App / Slots
This policy explains exactly what personal data exatoto collects when you create an account, make transactions via OVO or Bank Transfer, and browse our lobby — and how we keep that data secure. Access and eligibility depend on local law and are available where local law permits in Indonesia.
When you register an account with exatoto, we collect the details you submit during sign-up: your name, email address, date of birth, and the payment method you connect — including OVO wallet credentials or Bank Transfer account references. We use this data to verify your identity, process your transactions, and maintain your account history in your personal wallet dashboard. We also collect technical data automatically: your device type, browser session identifiers, IP address, and interaction logs as you navigate the lobby. This helps us keep the platform stable and identify unusual activity on your account. We do not sell your personal data to third parties. We share data only where required by applicable law in Indonesia or with payment processors necessary to complete your OVO or Bank Transfer transactions. Any third-party service we engage is bound by data-handling agreements consistent with this policy. Data retention follows the period required by applicable regulation. After your account is closed, we retain only the records we are legally obliged to keep, and we delete or anonymize the rest. The current state of your stored data is accessible through your account dashboard after login.
Understanding the boundaries of this policy helps you know exactly which of your interactions with exatoto are governed here and which fall under separate terms or third-party rules.
This policy covers all personal data you submit when opening or managing your exatoto account — login credentials, identity fields, and the preferences saved to your profile. Account-level data is stored and handled as described in this document.
Payments processed through OVO or Bank Transfer involve data passing to payment processors. This policy covers what exatoto collects and retains on our side; the payment provider's own privacy terms govern their handling of your payment credentials.
Your browsing behavior within the exatoto lobby — which game categories you open, session length, and navigation path — is captured through cookies and session tools. Cookie preferences can be managed through the settings link in your account.
Links to external services, game studios such as Pragmatic Play, PG Soft, Bigtime Gaming, and Joker, and any external support tools operate under their own privacy policies. exatoto is not responsible for data handling outside our own platform.
You have concrete choices about your personal data held by exatoto. You can review the data attached to your account at any time by logging in and opening the account settings section — your profile fields, saved payment references, and transaction records are all visible there. If any detail is incorrect, you can update it directly through the edit fields shown on the account page, or contact our support team to request a correction on records you cannot edit yourself. If you want to know specifically what data we hold about you, you can submit a data inquiry through our support channel. We will respond with a summary of the personal data categories linked to your account. If you wish to close your account and request deletion of non-mandatory records, the same support channel handles that request. We keep only what applicable law in Indonesia requires us to retain after closure.
Log in and open account settings to see all profile data, connected payment references, and your full transaction history stored against your account.
Edit your profile fields directly from the account page. For records that cannot be self-edited, submit a correction request through our support channel and we will action it.
Contact support to request a summary of personal data categories we hold. We will confirm what is stored and the basis on which we hold it.
If you want your account closed and non-mandatory data removed, raise a closure request with support. Retention of legally required records follows applicable Indonesia regulation.
If you have a question about how exatoto handles your data, or you need to action a right under this policy, use one of the contact paths below. Our team handles privacy inquiries alongside general account support.
Open the chat icon from any page in your logged-in session to reach our support team directly. Privacy and data questions are handled through the same channel as account help.
Send your data request or policy question to our support email address listed in the Contact section of your account dashboard. Include your registered account email so we can locate your records.
Many data actions — reviewing records, updating profile fields, checking transaction history — are available directly inside your account without contacting support. Log in and open settings to start there.
exatoto applies account security measures including encrypted sessions and access controls to protect the personal data stored in your account. We review these practices as applicable security standards evolve.
We use session cookies to maintain your logged-in state and analytics cookies to understand lobby navigation. You can review and adjust cookie preferences through the settings link shown in your account. Declining analytics cookies does not affect your ability to play.
Your account is protected by login credentials you set and session management controls on our side. If you notice activity you do not recognise, use the account security section to review recent sessions and contact support immediately.
We retain personal data for the period required under applicable Indonesia regulation. Transaction records linked to OVO or Bank Transfer payments are kept for the legally required duration. Non-mandatory data is deleted or anonymised after account closure.
When this policy changes, we post the revised version here with an updated effective date. Continued use of your account after a material change constitutes acceptance. The current version is always the one shown on this page.
Answers to the questions we receive most often about data, access, and your rights under this policy.
We collect the information you enter during registration: your name, email address, date of birth, and the payment method you connect — such as OVO or Bank Transfer details. We also collect technical session data automatically, including your device type and IP address, to maintain account security.
Yes. Log in and open account settings to view your profile data, saved payment references, and transaction history. For a full summary of data categories we hold beyond what is visible in the dashboard, submit a data inquiry through our support channel and we will respond with the details.
Most profile fields can be edited directly from the account settings page after login. For records you cannot update yourself — such as identity verification data — contact our support team with the correction you need and we will action it as quickly as we can.
We share data only where required by applicable law in Indonesia or where necessary to complete your OVO or Bank Transfer transactions with payment processors. We do not sell personal data. Game studio content providers like Pragmatic Play and PG Soft supply game content only and are not given access to your account data.
After account closure we retain only the records we are legally required to keep under applicable Indonesia regulation — primarily transaction records linked to payment activity. Non-mandatory personal data is deleted or anonymised. The timeline follows the applicable legal retention period, not a fixed internal schedule.
Use the live chat in your logged-in session or send an email to the support address shown in your account dashboard. Include your registered account email in your message. Data deletion requests are handled by the same support team and follow the process described in the Your Privacy Rights section above.