This page sets out exactly what data totto12 collects when you access your account, how we store it, and the choices you hold over that information. Availability and applicable obligations depend on local law and the eligible region from which you access totto12.
Account data handled with care
Your choices are always accessible
Applies to DANA, OVO, QRIS sessions
Live casino and slots
POLICY POSTURE
What Data We Collect and Why
When you open an account on totto12, we collect the information you enter directly: your login credentials, contact details, and the payment method identifiers you connect — such as your DANA wallet reference, OVO account, or QRIS token. We do not store full payment credentials on our side; those remain within the respective payment rail's own secure environment. We also collect session data automatically: the device type, browser, IP address, and the pages you navigate within the site. This helps us confirm that your session remains consistent across devices — a practical concern if you start a session on mobile and return on desktop. Transaction records associated with your account — including DANA transfers, OVO top-ups, and QRIS payments — are retained for the period required by applicable rules in the regions where we operate. We do not share this information with third parties for their own marketing purposes. Where we engage a data processor (for example, a payment gateway that routes your DANA or OVO transaction), that processor handles your data only under our instruction and for the stated purpose. If you have questions about what specific data is held against your account, the support routes listed on this page are the right place to start.
DANA
Your DANA wallet reference is used only to process the transaction you initiate. It is not stored as a standalone credential on totto12 servers after the session ends.
OVO
OVO payment identifiers are passed to the payment gateway for routing and are retained only as a transaction record in your account history.
QRIS
QRIS tokens are session-specific. Each scan generates a new token; we do not store a persistent QRIS credential linked to your profile.
POLICY SCOPE
Where This Policy Applies and What It Covers
Not every interaction with totto12 falls under the same set of rules. Understanding what is inside and outside this policy helps you know where to direct a concern. Account access and the data you submit when logging in are fully within scope. Payment transactions routed through DANA, OVO, or QRIS involve a third-party gateway at the point of processing — we cover the data on our side; the gateway's own privacy terms govern their side. Site content — the game lobby, session history, and account settings — is within scope. Third-party links or embedded services you reach from our pages are not governed by this policy.
Account Access
Data you enter during login, account creation, and profile updates is within scope. This includes your email, contact detail, and any session token we issue to keep your device recognised.
Payment Transactions
We cover the record of a transaction stored in your account. The data processed by DANA, OVO, or QRIS infrastructure during the transfer itself is governed by those services' own terms.
Site Content and Sessions
Your activity within the totto12 lobby — including pages visited, session duration, and device information — is within scope and used only for account integrity and service improvement.
Third-Party Services
Links to external platforms or services accessed from totto12 are outside this policy. We recommend reviewing the privacy terms of any third-party service directly before sharing personal details there.
YOUR DATA RIGHTS
Practical Actions Available to You Under This Policy
You hold several practical rights over the data totto12 holds about you, and exercising them does not require legal expertise — just a support request through the correct channel. You can ask to review what personal data is stored against your account. You can request corrections if contact details or identifying information is inaccurate. If you believe a record is wrong, raise it through account support and we will verify it against the data we hold. Deletion requests are assessed against our retention obligations; where no legal or operational requirement exists to keep the data, we act on the request. All data-related requests are logged so you have a reference point for follow-up. The fastest route for most requests is the live support channel listed in the support section below — responses typically reference your account ID so there is no ambiguity about which record is under review.
Review Your Records
Contact support with your account ID and request a summary of the personal data we hold. We will confirm the categories of data and the purpose for which each is held.
Correct Account Details
If your email address, contact number, or any profile field is incorrect, raise it through account support. Corrections are applied after identity verification via your registered contact method.
Raise a Data Question
Questions about how a specific data point — such as a DANA transaction record or a session log — is used can be directed to our support team with your account reference and a brief description.
Request Data Support
For requests that go beyond a quick correction — such as account closure or a broader data review — use the email contact route so we can handle the request with a full written record on both sides.
CONTACT ROUTES
How to Reach Us About This Policy
If any part of this policy raises a question — about what we store, how long we keep it, or how to exercise your rights — reach out through one of the routes below. Include your account ID in every message so we can locate the correct record without delay. For payment-related data questions specifically (DANA, OVO, or QRIS transaction records), note the date and approximate amount so we can pull the right log.
Live Support Chat
The chat widget in your account dashboard connects you directly to our support team. Use this for quick questions about what data is shown in your account or to flag an error in your profile.
Email Support
Send data-related requests — including review, correction or deletion — to our support email address listed in your account settings. Written requests receive a written response you can keep for your records.
Account Help Centre
The Help section inside your account contains answers to common data and privacy questions, including how to update your contact details, manage session preferences, and review your transaction history.
HOW WE HANDLE DATA
Our Approach to Data Handling and Account Security
We approach data handling as a service obligation — not a formality. Cookie use on totto12 is limited to what keeps your session active and your account preferences intact across devices. We do not use cookies to build advertising profiles or share behavioural data with ad networks. Account security depends partly on the access controls you set; we recommend keeping your login credentials private and not sharing your account across devices you do not personally control. Data retention periods follow the requirements of the regions where totto12 operates, and personal data is not kept beyond the period needed for the purpose it was collected. Where you want to know exactly how long a specific record is retained, our support team can confirm that for your account type.
Cookie Use
Cookies on totto12 serve session continuity and account preferences only. We do not place third-party advertising cookies or share browsing behaviour with external ad platforms.
Account Security
Access to your account data depends on the credentials you set. We apply standard access controls on our side; you control who holds your login details. If you suspect unauthorised access, contact support immediately with your account ID.
Data Retention
Personal data is retained for the period required by applicable rules in eligible regions and no longer. Transaction records — including DANA, OVO, and QRIS logs — follow the retention schedule relevant to your account region.
Policy Updates
When this policy changes, the updated version is posted at totto12/privacy-policy/ with a revised date at the top of the page. Continued use of your account after an update constitutes acknowledgement of the revised terms.
POLICY FAQ
Privacy Policy Questions You May Have
These are the questions we receive most often about how totto12 handles personal data, account records, and your rights under this policy. If your question is not covered here, the support routes above are the right next step.
What personal data does totto12 collect when I open an account?
We collect the information you enter directly: login credentials, contact details, and the payment method references you connect (such as your DANA or OVO identifier). We also collect session data automatically — device type, IP address, and navigation activity within totto12.
How long does totto12 keep my account data?
Retention periods depend on the type of data and the requirements in the region where your account is active. Transaction records — including DANA, OVO, and QRIS logs — are kept for the period required by applicable rules. If you need the specific retention period for your account type, contact support with your account ID.
Can I request a copy of the data totto12 holds about me?
Yes. Send a request through live chat or email support with your account ID. We will confirm the categories of personal data held against your account and the purpose for each. Written requests by email receive a written response you can keep for reference.
Does totto12 share my data with third parties?
We do not share your personal data with third parties for their own marketing purposes. Where a payment gateway (such as the service routing your DANA or OVO transfer) processes data on our behalf, it does so under our instruction only and for the stated transaction purpose.
How do I correct incorrect information on my account?
Raise the correction through account support — either live chat or email. After we verify your identity against your registered contact method, the correction is applied. If a profile field cannot be edited directly in your account settings, support will handle it for you.
What happens to my data if I close my account?
A deletion or closure request is assessed against our retention obligations. Where no legal or operational requirement exists to keep a specific record, we act on the request. Some transaction data may be retained for the period required in your eligible region even after account closure.