Your Data. Your Control. Our Commitment.
We handle your account details, payment information and gaming history with the same care you'd expect from a brand built for Indonesia. This policy shows exactly how we...
How We Protect Your Information
pandatoto collects your account credentials, payment method details (DANA, OVO, GoPay, QRIS transactions), gaming activity and device information to deliver your lobby, process withdrawals and detect fraud. We encrypt all data in transit and at rest, store payment details separately from your account profile, and never sell your information to third parties. Where local law permits, we retain transaction records for compliance.
Your data stays within supported regions unless you request export or deletion.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Questions About Your Privacy
Privacy Team
Email our data protection team at [email protected] with any concerns about how we handle your account, payment methods or gaming records.
Account Settings
Manage your data preferences, communication opt-outs and download your account history directly from your account dashboard.
Data Requests
Request a copy of your data, ask for corrections or request deletion by submitting a formal data subject request through your account portal.
Why Your Privacy Matters to Us
Encryption Standard
All account logins, payment transactions and gaming sessions use TLS 1.2+ encryption. Your DANA, OVO, GoPay and QRIS details never touch our servers unencrypted.
Fraud Detection
We monitor account access patterns, payment anomalies and device fingerprints in real time to catch unauthorized activity before it affects your balance.
Third-Party Audits
Our data handling practices are reviewed annually by independent security firms to ensure compliance with Indonesia's data protection standards.
No Data Broker Sales
We do not sell, rent or share your personal information with data brokers, advertisers or marketing firms. Your gaming history stays private.
Payment Isolation
DANA, OVO, GoPay and QRIS transaction details are stored in a separate, air-gapped database with restricted access. Only settlement teams see them.
Transparent Logging
Every access to your account data is logged with timestamp and reason. You can request an audit trail of who viewed your information and when.
How We Stack Up on Privacy
| Data Retention | We keep transaction records for 7 years (compliance requirement) and gaming logs for 2 years. Account data persists until you request deletion. |
|---|---|
| Cookie Policy | We use session cookies for login persistence and analytics cookies (anonymized) to improve lobby speed. No tracking cookies follow you off-site. |
| Third-Party Integrations | Our sportsbook odds feed, live casino provider and payment processors (DANA, OVO, GoPay, QRIS gateways) see only transaction IDs, never your full profile. |
| Jurisdiction Compliance | We comply with Indonesian data protection law and regional payment regulations. Your data does not leave supported regions without explicit consent. |
| Breach Notification | If unauthorized access occurs, we notify affected accounts within 48 hours with details of what was exposed and steps we took to secure it. |
| Children's Data | pandatoto is for adults only (21+). We do not knowingly collect data from minors. If we discover a child's account, we delete it immediately. |
| Marketing Consent | We send promotional emails and SMS only if you opt in. You can unsubscribe from any message with one click; we honor requests within 24 hours. |