oxtotoPrivacy Policy

This page describes what we collect when you use oxtoto and how we keep that data protected. Whether you are depositing via DANA, e-wallet, or mobile banking, or accessing your account from Jakarta or Surabaya, we gather certain information to process your requests and safeguard your account. Our policy sets out how we handle that data, who may access it, and what rights you hold over it.

Your privacy matters to us because account security directly underpins withdrawal certainty and payment reliability. We do not sell your information to advertisers. We do not share your banking details with third parties unless required by law or essential to process your transaction through local payment, online payment, e-wallet, or mobile banking.

This policy is straightforward: we collect what we need, store it where it is safe, and make your rights clear. Read on to understand exactly what we do with your personal data on oxtoto.

What we collect and why

We collect your email address, phone number, legal name, and date of birth when you create an oxtoto account. These details are mandatory for identity verification and to process withdrawals to your registered bank account.

When you make a deposit, we record the payment method you use—whether DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer—along with the amount and timestamp. We also retain your banking information (account number and institution) strictly to initiate refunds and withdrawals.

As you use oxtoto, we log your login times, device type, IP address, and browser. We also track your account balance, transaction history, and any two-factor authentication settings you enable. This data helps us detect unauthorized access and prevent fraud.

Identity verification and compliance

Indonesian law requires us to verify your identity before you can withdraw funds. We therefore ask for a government-issued ID scan or passport. We may also request a utility bill or bank statement to confirm your residential address. We store these documents for as long as your account is active, and retain them for seven years after closure for regulatory compliance purposes.

Live services and platform operations

Our oxtoto platform records interactions with live-dealer tables, sports markets, and slot games. We do not record audio or video of you; we only log which games you play, your bets, and the outcome. This information helps us calculate your account balance and resolves disputes about game results.

How we protect and share your data

We store all oxtoto account data in encrypted form on servers within Southeast Asia. Our servers sit outside Indonesia, which means your data may transit through international networks; however, the cryptographic protections applied to that data meet banking-industry standards. Access to your personal information is restricted to oxtoto staff members who need it to process your account, verify your identity, or handle your withdrawal request.

Third-party processors

We work with payment processors that handle DANA, e-wallet, mobile banking, and direct bank remittances on your behalf. These processors see your name, account number, and transaction amount only—they do not see your email or identity documents. We have data-processing agreements in place with each processor that bind them to the same confidentiality standards we observe.

We may also work with fraud-detection services and identity-verification vendors. These third parties receive a hash of your ID document and your IP address in order to flag suspicious activity; they do not retain or use this data for any other purpose.

Legal disclosure and jurisdiction

We will disclose your personal information if required by Indonesian law enforcement, a court order, or financial-crime investigation. We will not withhold that disclosure to protect commercial interests. If we receive a legal request, we will attempt to notify you unless prohibited by law.

Your rights on oxtoto

• You may request a copy of all personal data we hold about you.
• You may request that we correct information that is inaccurate or incomplete.
• You may request deletion of your account and associated data, provided you have no outstanding balance or open disputes.
• You may withdraw consent for us to store data for purposes other than transaction processing.

To exercise these rights, contact us at the address provided at the end of this policy. We will respond within 14 days.

Contact and updates

If you have questions about this policy or wish to exercise your rights on oxtoto, please contact our data office at [email protected]We may update this policy at any time; changes will be posted on this page with an updated date. Your continued use of oxtoto after a policy change constitutes acceptance of the new terms.