LEGAL REFERENCE

Your privacy is how we build trust

We collect and protect only what's needed to run your account, process your DANA, OVO, GoPay and QRIS payments, and deliver the live tables, slots and sportsbook you...

Account ProtectionPayment SecurityData TransparencyYour Control
bestoto Your privacy is how we build trust

What we collect and why

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Privacy questions? Contact us

Team online

Email Support

Send privacy concerns to our data team at [email protected]. We respond within 24 hours with clarification on how we handle your information.

Live Chat

Jump into our support chat from your account dashboard. Ask about data retention, payment privacy or request copies of your stored information anytime.

Account Settings

Update your contact details, review login history and manage data-sharing preferences directly from your profile. Changes take effect immediately.

REVIEW SIGNALS

How we earn your trust on privacy

Encryption Standard

All data in transit and at rest uses TLS 1.2+ encryption. Your DANA, OVO, GoPay and QRIS details never touch our core servers unencrypted.

Audit Trail

Every login, payment and account change is logged. You can see your activity stream in Settings and know exactly when and where your account was accessed.

Third-Party Review

Our infrastructure undergoes annual security audits by independent firms. Results are available upon request to holders of verified accounts.

Data Minimization

We ask only for information needed to verify identity, process payments and comply with local law. No unnecessary fields. No hidden collection.

Breach Response

If unauthorized access occurs, we notify affected account holders within 24 hours and provide guidance on securing your funds and changing passwords.

Transparent Disclosure

Legal requests for your data are logged and shared with you whenever law allows. We push back on overbroad demands and disclose what we hand over.

How our privacy posture compares

Data Sellingbestoto does not sell or license your personal data to advertisers, data brokers or third-party marketers. Your profile stays yours.
Cookie TransparencyWe use only essential and analytics cookies. Marketing cookies require your consent. You can opt out of analytics at any time via Settings.
Payment PrivacyDANA, OVO, GoPay and QRIS transactions are tokenized. Your wallet credentials are never stored, logged or shared with our affiliate network.
Account DeletionRequest permanent account closure and data erasure anytime. We delete your profile and anonymize historical records within 30 days.
Subpoena LimitsWe comply with lawful legal process but never provide raw user datasets. Each request is reviewed by our legal team before any disclosure.
Policy UpdatesChanges to this privacy policy are announced 14 days in advance. Continued use after the effective date means you accept the new terms.
International TransferYour data may be processed in multiple jurisdictions to run our platform. We apply the same encryption and access controls everywhere.

What defines our privacy approach

Jurisdiction Clarity

bestoto operates in supported regions under local gaming and data protection law. This policy reflects Indonesian privacy standards and payment sector requirements.

Account Ownership

Your account and all funds within it belong to you. We are custodians only. If bestoto ceases operations, your balance is returned via original payment method.

Behavioral Analytics

We track gameplay patterns to detect problem gambling signals and fraud. If we flag concerning activity, we reach out to check in with you directly.

Cookie-Free Lobby

Browse our slot rooms, live tables and sportsbook without cookies. We only place cookies after login to remember your preferences and language.

Payment Tokenization

DANA, OVO, GoPay and QRIS are stored as tokens, not raw credentials. Only the payment processor holds your wallet details; we never see them.

Consent Granularity

Choose which communications you receive—sportsbook updates, slot promotions, account alerts. Opt out of any category in your Notifications panel.

Privacy questions answered

We anonymize your personal details within 30 days of closure. Transaction records for accounting and regulatory purposes are retained for seven years. You can request full deletion of non-mandatory fields at any time by emailing [email protected].

No. Payment credentials are tokenized by our processor and never stored on our infrastructure. We keep only a reference token to process future transactions. Your actual wallet details remain with DANA, OVO, GoPay or QRIS operators.

We comply with lawful subpoenas and legal requests from Indonesian authorities where jurisdiction applies. Each request is reviewed by our legal team. We never provide raw databases and disclose only what the law requires. You are notified when possible.

All data in transit uses TLS 1.2+ encryption. Access to your account is logged and visible in your account Settings. Enable two-factor authentication for extra security. We conduct annual security audits and respond to breaches within 24 hours.

Essential cookies run the platform. Analytics cookies help us understand gameplay trends. Marketing cookies require your consent. You can disable all non-essential cookies in your privacy settings and still access the lobby and live tables.

We review this policy annually and notify you 14 days before any material change. Your continued use after the effective date means you accept the updated terms. Major changes are highlighted in your account inbox.