Reference

How we protect your privacy on gamtoto

When you open an account with us, your personal information stays secure behind encryption and strict access controls.

Data encrypted in transit and at restThird-party payment processors verifiedYour account info never sold or shared
gamtoto How we protect your privacy on gamtoto
GET IN TOUCH

Privacy questions and data requests

If you want to know what data we hold, request a copy, ask us to correct it, or delete your account, our support team is ready…

Live Chat Available 24/7 in the account menu. Open your gamtoto lobby, tap the question-mark icon…
Email Support Send your request to [email protected] with your account email.
Account Settings View and update your phone, email and address directly in Settings > Profile >…
SECURITY PRACTICES

How we keep your data safe and your rights secure

Your account is protected by multi-factor authentication: when you log in from a new device, we send a verification code to your registered phone number via SMS.

Multi-factor Authentication

Every login from a new device triggers an SMS code to your phone. You control this in Settings > Security; you can turn it on for all logins or just new devices.

Payment Encryption

DANA, OVO, GoPay and QRIS transactions are encrypted end-to-end. We never hold your full payment credentials; we use secure tokens that merchants can't reverse-engineer.

Withdrawal Verification

Before we send your payout, our system checks that the account name and number you provided match our records. Manual review flags any mismatch to prevent fraud.

Data Retention

We keep active account data while you play. Closed accounts are archived for legal compliance and deleted where local law permits after a set period.

Cookie and Tracking

We use cookies to keep you logged in and remember your game settings. You can disable non-essential cookies in your browser; essential ones are needed to use your account.

Right to Request Changes

Contact support to access, correct, port or delete your personal data. We'll verify your identity and respond within two business days, depending on local law.

Privacy policy answers to your questions

Below are the questions we hear most often about how gamtoto handles your data. If you don't find your answer here, open live chat in your account or email [email protected].

No. We never sell or share your name, phone, email or identity documents with marketing firms, data brokers or third parties outside our payment processors. Our revenue comes from game play, not data sales. We share only what's required with payment vendors to complete your DANA, OVO, GoPay or QRIS transaction.

Yes. Go to Settings > Privacy > Request Data Export, or email [email protected] with 'Data Request' in the subject line. We'll verify your identity and send you a file with your account details, transaction history and login records within two business days.

We delete your profile and personal data within 30 days of account closure, depending on local law. Financial records tied to your transactions are kept for three years for tax and fraud-prevention purposes, but they are not linked to your name or email.

Yes. When you add or change a bank account, DANA wallet or GoPay number in Settings > Payouts, the data is encrypted in transit and stored securely. We verify any new payout account with a small test deposit before you can withdraw to it, so we confirm it's yours.

If gamtoto changes ownership, your personal data may transfer to the new operator under the same privacy commitments. If we cease operations, we will notify you and delete personal data or anonymize it, depending on local law. You can request a final data export before any transition.

Yes. In Settings > Privacy, toggle off 'Marketing Communications' to stop promotional emails. You can disable non-essential cookies in your browser settings; essential cookies for login and account security will stay on. We do not use third-party tracking pixels for ads.

Contact support immediately via live chat or email [email protected] with 'Security Incident' in the subject line. We'll freeze your account, review access logs, and guide you through a password reset. If a real breach occurs, we'll notify all affected users within 24 hours and offer two-factor authentication setup at no cost.