Reference

How we handle your account and payment privacy

Your personal information—from your account credentials to your DANA, OVO, GoPay and QRIS deposits—is protected by encryption and strict access controls.

Account securityPayment privacyData request rights
login castletoto How we handle your account and payment privacy
PRIVACY CONTACT

Reach our privacy and data team

Questions about how we collect, use or store your information? Our support team handles privacy requests during business hours. Submit formal data access or deletion requests through your account settings, or contact us directly for clarification on any aspect of this policy.

Team online

Live chat support

Available Monday–Friday, 08:00–22:00 WIB. Ask about your data, cookies, or account privacy settings. Instant response to common privacy questions.

Email data requests

Send formal requests to access, correct or delete your personal data. Response within 7 business days. Include your account username and email address.

In-account settings

View your stored profile information, recent deposits and withdrawal history. Request data export or update your preferences from the Security tab.

DATA HANDLING

How login castletoto protects your privacy

We encrypt all sensitive data in transit and at rest using industry-standard protocols. Payment details are processed through secure gateways; we never store your full DANA, OVO, GoPay or QRIS credentials on…

Encryption standard

All data transmissions use TLS 1.2+. Payment gateways are PCI-DSS compliant. Your DANA, OVO, GoPay and QRIS transaction IDs are tokenized.

Account security audit

Every login is timestamped and tagged with your device type and IP region. View and revoke active sessions from your Security dashboard anytime.

Password protection

Passwords are hashed using bcrypt. We never email or display your password. Reset requests expire after 24 hours for security.

Data retention policy

Personal data is deleted 24 months after your last login, unless legal holds apply. Tax records and withdrawal receipts are kept for seven years.

Cookie & tracking control

Essential cookies enable login and payments. Analytics cookies track game play for improvement; disable them in browser settings at any time.

Withdrawal verification

Identity confirmation for payouts requires photo ID or bank account proof. This data is encrypted and stored separately from your lobby profile.

Frequently asked about your privacy on login castletoto

Below are answers to the privacy questions we hear most from players in Jakarta, Surabaya and across Indonesia. If your question isn't covered, contact our support team.

We collect your full name, date of birth, email, phone number and address for account verification. Payment method details (DANA, OVO, GoPay, QRIS account info) are tokenized and never stored in plain text. Withdrawal requests require photo ID or bank statement. We also log your IP address and device type for security.

Yes. Open your account, navigate to Security > Personal Data, and you'll see your profile information, deposit history and linked payment methods. To request a full data export (including login logs and game history), contact support via email. We provide exports within 7 business days.

Payment credentials are never stored on login castletoto servers. When you deposit, your DANA, OVO, GoPay or QRIS account is processed through a secure third-party gateway. Only a unique token is saved to your wallet. Withdrawals require identity verification and route directly to your linked account.

Upon request, we delete your personal profile within 30 days. Tax records and withdrawal receipts are retained for seven years per local law. If your account becomes inactive for 24 months, personal data is automatically deleted, though withdrawal records remain archived for compliance.

We do not sell your personal data. We share information only with payment processors (to verify deposits), anti-fraud partners (to protect your account) and legal authorities where required by law. Your game activity is never shared for marketing without your consent.

Cookies store your session, language and game preferences. Essential cookies are required to log in and process DANA, OVO, GoPay and QRIS deposits. Analytics cookies help us improve the platform. You may disable non-essential cookies in your browser settings without losing account access.

You can request access to all data we hold, correct inaccurate information, export your data in portable format, or request deletion. Where local law permits, you may also opt out of marketing emails and disable game-tracking cookies. Submit requests via in-account settings or email support.