable. Our policy is reviewed annually by legal counsel.

Privacy consistency across ratutoto

Mobile App & WebWhether you access the lobby via our app or desktop site, your privacy protections remain identical. Same encryption, same data handling, same safeguards.
Live Casino & SlotsPrivacy rules apply across all game categories. Sportsbook sessions, live dealer tables and slot-room activity are all logged and protected equally.
DANA, OVO, GoPay, QRISEach payment method integrates with our privacy system the same way. No payment type receives weaker or stronger data protection than another.
Account LoginFrom first sign-up through every login, we use the same verification and encryption protocols. Your session is never exposed to lower security tiers.
Support & Account CentreWhen you contact our team or access your account settings, data transmission uses the same TLS encryption standard as your gameplay sessions.
Third-Party IntegrationsAny external service we use (analytics, fraud detection, payment processing) signs our Data Processing Agreement and matches our privacy baseline.
Policy UpdatesIf this policy changes, we notify you 30 days in advance. You can review the new terms and confirm acceptance before any update takes effect.
QUICK SIGNAL

What privacy means in your lobby

01
Session Isolation Your gaming activity in the live casino, slots and sportsbook sections is siloed. One tab's data doesn't bleed into another. Full compartmentalization.
02
Login History Check when and where your account was accessed. See device types, IP addresses and login times. Flag unusual activity and force a remote logout if needed.
03
Payment Receipts Every deposit and withdrawal generates an encrypted receipt stored in your account. Download anytime. Full audit trail for your records and tax purposes.
04
Preference Centre Control what marketing emails you receive, adjust notification settings and opt out of data-sharing agreements without affecting your lobby access.
05
Cookie Management Accept or reject non-essential cookies. Essential cookies stay for account security. Your choice is remembered and applied across all sessions automatically.
06
Data Expiry Closed your account? We delete personal and gameplay data after 90 days, unless you request earlier removal. Payment records kept per legal obligation only.

Privacy questions answered

We keep your account details for 90 days in case you want to reopen. After that, personal information is deleted. Payment records are kept for seven years per Indonesian tax law. You can request earlier deletion anytime—just email [email protected].

We share only the minimum required to process your transaction: your name, phone number and transaction amount. We never share your gameplay history, login data or session activity with payment partners. Each partner has signed a confidentiality agreement.

Yes. Log into Account Settings, go to Data Management and select Download My Data. You'll receive a file with everything we hold: profile info, gameplay history and transaction records. Takes 3-5 business days for full processing.

We use AI and manual review to spot unusual activity: login from new locations, sudden large bets or rapid withdrawals. If flagged, we verify your identity via email or SMS before proceeding. You're always notified immediately.

No. Your game history, bets and account balance are private. Live table lobbies show anonymous seat numbers only. Your real name and account ID never appear in-game or in public leaderboards or chat.

Change your password immediately and email [email protected] with details. We'll review login logs, freeze transactions if needed and investigate. Most cases resolve within 24 hours. You're covered by our fraud-protection guarantee.

Payment records stay for seven years per Indonesian financial regulations and tax requirements. Bank details used for withdrawals are deleted after 90 days. You can request specific payment data removal by contacting our compliance team.