Sports / App
This policy explains what data jalototo collects when you open an account, make a deposit through DANA or OVO, or contact our support team — and how we keep that data handled responsibly. Availability of our services depends on local law and eligible regions in Indonesia.
When you register an account, we collect the details you submit through the sign-up form — your email address, chosen username and the contact information needed to verify your identity. When you fund your account using DANA, OVO or GoPay, our system records the transaction reference, wallet identifier and deposit amount. We hold this to process your transaction, maintain an accurate account balance and respond if a payment needs investigation. We also collect session data — the device type, browser version and approximate region your connection comes from. This helps us keep your account accessible on mobile and flag unusual login patterns. We do not sell this data to third parties. Advertising partners receive only aggregated, non-identifying signals unless you have explicitly given separate consent. Cookies on the jalototo site store your login session token and your language preference. You can clear these through your browser settings at any time; doing so will end your active session. Any data we hold about your DANA or OVO payment history is kept only as long as needed for transaction dispute resolution and as required by applicable Indonesian financial record obligations.
This policy applies to all interactions with jalototo that involve your personal data — whether you are logging in, submitting a support request or completing a DANA deposit. It does not extend to third-party services you reach through links on our pages, nor to payment processors' own data practices beyond what we control. Read each item below to understand what falls inside and outside our responsibility.
Data you submit when creating or logging into your jalototo account — email, password hash, device session — falls fully within this policy. We store it, we are responsible for it, and you can request a review of what we hold at any time.
Deposit and withdrawal records linked to DANA, OVO or GoPay are covered here. We keep the reference numbers and amounts on file for dispute resolution. The payment processor's own privacy terms govern how they store your wallet credentials on their side.
Cookies placed by jalototo — session tokens, language preference, lobby state — are covered by this policy. You manage them through your browser. Cookies set by embedded third-party scripts follow those third parties' own policies, which we link to where relevant.
If you reach an external site through a link on jalototo — such as a game studio's terms page or a payment provider's help centre — their data practices are not governed by this document. Check their own policy directly before submitting personal information there.
You have specific, actionable rights regarding the personal data jalototo holds for your account. These are not abstract entitlements — each one has a direct path you can follow. Log in and open your account dashboard to see the personal details currently on file. If anything is wrong — a misspelled name, an outdated contact number, an email address you no longer use — you can submit a correction request directly through the support contact path. We will update the record and confirm the change to you. If you want to know exactly what data we hold, send a data access request to our support team. We will compile the relevant account and transaction records and share them with you. If you want data deleted, note that some records — particularly DANA or OVO transaction references — must be retained for the period required by applicable Indonesian financial regulations before deletion is possible. We will tell you which records qualify for immediate deletion and which are subject to a retention hold.
Open your account dashboard after login to see the personal details we currently hold — name, email, registered contact and linked wallet identifiers for DANA or OVO deposits.
Submit a correction request through our support channel if any detail is inaccurate. Include the field you want changed and the correct value. We confirm updates in writing once processed.
Send a written data access request to our support team. We will compile your account profile, session history and transaction references into a document and deliver it to your registered email address.
Request deletion of data that is not subject to a regulatory retention hold. Transaction records tied to DANA or GoPay payments may need to be kept for a legally required period; we will clarify which data qualifies when you ask.
If you have a question about how jalototo handles your data, or you want to exercise any of the rights described in this policy, there are three ways to reach the right team. Choose the path that fits your situation — account-related queries go fastest through live chat, while formal data requests are better handled over email so you have a written record.
Open the live chat widget from any page after login. State that your query is about your privacy or account data. The team will route it to the correct person and give you a reference number.
Send your data access, correction or deletion request to our support email address, shown in the Contact section of your account dashboard. Email gives you a written thread for formal requests.
For straightforward corrections — email address, contact number, linked DANA wallet — log in and check the profile settings page first. Many updates can be submitted directly there without contacting support.
jalototo applies access controls so that only authorised internal processes can read your stored account details. Passwords are stored as hashed values — we cannot read your plain-text password, and neither can anyone else who accesses the database. Session tokens expire after a period of inactivity, so a device left unattended does not stay logged in indefinitely. If we detect a login from an unfamiliar device or region, we may prompt additional verification before allowing account access. When your data is transmitted — including DANA and OVO deposit requests — the connection uses encrypted transport. Retention periods are set by the nature of the data: session logs are cleared on a short cycle, while transaction records linked to deposits are kept for the duration required by applicable Indonesian regulations. You can request a summary of the retention period that applies to a specific data type by contacting our support team.
We store your password as a one-way hash. No one inside jalototo — including support staff — can read your plain-text password. If you forget it, the only path is a reset sent to your registered email address.
Your login session token expires automatically after a set period of inactivity. This limits the window of exposure if a device is left unlocked. You can end a session manually from the account dashboard at any time.
Data moving between your device and our servers — including payment references for DANA, OVO or GoPay deposits — travels over an encrypted connection. This applies to both the mobile browser and the desktop site.
We keep data only as long as needed. Transaction records follow Indonesian financial record requirements. Non-transactional data such as marketing preferences can be deleted on request. Check your account dashboard or contact support for specifics.
Below are the questions we receive most often about how this policy works in practice. Each answer points you to the exact step or channel you need.
We collect the information you submit in the registration form — email address, username and contact details — plus the device and session data generated when you log in. If you deposit using DANA or OVO, we also record the transaction reference and wallet identifier linked to that payment.
Yes. Send a data access request to our support team through email or live chat. We will compile your account profile, login session history and deposit transaction references and deliver the summary to your registered email address. We aim to respond within the timeframe required under applicable local regulations.
Log in and open your profile settings — you can update your email address, contact number and linked wallet details directly there. For fields you cannot edit yourself, submit a correction request through live chat or email support. We confirm every update in writing so you have a record.
We do not sell your personal data. Payment processors such as DANA and OVO receive only the data needed to complete your specific transaction. Advertising partners receive aggregated, non-identifying signals unless you have given explicit separate consent. Third-party links on our site lead to services with their own policies, which we do not control.
Transaction records — including DANA, OVO and GoPay deposit references — are kept for the period required under applicable Indonesian financial record regulations. Session and activity logs are cleared on a shorter cycle. Contact support to ask about the retention period for a specific data type on your account.
Yes, for data not subject to a regulatory retention hold. Transaction records linked to deposits may need to remain on file for a legally required period; we will tell you which items qualify for immediate deletion when you make the request. Send it through email support so you have a written confirmation.