Reference

How We Handle Your Privacy

When you open an account with extratoto, your personal and payment data stays protected under strict security protocols.

Data encrypted end-to-endDANA, OVO, GoPay, QRIS secureYour control over account access
extratoto How We Handle Your Privacy
REACH OUR TEAM

Privacy Questions? Contact Us

Our support team is available to explain our privacy practices, handle data requests and address your concerns about how we use your information.

Live Chat Available during lobby hours Monday to Friday.
Email Support Send privacy requests, data deletion forms and policy questions to [email protected].
In-App Messaging Open your account menu from the lobby and tap Support.
HOW WE PROTECT YOU

Security and Your Account Rights

extratoto uses industry-standard encryption for all data transfers between your device and our servers, especially when you deposit via DANA, OVO, GoPay or QRIS.

Encryption Standard

All transfers between your device and extratoto use TLS 1.3 encryption.

Account Verification

Before we process your first withdrawal, we verify your identity via email and phone number.

Session Timeout

Your lobby session expires after 30 minutes of inactivity.

Data Retention

We keep your account and payment records for as long as your membership is active plus 2 years after closure…

Access Your Data

Request a copy of everything we hold about you — your profile, deposits, withdrawals, betting history and device logs —…

Update or Remove

Correct your name, email or phone from Account Settings.

Questions About Your Data

Here are the privacy topics our players ask about most — from what happens to your payment info to how you delete your account and what rights you have.

We encrypt your payment information using TLS 1.3 and never store full card or wallet numbers on our servers. Payment processors handle transaction details according to their own security standards. Your deposits clear within seconds, and you see the balance immediately in your lobby wallet.

Yes. Email [email protected] with your account email and we'll send you a complete data export within 10 business days. The file includes your profile, all deposits and withdrawals, game history, device logs and any support tickets you opened.

We retain your account and transaction records while you're an active member plus 2 years after you close your account, where local law permits. After that period, we delete or anonymise your personal details. You can request earlier deletion of non-essential data like game history and cookies.

We do not sell your data. We share account and payment information only with payment processors (DANA, OVO, GoPay, QRIS partners), fraud detection services and regulators when required by law. You can opt out of marketing emails from Account Settings anytime.

We use session cookies to keep you logged in across our lobby on your device, preference cookies to remember your game settings and analytics cookies to track page load times and feature usage. You can clear all cookies from your browser settings; you'll need to log in again next visit.

Open Account Settings and tap 'Close Account'. Confirm your choice and we'll freeze your account immediately. Your wallet balance must be withdrawn first. We'll delete game history and device data within 30 days; legal records remain for 2 years where local law requires.

Yes, but we recommend enabling two-factor authentication from Account Settings. Your password is hashed, so even if one device is compromised, your account remains protected. Session timeouts after 30 minutes of inactivity also prevent unauthorized access on shared phones or laptops.