Your privacy matters to us
At lagunatoto, we're transparent about how we collect, use and protect your personal information. This privacy policy explains what data we gather when you open an account, play...
Our privacy commitment and scope
lagunatoto operates within supported regions of Indonesia and complies with applicable data protection laws. We collect information necessary to verify your identity, process deposits and withdrawals via DANA, OVO, GoPay and QRIS, and deliver our gaming services. Your data is encrypted and stored securely. We do not sell personal information to third parties. Payment processors handle transaction data independently under their own
privacy terms. This policy covers your interactions across our website, mobile app and lobby. By creating an account, you agree to these practices.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Contact us about your privacy
Editorial trust and governance
Privacy Officer
A dedicated privacy officer oversees data handling, breach response and policy updates. They ensure lagunatoto aligns with regional data protection standards and your rights as an account holder.
Encryption Standard
We use industry-standard 256-bit SSL encryption for all transmissions involving account credentials, personal data and payment information. Regular security audits verify our infrastructure.
Third-Party Audit
Our payment processors (DANA, OVO, GoPay, QRIS) maintain independent certifications. We audit vendor access logs quarterly to confirm no unauthorized handling of your information.
Data Retention Schedule
We retain account data for the duration of your membership plus 24 months afterward to satisfy regulatory and dispute-resolution obligations. You may request deletion sooner where law permits.
Breach Response Protocol
If unauthorized access affects your data, we notify you within 72 hours with details of what occurred, steps we took and your options. We cover identity monitoring costs where applicable.
Policy Review Cycle
We review this privacy policy annually and after significant platform changes. Material updates are announced in your account inbox 30 days before they take effect.
How our privacy aligns with your expectations
| Transparent Data Use | Unlike generic platforms, we spell out exactly why we collect each data point—from account verification to lobby personalization—and never use it for unrelated marketing without your consent. |
|---|---|
| Payment Privacy | When you deposit via DANA, OVO, GoPay or QRIS, your payment details stay with the processor. lagunatoto receives only confirmation and balance updates, not your card or wallet credentials. |
| No Data Sharing Sales | We do not monetize your profile by selling data to advertisers, brokers or analytics firms. Your gaming history and preferences remain yours alone within lagunatoto's ecosystem. |
| Regional Compliance | Our policy reflects Indonesia's data protection environment and supported regions. If you move jurisdictions, we update your data handling to match your new region's laws. |
| User Control Defaults | You control communication frequency, data visibility to other players and third-party integrations. We default to privacy-first settings; you opt in to extras, not out. |
| Dispute Access Rights | You may request a copy of all personal data we hold, see how we use it and challenge its accuracy. We fulfill these requests at no cost within 30 days of your written request. |
| Kids & Account Holders | Our platform is age-restricted. We do not knowingly collect data from minors. If we discover underage account activity, we suspend the account and delete associated personal information. |
What shapes our privacy approach
Account Security Layer
Every login is checked against unusual location, device and timing patterns. If we spot anomalies, we send a verification code to your registered email or phone before granting access.
Session Management
Your lobby session times out after 15 minutes of inactivity. You control how long login tokens persist. Each logout clears session memory from our servers within seconds.
Game Play Logging
We record spins, bets and outcomes purely to settle disputes, detect fraud and honor your payout requests. Logs are encrypted and accessible only to our compliance team when investigating claims.
Cookie & Tracking
We use cookies to remember your language, lobby preferences and login status. No tracking cookies follow you off-site. You can disable all cookies in your browser; the lobby will still load.
Marketing Consent
We ask permission before sending promotional emails or push notifications. Unsubscribe links appear in every message. Your choice updates instantly; no delay between opting out and delivery stop.
Data Portability
Request your account history in CSV or JSON format. We include all personal details, deposits, game records and communications. Export arrives within 5 business days to your registered email.