LEGAL REFERENCE

Your Privacy Matters at pktoto

We keep your account secure, your payment details private, and your gaming activity encrypted. This is how we do it.

Data ProtectionEncrypted PaymentsAccount SecurityTransparent PracticesIndonesia Compliant
View Game Library Read FAQ
pktoto Your Privacy Matters at pktoto

Privacy Policy Overview

pktoto collects and processes your personal information—name, email, phone number, payment details and account activity—to deliver live casino tables, slot lobbies, sportsbook markets and withdrawals where local law permits. We encrypt all data in transit and at rest. Payment methods including DANA, OVO, GoPay and QRIS are processed through certified payment gateways with PCI-DSS compliance. You control your account settings, data requests

and deletion timelines through your account dashboard or support contact.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Privacy Questions & Requests

Email Support Submit data access, deletion or privacy concerns to...
In-Account Message Centre Access privacy settings, download your account data and...
Legal Compliance Team For regulatory or formal requests, contact our legal...
WHY THIS PLATFORM

How We Earn Your Trust

Encryption Standard

All account logins, payment flows and personal data travel via TLS 1.2 or higher. No plaintext storage of passwords or...

Payment Gateway Compliance

DANA, OVO, GoPay and QRIS transactions are routed through PCI-DSS Level 1 certified processors. Your wallet stays isolated from our...

Regular Security Audits

Third-party penetration testing and vulnerability assessments happen quarterly. Findings are logged and remediated within SLA timelines.

Data Minimisation

We collect only what we need to deliver your account, process withdrawals and comply with local gaming laws. No cross-selling...

Indonesia Legal Compliance

Our privacy framework aligns with local digital protection standards and gaming regulations in supported regions where we operate.

Incident Response Protocol

If a breach occurs, affected users are notified within 72 hours with details and remedial steps. We log all incidents...

Privacy Consistency Across pktoto

Mobile App & WebSame encryption, same data handling, same user controls. Your privacy rules apply whether you play on phone or desktop.
Live Tables & SlotsGame type doesn't change your privacy. Live dealer streams, slot sessions and sportsbook bets all flow through identical secure channels.
Withdrawal & DepositDANA, OVO, GoPay and QRIS transfers use the same PCI-compliant routing. Your payment method stays encrypted end-to-end.
Account Data RequestsDownload your personal data, gaming history and payment logs any time. We process requests within 14 days at no cost to you.
Cookie & Tracking PolicyWe use session cookies for security and analytics only. No third-party ad trackers. You can disable non-essential cookies anytime.
Promotional CommunicationsYou control email, SMS and in-app messages via account settings. Unsubscribe from any channel without losing access to your account.
Data Retention ScheduleAccount data stays for the life of your account. After closure, we retain records for 5 years per Indonesian gaming law, then purge.
QUICK SIGNAL

What Defines Our Privacy Approach

Account Verification We verify your identity once at signup using your phone...
Session Timeout Controls Your account logs out after 30 minutes of inactivity. You...
Two-Factor Authentication Optional 2FA via SMS or authenticator app adds a second...
Withdrawal Verification When you request a payout to DANA, OVO, GoPay or...
Transaction History Transparency Every deposit, bet placement and withdrawal shows in your dashboard...
Privacy Dashboard One screen shows your data settings, connected payment methods, active...

Privacy Policy FAQs

No. We don't sell, rent or broker your data. Payment processors see only what they need to complete your DANA, OVO, GoPay or QRIS transaction. Regulators in supported regions may request data under legal order.

Use the password reset link on the login page. We'll send a secure reset token to your registered email. The link expires in 24 hours. You create a new password without our team seeing it.

Yes. Submit a deletion request via your account settings or support. We purge personal data within 30 days. Gaming records stay for 5 years per Indonesian law, then are removed.

Your wallet details never touch our servers. Payment gateways handle tokenisation and encryption. We store only a reference token, not your actual account numbers or credentials.

Only you with your password. Support staff can see anonymised account activity to help resolve issues, but never your password or full payment details. You can request a session log anytime.

We use session cookies for login and site functionality. Analytics cookies help us see which games are used most. No third-party ad networks track you. Disable non-essential cookies in your browser settings anytime.

We notify you within 72 hours by email. We'll explain what happened, what data was exposed and what steps we took to fix it. We also report to relevant authorities in supported regions.