Reference

Our legal commitment to your account

We've built our legal framework around your account security, transparent withdrawal processes, and clear player rights.

Account verification on signupReal-time withdrawal tracking24/7 legal support contactData privacy by designPayout transparency

Explore the Lobby Read FAQ

How we operate within legal boundaries

login castletoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

login castletoto operates where local law permits and keeps this policy visible to all account holders. Your access and eligibility depends on local law in your region. We retain deposit and withdrawal records for verification and dispute resolution, handle your personal data under industry-standard encryption, and

1
keep session logs for account security. All withdrawals are verified against your account history before clearing to your chosen payment method — DANA, OVO, GoPay or QRIS — and this process is logged on your transaction page. Our legal team reviews account access, data requests and
2
payment disputes during business hours, with escalation paths available through our support channels.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

REACH OUR TEAM

Contact us about your legal rights

Team online

Live Chat

Open a chat window inside your account dashboard for immediate responses about account security, data requests, or withdrawal disputes. Available during business hours with escalation to our legal team.

Email Support

Send formal requests, dispute notices or data access requests to our legal mailbox. We respond within 48 hours and keep a record of every request for your account file.

Account Settings

Your account legal section shows your registration details, last login location, linked payment methods and withdrawal history. Review and flag any discrepancies there.

SECURITY & DATA

How we protect your account and information

Encryption Standard

All login sessions use TLS 1.2 encryption. Your password is hashed on entry; we never store it in plain text. Device fingerprinting logs login attempts so you see who accessed your account.

Data Retention

We keep account records for 7 years after closure for regulatory compliance and dispute resolution. Withdrawal and deposit logs are permanent; session data is purged after 90 days of inactivity.

Payment Security

DANA, OVO, GoPay and QRIS transfers use tokenization — we never see your full payment details. Each withdrawal is verified against your linked account before release to prevent fraud.

Cookie & Tracking

We use functional cookies to keep you logged in and analytics cookies to understand lobby usage. No third-party ad tracking. You can disable non-essential cookies in settings; essential ones stay for account security.

Data Access Request

You can request your full account data dump (all personal info, game history, payment records) anytime through Account Settings or email support. We compile and send it within 14 days.

Account Closure

Close your account anytime from settings. We delete personal data within 30 days; transaction history and payment records stay for 7 years as required by law. Pending withdrawals must clear first.

Frequently asked legal questions

Request a reset via the login screen or account email. We send a secure link valid for 2 hours. Once reset, your old password is no longer valid; if you think your account was accessed without permission, contact support immediately to review login logs.

Yes. Open Account Settings, then Security, and scroll to Login History. You'll see device type, IP address, location and timestamp for every login in the last 90 days. Flag any you don't recognise.

We keep all deposit and withdrawal records for 7 years after your account closes. This helps us verify disputes and comply with local financial reporting. You can download your transaction history anytime from the Wallet page.

We collect your name, date of birth, email, phone number and linked payment details (DANA, OVO, GoPay or QRIS account reference, not full card numbers). We use this to verify your identity, prevent fraud and process withdrawals.

Yes. Go to Account Settings, select Privacy, then Data Export. We compile your full account file (signup info, game history, deposits, withdrawals, messages) and email it within 14 days. File format is CSV and PDF.

No. We share payment details only with DANA, OVO, GoPay and QRIS processors to execute transactions. We never sell or rent player data. Third-party analytics tools see only anonymised lobby usage; they never see your account details.

Contact support immediately. We lock your account, review login history, verify recent withdrawals and cancel any pending transfers. If fraudulent activity occurred, we investigate and issue a reversal where possible. Document everything and keep our ticket number.

Our legal commitment to your account

Contact us about your legal rights

Live Chat

Email Support

Account Settings

How we protect your account and information

Encryption Standard

Data Retention

Payment Security

Cookie & Tracking

Data Access Request

Account Closure

Frequently asked legal questions

01 What happens if I forget my password?

02 Can I see who logged into my account?

03 How long do you keep my payment records?

04 What personal data do you collect during signup?

05 Can I export my account data?

06 Do you share my data with third parties?

07 What's your policy if my account is compromised?

Related Pages