goldtoto Platform Privacy Notice
This page describes what we collect when you use goldtoto and how we keep that data protected. We at goldtoto gather personal information only as necessary to operate your account, process deposits and withdrawals, verify your identity, and comply with applicable law. We do not sell your data to third parties or use it for marketing beyond what you have consented to.
Our privacy practices apply to everyone accessing goldtoto from supported jurisdictions, whether via desktop browser, mobile browser, or the goldtoto app on Android or iOS. We store data on secure servers, encrypt it in transit, and restrict access to authorised staff only. This policy outlines your rights and our obligations.
We revise this policy occasionally to reflect changes in our service, technology, or applicable law. We notify you of material changes via email if you have an active account. Your continued use of goldtoto after updates means you accept the revised terms.
What We Collect and Why
We collect different categories of data depending on how you interact with goldtoto. During account signup, we ask for your name, date of birth, email address, phone number, and registered address. We use this information to set up your account, contact you about service updates, and verify your identity before your first withdrawal.
When you deposit funds, we collect payment transaction data—the amount, payment method, timestamp, and your payment processor's transaction ID. Your payment provider (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet) processes the actual payment; we receive only confirmation that the transaction succeeded. We do not store full payment card details or bank account numbers on our servers.
We track your gameplay activity—which games you play, your wagers, your winnings, your balance, and your tier status. This data is used to calculate your weekly cashback, determine promotion eligibility, and prevent fraud or abuse. We also record login times, IP addresses, and device information to detect suspicious account activity.
Our goldtoto Identity Verification Process
Before your first withdrawal, we ask you to verify your identity. We request a photo of your government-issued ID (passport, national ID, or driver's license), a photo of a utility bill or bank statement as proof of address, and a selfie of you holding your ID. We use this information to confirm you are who you claim and to comply with anti-money-laundering regulations.
We store these documents securely for the duration of your account and for a reasonable period after closure (typically three to seven years, subject to applicable law). We do not share your ID photos with third parties except where required by law or by payment processors during dispute resolution.
We do not sell your goldtoto data
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Data sharing is limited to payment processors, fraud-detection services, and compliance with legal requests.
Third-Party Processors and Data Transfers
We use third-party service providers to operate goldtoto. Our payment processors (banks, mobile-wallet companies) receive your name and account details to process deposits and withdrawals. Our hosting provider (cloud servers) stores your account data. Our email provider sends transactional and promotional emails (if you have opted in).
Our servers may sit outside your jurisdiction—for example, data may be processed in regions outside Indonesia. By using goldtoto, you consent to such transfers. We ensure all processors comply with standard data-protection practices, including encryption and access controls.
Cookies and Tracking on goldtoto
We use cookies to remember your login session, store your language preference, and track site performance. Most cookies are session-based (they expire when you close your browser). Some persist for up to one year to improve your experience on return visits.
We use analytics tools to understand how users interact with goldtoto—which pages are visited most, where users encounter friction, and how long sessions last. This helps us improve the platform. Analytics data is anonymised; we do not link it to your name or account ID.
We collect data only as necessary to operate goldtoto, protect your account, and comply with law. We do not monetise your personal information.
Your Rights on goldtoto
You have the right to request a copy of all personal data we hold about you on goldtoto. You may ask us to correct inaccurate information (e.g., if your name or address is misspelled in your account). You may request deletion of your data, subject to legal holds—for example, we must retain transaction records for several years for regulatory compliance.
To exercise these rights, contact our support team via your account dashboard or email. We respond to data-subject access requests within thirty days or sooner if possible. Some requests may require additional verification to ensure you are the account holder.
Data Retention and Deletion
We retain your account data for as long as your goldtoto account is active. If you close your account, we keep your data for up to seven years to comply with financial and gaming regulations. After that period, we delete or anonymise it unless we are required by law to retain it longer.
You may request account closure at any time by contacting support. We process closure requests within five business days, after which you can no longer log in or access your funds. Any remaining balance in your account is paid out to your registered payment method.
Data Security Practices on goldtoto
We encrypt all data in transit using SSL/TLS protocol. Your password is hashed and salted; we do not store it in plain text. Our servers use industry-standard firewalls, intrusion detection, and regular security audits. We limit staff access to your data and require multi-factor authentication for any internal system that handles sensitive information.
No system is 100 percent secure. While we take reasonable precautions, we cannot guarantee that unauthorised access will never occur. If we detect a data breach affecting goldtoto users, we notify affected accounts within the timeframe required by applicable law.
Your Choices and Contact
You control how we contact you. During account setup, you can opt out of promotional emails; we will send only transactional messages (deposit confirmations, withdrawal notifications, support replies). You may update your communication preferences in your account settings at any time.
Our goldtoto platform operates only where local law permits online gaming. If you have a privacy concern, dispute, or request related to your data, contact us via the legal notice page linked in the footer. We respond to privacy inquiries within ten business days. If you are in a jurisdiction with a data-protection regulator (e.g., a national privacy commissioner), you also have the right to file a complaint with that authority.
- Contact us for data requests or privacy concerns via your account dashboard.
- Update your communication preferences anytime in your account settings.
- Request account closure if you no longer wish to use goldtoto.
- Review this privacy policy regularly for updates.
We are committed to protecting your privacy while operating goldtoto transparently. If this policy is unclear or you have additional questions, our support team is available to help.
Jurisdiction, Eligibility, and Legal Information
Service availability
Service availability
We at goldtoto provide our gaming service only in jurisdictions where online gaming is permitted under applicable local law. We do not declare specific territories as "approved" or "banned" because gaming regulations vary widely and change frequently. Some countries permit online gaming freely; others designate specific licensed operators; still others restrict or prohibit it. That determination is yours based on the laws of your location.
When you access goldtoto, you represent that you are doing so from a jurisdiction where such access is lawful. We do not provide legal advice. If you are uncertain whether your region permits online gaming, consult a legal professional or contact your local gaming regulator before creating an account.
We retain the right to suspend or terminate accounts we identify as originating from prohibited jurisdictions. If local regulations change and your region transitions to restriction, we will notify you and provide a reasonable period to withdraw your funds before closure. We do not impose penalties or forfeitures unless required by law.
Account eligibility
Account eligibility
We at goldtoto do not enforce a universal age gate. Instead, we comply with age-of-majority and legal capacity requirements in the jurisdiction where you access our service. In most territories, the age of majority is 18 or 21; in some, it differs. When you register, you represent that you meet your jurisdiction's legal threshold.
During account creation, you provide basic information (name, date of birth, email, phone, address). Before your first withdrawal, we conduct identity and address verification by requesting government ID photos, proof of address, and a photograph holding your ID. If verification reveals you are below the age of majority or otherwise ineligible under your jurisdiction's law, we suspend your account and return funds to your payment method.
We do not knowingly permit minors or ineligible persons to use goldtoto. Parents, guardians, or individuals who discover minor account access should contact our support team immediately. Repeat violations result in permanent account closure. Your responsibility is to ensure you meet all criteria before creating an account.
Local-law responsibility
Local-law responsibility
You are solely responsible for ensuring that your access to and use of goldtoto comply with the laws of your own jurisdiction. We provide no legal guidance. This includes understanding tax obligations, reporting requirements, and restrictions on online gaming imposed by your territory. Some jurisdictions classify gaming income as taxable; others tax only amounts above a threshold; some require reporting to a national gaming authority. We do not file taxes on your behalf.
Your use of goldtoto constitutes your acknowledgment that you have verified the legality of online gaming in your jurisdiction and that you bear full responsibility for compliance. If a government authority in your territory challenges your access or account activity, we cooperate with lawful information requests. We retain transaction records and will disclose them if legally compelled.
We operate our service in reliance on your good-faith assertion that your access is lawful. If you engage in activities that violate your local laws, you alone bear the consequences. We encourage you to seek local legal advice if you are uncertain about your jurisdiction's gaming regulations before accessing goldtoto or making deposits.
Data and privacy scope
Data and privacy scope
We at goldtoto collect personal data necessary to operate your account, process payments, verify your identity, and comply with regulatory obligations. During signup, we capture your name, date of birth, email, phone number, and registered address. During withdrawal verification, we collect government ID photos, proof-of-address documents, and a photograph of you holding your ID. We collect only data necessary for these functions; we do not engage in unnecessary data harvesting.
Your data is encrypted in transit and at rest. We do not sell your information to third parties for marketing. Payment processors (DANA, OVO, GoPay, ShopeePay, LinkAja, and banks) receive only information required to process your deposits and withdrawals. Our full privacy policy details data retention periods, your rights to access and correct information, and procedures for deletion requests subject to legal holds.
If a lawful government request requires us to disclose your goldtoto data, we comply. We may be prohibited by law from notifying you of such requests. Your responsibility is to understand that any service provider, including goldtoto, may be compelled to disclose user information under applicable law. Review our privacy policy for the full scope of our data practices, or contact our legal team with specific privacy concerns.
Contact for legal inquiries
Contact for legal inquiries
If you have legal, compliance, or regulatory questions about goldtoto—regarding service availability, account eligibility, data handling, privacy practices, or other matters—contact our legal team. Reach out via the channels listed on our legal notice page (linked in the footer). We aim to respond to formal legal inquiries within five to ten business days. Urgent matters—such as data-subject access requests, account suspension appeals, or suspected fraud—receive priority handling and may be resolved faster.
For regulatory or government inquiries, we require official documentation (subpoena, statutory order, or government agency letterhead) before disclosing account records. We do not respond to informal requests from third parties claiming authority. If you are a legal representative or regulator seeking information about a goldtoto account, submit your request through official channels with proper documentation.
We maintain an internal dispute resolution process for privacy concerns. If you have a complaint about how we handle your data or our privacy practices, contact our support team first. If support does not resolve your issue, escalate to our compliance team. Depending on your jurisdiction, you may also have rights to appeal to a national data-protection authority or pursue arbitration. Our terms outline all dispute mechanisms available to you. We encourage you to exhaust internal remedies before pursuing external action.