gajahtoto login Privacy Policy

This page describes what we collect when you use gajahtoto login and how we keep that data protected. When you open an account with us, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or play our games on mobile or desktop, we collect information necessary to verify your identity, process your transactions, and protect you from fraud. We take data security seriously—your personal information is encrypted, stored securely, and never shared with marketing partners or game studios without your consent.

Our privacy practices apply to everyone who accesses gajahtoto login, whether from Jakarta, Surabaya, Bandung, Medan, or other supported regions. We comply with applicable data protection laws in the jurisdictions where we operate. This policy explains what data we collect, how we use it, who has access to it, how long we keep it, and what rights you have over your information.

If you have questions about our privacy practices or wish to exercise your data rights, our support team can help. We respond to privacy inquiries within 30 days.

What Data We Collect on gajahtoto login

We collect different types of data depending on how you interact with gajahtoto login. When you register an account, we collect your full name, date of birth, phone number, email address, and residential address. This information is required for our Know Your Customer (KYC) verification process, which confirms your identity against government records and ensures you meet eligibility requirements under applicable law.

When you deposit funds into your gajahtoto login account, we collect payment information—your bank account number or digital wallet ID (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet). This data is encrypted and used only to process deposits and withdrawals. We do not store your full bank account number or wallet password; we store only the token or reference needed to route money back to your payment method on withdrawal.

When you use gajahtoto login to play games, we log your session activity: the games you play, the bets you place, your wins and losses, and the timestamps of your activity. This information helps us detect fraud, investigate disputes, and comply with regulatory requirements. We also collect technical data about your device and connection: your device type (Android, iPhone, desktop), your IP address, and browser information. This helps us troubleshoot technical issues and protect your account from unauthorized access.

Identity data
Full name, date of birth, address—used for KYC verification and compliance.
Payment data
Bank or wallet reference tokens—encrypted and used only for processing transactions.
Activity data
Game history, bets, results, session logs—used for dispute resolution and fraud detection.
Technical data
Device type, IP address, browser info—used for security and troubleshooting.
Communication data
Support tickets, emails, chat logs—kept for customer service and compliance.

How We Use Your Data on gajahtoto login

We use the data we collect on gajahtoto login for several purposes. First, we verify your identity and prevent fraud. Your identity data is cross-referenced against government records and anti-fraud databases to confirm you are who you claim to be. Your activity data is analyzed for patterns that might indicate duplicate accounts, collusion with other players, or money laundering. If we detect suspicious patterns, we may place a temporary hold on your account while we investigate.

Second, we process your financial transactions. Payment data is used to route your deposits into your gajahtoto login account balance and to return withdrawals to your original payment method. We do not share this data with game studios or third parties—only our internal payment processors and compliance team have access.

Third, we comply with regulatory requirements. Many jurisdictions require online gaming operators to maintain detailed KYC records, transaction logs, and proof of identity verification. We retain your data to satisfy these obligations. Fourth, we investigate disputes and provide customer support. If you claim a game outcome was incorrect or a deposit was not credited, we pull your complete transaction history and game logs to investigate and resolve the issue fairly.

Finally, we use data to improve gajahtoto login. We analyze aggregated, anonymized data about how players use our platform—which games are popular, what payment methods are preferred, when peak usage occurs—to improve our service. This analysis does not identify you personally; it helps us understand trends across all gajahtoto login users.

Data Sharing and Third-Party Processors

We do not sell your data to marketing companies, data brokers, or third parties. However, we do share your data with trusted partners who help us operate gajahtoto login. Payment processors (banks and digital wallet providers like mobile banking, local payment, online payment, e-wallet, mobile banking) receive your payment reference data to process deposits and withdrawals. Fraud detection services receive your activity data to analyze for suspicious patterns. Government agencies may receive your KYC data if required by applicable law (e.g., anti-money-laundering investigations).

Game studios that provide slot games or live-dealer tables receive aggregated data about how many players accessed their games, but they do not receive your personal identity information. If a game developer needs to contact you about a technical issue, we relay your message anonymously or with your explicit consent.

Our servers may sit outside your jurisdiction—for example, our backup storage may be located in a different country. When your data crosses borders, it remains protected by the same encryption and access controls as if it were stored locally. Any international data transfer is governed by applicable data protection law in your jurisdiction.

Your Rights and Data Access on gajahtoto login

You have the right to access, correct, and delete your personal data on gajahtoto login, subject to our legal obligations. To request a copy of your data, contact our support team with your account details. We'll compile your identity information, payment records, and activity logs and send them to you within 30 days. This is useful if you want to port your account information to another service or simply review what we hold about you.

You have the right to correct inaccurate information. If your address, phone number, or name has changed, you can update it in your gajahtoto login account settings. You have the right to delete your personal data, although we may retain certain information (such as transaction history and KYC records) if required by law or to resolve pending disputes.

You have the right to opt out of certain uses of your data. For example, you can disable push notifications from gajahtoto login or opt out of marketing emails. However, you cannot opt out of data collection necessary for identity verification, payment processing, or regulatory compliance. If you close your gajahtoto login account, we retain your data for five years (or as required by applicable law) to fulfill anti-money-laundering and record-keeping obligations.

Note: We undertake to respond to all data access requests within 30 days. If your request is complex or voluminous, we may extend this to 60 days, but we'll notify you of the extension upfront.

Cookies and Tracking Technologies

Our gajahtoto login platform uses cookies and similar technologies to recognize you when you log in, remember your preferences (e.g., language, notification settings), and analyze how you navigate our interface. Cookies are small files stored on your device that identify your session. We use session cookies (cleared when you close your browser) for security and functional cookies (longer-lived) to remember your login details if you choose "remember me".

We also use analytics tools to understand how players use gajahtoto login—which pages they visit, how long they spend on each section, and what devices they use. This data is aggregated and anonymized, so it does not identify you personally. You can disable cookies in your browser settings, but doing so may impair some features of gajahtoto login (e.g., you may need to log in more frequently).

We do not use cookies for targeted advertising outside gajahtoto login. We do not track your activity on other websites or share your browsing history with advertisers. Our cookie use is limited to operating gajahtoto login securely and understanding how our platform is used.

Data Retention and Deletion

We retain different types of data for different periods. Identity data (name, date of birth, address) is kept as long as your gajahtoto login account is active and for a minimum of five years after closure, to satisfy anti-money-laundering and tax record-keeping obligations. Transaction data (deposits, withdrawals, game history) is retained for five years after your last activity or account closure. This allows us to investigate disputes and respond to regulatory audits within a reasonable timeframe.

Technical data (IP address, device information, browser logs) is retained for one year, after which it is anonymized or deleted. Communication data (support tickets, emails, chat logs) is retained for two years for quality assurance and dispute resolution, then deleted unless legally required to keep longer records.

If you request deletion of your personal data and we have no legal obligation to retain it, we will delete or anonymize it within 30 days. For data we are required to retain by law (such as KYC records), deletion is not possible, but we will explain why and how long we must keep it. Deleted data cannot be recovered; please ensure you have downloaded any transaction records you need before requesting deletion.

Data Breaches and Security Incidents

We protect your data using industry-standard encryption (TLS 1.2+) for data in transit and AES-256 encryption for data at rest. Our servers are protected by firewalls, intrusion detection, and regular security audits. Access to sensitive data (payment information, identity documents) is restricted to authorized personnel only.

In the unlikely event of a data breach—such as unauthorized access to our servers or theft of encrypted data—we will notify affected users within 48 hours. Our notification will include details of what data was compromised, what steps we've taken to secure it, and what you can do to protect yourself (e.g., change your gajahtoto login password, monitor your payment accounts).

We maintain cyber insurance to cover costs associated with data breaches. If a breach occurs due to our negligence, we will cover reasonable costs incurred by affected users (e.g., credit monitoring services). However, users are also responsible for protecting their own credentials—if you share your password or enable unauthorized access to your account, that is your responsibility, not ours.

Contact Us About Privacy

If you have questions about our privacy practices, wish to exercise your data rights, or believe your data has been misused, contact our privacy team. We maintain multiple contact channels: in-app support chat (responds within subject to verification during business hours), email (responds within 24 hours), and phone support during business hours (Monday–Friday, 9 AM–6 PM Jakarta time).

All privacy inquiries should include a clear description of your concern and your account details. We will investigate and respond within 30 days. If you believe we have violated your privacy rights and internal resolution has failed, you may lodge a complaint with the applicable data protection authority in your jurisdiction.

Related documents

Legal
Terms & Conditions
7-min read
Legal
Legal Notice
4-min read
Support
Frequently Asked Questions
6-min read

Legal and Jurisdictional Framework

Service availability

We operate gajahtoto login in jurisdictions where online gaming and sportsbook services are permitted under applicable law. Our services are not available in all territories; they are available only where regulations specifically permit online casino games, sports betting, and related entertainment services. We do not operate in jurisdictions where such activities are prohibited or restricted by law. Before you open an account on gajahtoto login, you are responsible for verifying that online gaming is legal in your location. Our service infrastructure is designed for users in supported jurisdictions; if you reside in or are accessing gajahtoto login from a jurisdiction where online gaming is prohibited, you should not use our services. We may restrict or terminate access from unsupported regions. The availability of specific games, payment methods, and betting markets may vary by jurisdiction—gajahtoto login will display relevant options based on your registered location. We do not assume liability for access or use of gajahtoto login from jurisdictions where such services are prohibited by law.

Account eligibility

To open and maintain an account on gajahtoto login, you must meet eligibility requirements set by applicable law in your jurisdiction. These requirements typically include being of legal age (the age of majority or gambling age in your region, whichever is higher) and not being subject to legal restrictions that would prohibit your participation in online gaming. When you register on gajahtoto login, we collect identity information and verify it through our KYC process against government records. This verification is mandatory before you can withdraw funds. If our verification detects that you do not meet eligibility requirements—such as being under the legal age threshold or residing in a restricted jurisdiction—we will deny your account or cancel it if already opened. We do not permit account sharing, duplicate accounts, or accounts held by minors or legal entities. Your gajahtoto login account is personal and non-transferable. If we discover duplicate accounts held by the same individual, we reserve the right to close all but one and forfeit balances associated with duplicates. Your account must be registered in your own name and must reflect accurate identity information.

Local-law responsibility

You are solely responsible for ensuring that your access and use of gajahtoto login comply with the laws of your own jurisdiction. We provide services only in supported jurisdictions, but we cannot monitor or enforce legal compliance on behalf of each individual user—that responsibility rests with you. Before you open an account or deposit funds on gajahtoto login, you should research and understand the legal status of online gaming, sportsbook betting, and casino games in your location. Laws vary widely by region and change frequently. Some jurisdictions permit certain types of wagering (e.g., sports betting) while prohibiting others (e.g., casino games); gajahtoto login is available only where both are permitted. If you access or use gajahtoto login from a jurisdiction where such activities are prohibited by law, you do so in violation of local law and at your own risk. gajahtoto login will not be held liable for legal consequences, fines, or penalties you incur as a result of unauthorized access. We encourage you to seek legal advice in your jurisdiction if you are uncertain about the legality of using gajahtoto login. Ignorance of local law is not a valid defense; users are presumed to know the laws of their own jurisdiction.

Data and privacy scope

We collect and process personal data to verify your identity, process deposits and withdrawals, detect fraud, and comply with regulatory obligations. Data collection includes your full name, date of birth, address, phone number, email, and payment account information (bank details or digital wallet reference). This data is encrypted and stored in secure servers. We retain your data for as long as your account is active and for a minimum of five years after closure (or as required by applicable law) to fulfill legal and regulatory obligations. You have the right to access, correct, or request deletion of your personal data, subject to our legal obligations to retain records for anti-money-laundering (AML) and KYC compliance. Our complete data practices are detailed in this privacy policy, which covers data sharing with third parties (payment processors, fraud prevention services), international data transfers, and your rights under data protection law. In the event of a data breach, we will notify affected users within 48 hours and take remedial steps to secure your account. You can request a copy of your data or submit a deletion request by contacting our support team; we'll respond within 30 days.

Contact for legal inquiries

If you have legal questions, privacy concerns, or wish to submit a formal complaint about our data practices, you can reach our legal and compliance team through multiple channels. Our primary contact email is available in your gajahtoto login account settings; responses to legal inquiries are provided within five business days. For urgent matters, you may contact our support team via in-app chat, and they will escalate your inquiry to the legal team. We also accept written inquiries by postal mail to our registered office address (provided upon request). All legal and privacy inquiries should include a clear description of your concern, relevant account details, and the resolution you seek. gajahtoto login does not provide legal advice, but our team will clarify our policies and assist in resolving disputes through our internal process. If you remain unsatisfied after our internal resolution, you may pursue remedies through applicable legal channels or file a complaint with the data protection authority in your jurisdiction, though such proceedings fall outside the scope of gajahtoto login's policies.