totoslotx Privacy Policy: How We Handle Your Account Data
At totoslotx, every piece of account data you share with us — from your login credentials to your linked e-wallet details for LinkAja or QRIS transactions — is handled with a clear purpose and stored only for as long as that purpose requires. This policy explains what we collect, why we collect it, and how you can review or question it at any time.
Account data protection
LinkAja & QRIS context
Your rights, clearly stated
Contact path available
POLICY SCOPE & BASIS
What This Policy Covers and Why It Applies to You
This Privacy Policy applies to every interaction you have with totoslotx — account creation, login sessions, wallet linkage and transaction records. When you connect a payment method such as LinkAja or QRIS to your account, we receive only the data needed to process that transaction: a reference ID, an amount and a status. We do not store full card numbers or e-wallet PINs. Session data — including device type, screen resolution and browser session tokens — is collected automatically to keep your account active across visits. We retain this data for as long as your account remains open, or for a period required under applicable local law, whichever is longer. If you close your account, non-transactional session data is removed on the schedule described in the retention section below. Our legal basis for processing your data depends on the applicable laws of your jurisdiction. Where local law requires explicit consent, we will ask for it before processing begins. Where processing is necessary for contract performance — for example, completing a QRIS deposit — no separate consent step is added, but you may raise a question about any processing decision through our support channel at any time. Availability of this service depends on local law and eligible regions.
LinkAja
Reference ID and transaction status only — no PIN or full account credentials stored.
QRIS
Scan-and-pay reference data retained for transaction records; raw QR content is not logged beyond the session.
Account Login
Session tokens and device identifiers used to maintain continuity across your mobile and browser visits.
Local Law
Processing basis and retention periods align with applicable Indonesian law and eligible regional requirements.
INSIDE VS OUTSIDE SCOPE
Where This Policy Applies Across Your Account
Not every service you reach from totoslotx falls under this policy. Third-party payment processors, e-wallet providers and game studios operate their own data practices, and we cannot speak for what they collect on their side of the connection. The table below clarifies what this policy does and does not govern, so you know exactly where our obligations begin and end.
Account Access
Your login email, session tokens and device data are fully within this policy. We control how they are stored, how long they are kept, and who inside our team can see them.
Transactions
Transaction reference data for LinkAja and QRIS payments is covered here. The internal data held by those payment providers is governed by their own privacy terms, not ours.
Site Content
Browsing behaviour on totoslotx pages — which sections you visit, how long you stay — is collected through our own analytics. That data stays within this policy.
Third-Party Services
Game studios supplying content to the lobby hold their own data on gameplay sessions. Any data that passes to a studio's own servers falls outside the scope of this policy.
YOUR DATA RIGHTS
Practical Steps to Review, Correct or Question Your Data
Your account data is not locked away. You have a clear path to review what we hold, correct anything that is out of date, and raise a question if something is unclear. Start by logging into your account dashboard — the profile section shows the personal details and linked payment references we currently hold. If a detail is wrong, you can edit most fields directly from that screen without contacting support. For data you cannot edit yourself, such as historical transaction records tied to a closed LinkAja reference, send a request through our support channel and we will apply the correction or explain why that record must remain as it is. Where applicable local law gives you the right to request deletion of non-transactional data, we will process that request within the timeframe the law requires and confirm completion by the same support channel you used to submit it.
Review Your Records
Log in and open the profile section of your account dashboard to see the personal details and payment references we currently hold against your account.
Correct Account Details
Edit most personal fields directly from your profile screen. For records you cannot change yourself, submit a correction request through our support channel.
Raise a Data Question
If you are unsure why a specific piece of data was collected or how it is being used, contact us via the support path below and we will explain the processing basis.
Request Data Removal
Where local law permits, you may request deletion of non-transactional account data. We will confirm the outcome through the same channel you used to submit the request.
PRIVACY CONTACT PATHS
How to Reach Us About This Policy
If you have a question about how your data is handled, or you want to submit a correction or removal request, use one of the channels below. Keep your account username or registered email ready so we can locate your records quickly and respond accurately.
Live Chat Support
Open the chat widget from any page on totoslotx while logged in. Mention 'privacy request' at the start of the conversation so the agent can route it to the right team.
Account Help Centre
Head to the Help section from your account dashboard. The privacy and data request category lists the steps and forms available for your region and account type.
Email Request
Send a written request to our support email address listed in the Help Centre. Include your account username and a clear description of the data action you are requesting.
DATA HANDLING PRACTICES
How We Protect and Manage Your Account Data
Data protection at totoslotx is built into account operations, not added on top of them. Cookie settings, retention schedules and access controls are part of how the platform runs — not optional extras. Here is what each practice means for your account.
Cookies and Session Tokens
We use session cookies to keep you logged in across page loads and to remember your preferred lobby section. You can review and clear these through your browser settings at any time. Functional cookies required for login cannot be disabled without ending your session.
Account Security
Access to your stored account data inside our systems is restricted to authorised team members acting on a verified support request. We do not share account data with game studios or payment processors beyond what a specific transaction requires.
Data Retention
Transactional records — including LinkAja and QRIS reference data — are retained for the period required under applicable local law. Non-transactional session data is removed when your account is closed, following the schedule set out in our internal retention policy.
Policy Changes
When this policy changes in a material way, we will post the updated version at this address and note the change date at the top of the page. Continuing to use your account after a posted change means you have seen the update; if you have questions, contact us before that point.
POLICY QUESTIONS ANSWERED
Common Questions About Our Privacy Policy
Below are the questions we receive most often about how totoslotx handles account data, cookies and privacy requests. If your question is not listed here, use the support channel described above.
What personal data does totoslotx collect when I create an account?
We collect your registration email, a password hash and the device identifiers associated with your first login. If you link a payment method such as LinkAja or QRIS, we also store the transaction reference data required to process and reconcile that payment. We do not collect identity documents unless a specific verification step requires it.
Does totoslotx share my data with game studios like Pragmatic Play or CQ9?
Game studios receive only the session data needed to load and run a game on your device — typically a session token and a stake value. They do not receive your email, registered name or payment details. Any data those studios hold on their own servers falls under their own privacy terms.
How do I find out what data totoslotx currently holds about me?
Log in and open the profile section of your account dashboard. Personal details and linked payment references are shown there. For a full data summary, submit a request through the live chat or Help Centre and we will compile the records held under your account.
Can I ask totoslotx to delete my account data?
Where applicable local law gives you a deletion right, you can submit a removal request through our support channel. Transactional records tied to completed payments may need to be kept for the period required by law; we will confirm which records can be removed and which must be retained, and explain the reason for each.
How does totoslotx use cookies, and can I turn them off?
We use functional cookies to maintain your login session and remember your last lobby position. You can clear these through your browser settings, but disabling functional cookies will end your active session. Optional analytics cookies can be declined without affecting account access; the current setting is shown in the cookie notice displayed on your first visit.
Does this Privacy Policy apply to all regions where totoslotx is available?
The policy applies to all accounts active on totoslotx where service is available. Availability depends on local law and eligible regions. Where specific local laws impose additional requirements — such as consent obligations or shorter retention limits — those requirements take precedence, and we apply them alongside this policy.