Reference

How hoktoto web Handles Your Personal Data

At hoktoto web, your personal data belongs to you — we collect only what we need to operate your account, process your withdrawals, and keep your session secure.

Data collected only for account operationSecure storage with encryption at restYour right to access, correct, or deleteDANA, OVO, GoPay and QRIS transaction privacyContact us anytime via live chat or email
hoktoto web How hoktoto web Handles Your Personal Data
PRIVACY CONTACT

How to Reach Us About Your Data

If you have a question about this policy, want to see what data we hold on your account, or need to request a correction, our privacy support team is available every day from 08:00 to 23:00 WIB. You can also reach our team from Denpasar the same way — all channels connect to the same privacy desk, and we aim to respond within 24 hours of receiving your request.

Team online

Live Chat

Start a chat session directly from your account dashboard. Our privacy desk is available 08:00–23:00 WIB, seven days a week, to answer data queries and process access requests in real time.

Email

Send a detailed privacy request to our dedicated address at [email protected]. We aim to confirm receipt within two hours and resolve most requests within 24 hours of submission.

Account Portal

Log in, go to Settings, then Privacy, to download a copy of your stored data or submit a deletion request directly. No need to contact support — the portal processes it automatically.

DATA PRACTICES

Six Ways We Protect Your Account Privacy

Privacy at hoktoto web is not a checkbox — it is woven into how your account is built.

Encrypted Storage

All personal data on your account — including your email, date of birth and linked payment tokens for DANA or OVO — is stored with AES-256 encryption at rest. Backups follow the same standard, with no plaintext copies retained anywhere on our infrastructure.

Cookie Policy

We use session cookies to keep you logged in and preference cookies to remember your lobby settings. We do not use third-party advertising cookies. You can clear all cookies via your browser settings at any time without losing your account data.

Retention Periods

Account data is kept for as long as your account is active. If you close your account, non-financial data is deleted within 30 days. Transaction records tied to GoPay or QRIS payments are retained for the legally required period, then purged automatically.

Access Requests

You have the right to request a full copy of the personal data we hold under your account. Submit the request through Settings → Privacy or via email, and we will deliver a structured data file to your registered email address within 24 hours.

Correction and Deletion

If your stored data is incorrect — wrong phone number, outdated address — you can correct it directly inside the account settings panel. Deletion requests for non-financial data are processed within 30 days. Eligibility for full erasure depends on local law.

Third-Party Sharing

We share data only with payment processors like DANA, OVO, GoPay and QRIS strictly to complete your transactions, and with fraud-prevention services to protect your account. We do not share your data with advertisers or data brokers under any condition.

Common Questions About Our Privacy Policy

Below are the questions we hear most often from account holders about how hoktoto web collects, uses and protects personal data. If your question is not covered here, reach our privacy desk via live chat between 08:00 and 23:00 WIB or send an email to [email protected].

We collect your name, email address, date of birth, and the payment method you link — DANA, OVO, GoPay or QRIS. We also log your device type and session IP address for security monitoring purposes only.

No. When you transact via DANA or OVO, those providers send us only a transaction confirmation token. We never see or store your full wallet PIN, password or account number — those stay within the provider's own encrypted system.

Transaction records tied to deposits and withdrawals — including those processed via GoPay and QRIS — are retained for the minimum period required under applicable financial regulations, then deleted automatically. Non-financial account data is removed within 30 days of account closure.

Yes. Log in and go to Settings → Privacy to submit a data access request, or email [email protected]. We deliver a structured file to your registered email within 24 hours of confirming your identity.

Most fields — phone number, address, preferred payment method — can be updated directly in your account settings panel without contacting support. For fields locked after verification, reach our live chat team between 08:00 and 23:00 WIB to submit a correction request.

We do not share your personal data with advertisers or data brokers. Data is shared only with payment processors such as DANA, OVO, GoPay and QRIS to complete your transactions, and with fraud-prevention partners solely to protect your account.

You can submit a deletion request through Settings → Privacy or by emailing our privacy desk. Non-financial data is deleted within 30 days. Whether full erasure of all records is possible depends on local law and the applicable financial record-keeping requirements.