astra toto Privacy Policy

This page describes what we collect when you use astra toto and how we keep that data protected. Our privacy practices reflect our commitment to transparency — we do not sell your information to third parties, and we only collect data necessary to operate our platform and comply with financial regulations.

We at astra toto process personal data (such as your email, phone number, and identity verification documents) to verify your account, process deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers, and maintain records for regulatory compliance. We also collect gameplay data (such as your betting history and account balance) to provide our service and detect fraud or suspicious activity.

Our privacy practices are governed by this policy and apply to all users of astra toto in our supported jurisdictions. By creating an account, you consent to our data collection and processing as outlined below. If you have questions about how we handle your data, contact our support team at any time.

What data we collect on astra toto

We collect several categories of information when you create an account and use our platform:

Identity data. When you sign up for astra toto, we collect your full name, date of birth, email address, and phone number. We use this information to verify your identity and prevent duplicate or fraudulent accounts. During account verification, we may ask you to upload a photo of your government-issued ID (such as a passport or national ID card). We store this document securely and use it only for verification purposes.

Payment data. We collect information about your deposits and withdrawals, including the amount, date, time, and payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank details). We do not store your full payment card numbers — our payment processors handle those details and send us only confirmation of the transaction. We retain payment records for accounting and regulatory compliance.

Gameplay data. We collect information about your activity on astra toto, including which games you play, your bet amounts, your winnings and losses, and the timestamps of your sessions. We use this data to provide our service, calculate your account balance, detect fraud or unusual patterns, and maintain accurate records.

Device and connection data. We collect information about the device you use to access astra toto (such as its type, operating system, and browser), your IP address, and your approximate location based on your IP. We use this data to optimize our platform for your device, detect unauthorized access, and comply with financial regulations that require us to verify your jurisdiction.

Identity verification: We collect your name, birth date, email, phone, and government ID to verify your account and prevent fraud.
Payment records: We store details of every deposit and withdrawal you make on astra toto for accounting and compliance purposes.
Gameplay history: We record your bets, wins, losses, and session times to provide our service and detect suspicious activity.
Technical data: We collect your device type, IP address, and approximate location to optimize our platform and ensure compliance.

How we use your data on astra toto

We use the data we collect for several purposes:

Service delivery. We use your data to operate astra toto, process your deposits and withdrawals, maintain your account balance, settle your bets, and provide customer support. Without this data, we cannot provide our platform.

Fraud prevention. We analyze your data to detect unusual patterns, such as multiple accounts from the same device, rapid deposit-and-withdrawal cycles, or betting behavior consistent with money laundering. If we detect suspicious activity, we may temporarily restrict your account or ask for additional verification.

Regulatory compliance. We are required by financial and anti-money-laundering regulations to collect certain data and retain it for specified periods. We share this data only with regulators or law enforcement when legally compelled to do so.

Platform improvement. We use anonymized data (such as aggregate gameplay statistics) to improve our platform, fix bugs, and add features. This data cannot identify you individually.

Third-party processors and data location

We use third-party service providers to operate astra toto. Our payment processors (such as the companies behind mobile banking, local payment, online payment, and other payment methods) receive your payment information to verify and process transactions. Our email provider sends you account notifications. Our hosting provider stores our servers and databases.

We require all third-party processors to sign data-processing agreements that require them to protect your data with the same standard of care we use. However, our servers may be located outside Indonesia, which means your data may be transferred to and stored in other jurisdictions. By using astra toto, you consent to this transfer. If you do not consent, you should not use our platform.

We do not sell or rent your personal data to third parties for marketing purposes. We do not share your data with other gaming platforms or unrelated businesses. We share your data only with processors necessary to operate astra toto, and only to the extent required.

Your rights regarding your data on astra toto

You have the right to access, correct, and request deletion of your personal data, subject to legal obligations we may have to retain it. To exercise these rights, contact our support team. We will respond to requests within a reasonable timeframe.

Please note that we may be required by law to retain certain data (such as payment records for tax and anti-money-laundering compliance) even if you request deletion. If you request account closure, we will delete your data as soon as permitted by law, but will retain transaction records as required by financial regulations.

You have the right to object to our processing of your data. However, if you object to essential processing (such as identity verification or fraud detection), we may not be able to provide astra toto to you, and your account may be closed.

Cookies and tracking on astra toto

We use cookies (small files stored on your device) to remember your login status, track your preferences, and improve your experience on astra toto. Cookies are essential to our platform — without them, you would need to log in every time you visit.

We also use analytics tools to measure how users interact with our platform. These tools may set cookies or use similar tracking technologies. The data collected is used only to improve astra toto and is not shared with third parties for marketing purposes.

You can disable cookies in your browser settings, but doing so may prevent astra toto from functioning properly. If you disable cookies, you will not be able to log in or access your account.

Our privacy commitments

We collect only data necessary to operate astra toto and comply with financial regulations.
We do not sell or rent your personal data to third parties.
We encrypt your data in transit and at rest using industry-standard protocols.
We use cookies to improve your experience; you can disable them, but astra toto may not function properly.
You have the right to access, correct, and request deletion of your data, subject to legal retention obligations.
If we experience a data breach, we will notify you as required by law.

Data security and breach notification

We at astra toto use industry-standard encryption and security measures to protect your data from unauthorized access, alteration, or disclosure. Our servers use TLS (Transport Layer Security) to encrypt data in transit. Sensitive data (such as identity documents and payment information) is encrypted at rest using AES-256 encryption.

We conduct regular security audits and penetration testing to identify and fix vulnerabilities. We also require our employees and contractors to sign confidentiality agreements and undergo security training.

If we experience a data breach that compromises your personal data, we will notify you as required by law. In the event of a breach, we will also notify relevant regulators and financial authorities as required.

Service availability and jurisdiction notice

We at astra toto operate in supported jurisdictions where our service is permitted by local law. Our privacy practices comply with applicable data-protection regulations in those jurisdictions. If you are located outside our supported regions (such as Jakarta, Surabaya, Bandung, Medan, or Semarang), you may not be able to access astra toto.

Our services are available only where applicable law permits. You are responsible for verifying that your use of astra toto complies with your jurisdiction's privacy and data-protection laws.

If you have questions about our privacy practices, how we collect and use your data, or your rights, contact our support team. We are available to clarify any aspect of this policy or discuss your concerns about privacy on astra toto. You may also refer to our Terms and Legal notice for additional information about how we operate.