Your data. Your control. Our promise.
We keep your account details, payment history and gaming activity private. This policy explains exactly how balontoto handles your information from login to payout — and how you...
Policy scope and data jurisdiction.
balontoto respects Indonesian data protection principles and processes your information in line with supported-region regulations. We collect account credentials, payment method details, transaction history and gaming preferences to deliver lobby access, process withdrawals via DANA, OVO, GoPay and QRIS, and maintain platform security. Your data stays encrypted during transmission and at rest. We do not sell personal information to third parties. Access
requests and deletion claims are handled within 30 days. This policy applies to all users in supported Indonesian regions. For specific jurisdiction concerns, contact our data team directly.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy questions? Reach out directly.
Email Support
Contact our data protection team at [email protected] for account, payment or policy-specific inquiries. Responses typically arrive within one business day.
In-Account Settings
Review and update your privacy preferences, communication settings and data-sharing choices directly from your account dashboard. Changes take effect immediately.
Legal Requests
Formal data access, correction or deletion requests should be submitted in writing with valid identification. We process compliant requests within the timeframe specified by applicable law.
How we earn your trust on data.
Encryption Standard
All account logins, payment details and transaction records are transmitted over TLS 1.3 and stored in encrypted databases. No plaintext credentials are ever logged or cached.
Third-Party Audits
We commission annual security reviews of our data infrastructure. Audit findings and remediation steps are documented and made available to regulators upon request.
Payment Card Compliance
balontoto maintains PCI DSS Level 1 compliance for all e-wallet and card processing. DANA, OVO, GoPay and QRIS transactions flow through dedicated secure gateways.
Data Minimization
We collect only the information needed to operate your account, process payouts and meet local regulatory obligations. Optional fields stay optional. Unused data is purged after 12 months.
Staff Access Control
Internal team members access account data only when required and logged. Role-based permissions ensure customer service staff see only the minimum necessary details to help you.
Breach Response Plan
In the unlikely event of a data incident, we notify affected users within 48 hours, disclose scope and remediation steps, and coordinate with authorities in supported regions.
Privacy consistency across balontoto.
What makes our policy work for you.
One Clear Policy
No hidden clauses. One privacy document covers your entire account — login, gaming, payments and support. You see exactly what we store and for how long.
Instant Access Requests
Export your data at any time from the account settings. Download full transaction history, profile details and gaming logs in a portable format within minutes.
No Data Resale
We keep your information confidential. Payment methods, betting patterns and account activity are never sold to advertisers, affiliates or third-party brokers.
Automated Deletion
Request permanent account closure and we scrub your data within 60 days. Regulatory archival copies are anonymised and retained separately for compliance only.
Indonesia-First Compliance
Our policy reflects local protections for users in supported Indonesian regions. QRIS, DANA, OVO and GoPay transactions follow domestic payment standards.
Transparent Cookie Use
We use session cookies for login and preferences only. No tracking pixels or cross-site cookies follow you outside balontoto. Clear your browser cache anytime.