Casino / Sports
This page explains exactly what data ondatoto collects when you use your account, how it is stored, and what choices you have over it. Availability of services depends on local law and eligible regions in Indonesia.
When you open an account with us, we collect the information you provide directly — your email address, chosen username, and the payment method you connect, whether that is DANA, OVO, GoPay, ShopeePay, or QRIS. We record this to process your deposits, confirm your identity when you log in, and route any winnings back to the correct wallet. Beyond registration data, we collect session-level information: the pages you open inside your account, the game categories you visit, and the device type you use to access the lobby. This session data helps us serve the right content to your screen — whether you arrive on a mobile browser or a desktop connection. We do not sell your personal data to third parties. Where we share data with payment processors or game content providers, that sharing is limited to what is strictly needed to complete the transaction or load the game. Your DANA or OVO wallet details, for example, are passed only to the payment processor handling your specific transaction — they are not stored by our game content studios. Retention periods for account records follow the requirements set by applicable regulations in the regions where we operate. You can request a summary of what we hold at any time through the support routes listed further down this page.
DANA wallet details are passed only to the payment processor completing your transaction. We do not retain your full wallet credentials inside our game system.
OVO transfer records are logged against your account for reconciliation. You can request a copy of your transaction history through account support.
GoPay payment references are stored only as long as required for transaction verification and regulatory retention rules applicable in supported Indonesia regions.
ShopeePay and QRIS session references follow the same limited-retention approach — held for reconciliation, not shared beyond what the payment flow requires.
Our privacy policy covers your account relationship with ondatoto directly. It does not extend to third-party services you access through links on our pages, nor to the data practices of game studios whose titles appear in our lobby. Understanding what falls inside and outside this policy helps you make informed choices about the data you share.
Your login credentials, session tokens, and account preferences are covered in full. We manage these records directly and you can request changes through our support channel.
Deposit and withdrawal records tied to your account — including DANA, OVO, GoPay and QRIS references — fall within this policy for retention and access requests.
Game titles from studios such as Pragmatic Play, Spadegaming and CQ9 are loaded inside our platform, but each studio maintains its own data practices for content delivery.
External payment processors, e-wallet providers and any linked sites outside ondatoto operate under their own privacy terms. We have no control over their data handling.
You have practical choices over the personal data we hold for your account. If you believe any of your registration details are incorrect — a mistyped email, an outdated phone number, or a wallet reference linked to an account you no longer use — you can request a correction at any time. We will process it once identity is confirmed through our standard account verification step. You can also ask us for a summary of the data we currently hold against your account. This includes your registration record, transaction references, and session-level log data retained under our standard policy. We will respond to data access requests through the support channel you contact us on. If you decide you no longer want an account with us, you can submit a closure request. Account closure does not erase records required by applicable regulations for the regions where we operate, but we will remove active credentials and stop further session data collection from the point of closure onward.
Submit a data access request through live chat or email support. We will confirm your identity and provide a summary of what your account record holds.
If your email, phone, or linked wallet reference is wrong, raise it through support. Corrections go through account verification before they take effect.
Any question about how your data is used, stored or shared can be directed to our support team. We do not require a formal legal request for standard queries.
Closure requests stop new session data from being collected. Regulatory retention requirements for transaction records remain in place after closure, as required by applicable rules.
Privacy questions deserve a direct answer, not an automated form response. Reach our account support team through any of the three routes below. When contacting us about a data matter, include the email address registered to your account so we can locate your record without asking for additional verification steps.
Open the chat icon from any page inside your account. This is the fastest route for account-level privacy questions and correction requests.
Send your data access or correction request by email to our support address shown in your account dashboard after login. Include your registered email in the subject line.
Your current account details, linked payment methods and active session records are visible inside your account dashboard after login. Start here before contacting support.
We take a narrow approach to data collection — we hold what we need to run your account and process your transactions, and we do not hold it longer than necessary. Cookies are used to maintain your login session and remember your in-lobby preferences; you can control cookie behaviour through your browser settings at any time. Account security measures include session token rotation on each login. We do not store payment credentials such as your DANA PIN or OVO passcode — those stay with the respective wallet provider.
Session and preference cookies keep your account state as you move between game categories. You can clear or block cookies through your browser settings without losing your account credentials.
Login sessions use rotating tokens. If you notice unfamiliar activity on your account, contact support immediately through live chat so we can review the session log.
We hold transaction records for the period required by applicable regulations in the regions where we operate. Active session data not required for regulatory purposes is cleared on a rolling basis.
When this policy changes, the updated version is posted at ondatoto/privacy-policy/. The current version date is shown at the top of that page after each revision.
These are the questions we receive most often about data, account records, and your rights under this policy. If your question is not covered here, reach us through live chat or email.
We hold the registration details you provided — email, username, and linked payment method — plus transaction references and session-level log data. You can request a full summary by contacting support with your registered email address.
Game studios receive only the session token needed to load their content inside your lobby. They do not receive your registration details, wallet information, or transaction history. Our data sharing with studios is limited to content delivery only.
Contact support through live chat or email and specify which detail needs to change. We confirm your identity through our standard account verification step before applying any correction to your record.
We store a payment reference sufficient for reconciliation — not your full wallet credentials or PIN. Your DANA, OVO or GoPay access details remain with the respective wallet provider throughout the transaction.
You can submit an account closure request, which stops further session data collection. Transaction records required by applicable regulations in supported Indonesia regions are retained for the legally required period after closure.
The current version of the policy is always at ondatoto/privacy-policy/ with a revision date at the top. We do not notify by push notification, but you can check the page directly after any account update.