Reference

How We Handle Your Account and Data

When you open an account with bbtoto online, your personal information, payment details and account activity are protected under clear terms.

Clear terms for every account holderData security and payment protection explainedDirect contact paths for legal questions
bbtoto online How We Handle Your Account and Data
LEGAL CONTACT PATHS

How to Reach Us About Legal Matters

If you have questions about your account terms, data rights, or how we handle your information, our support team can direct your inquiry to our legal department. We respond to account-access requests, data-deletion requests and legal questions through the channels below. Players in Semarang, Makassar and across Indonesia can contact us in English during support hours.

Team online

Live Chat Support

Open the chat widget in the bottom right of your account lobby. Our team responds during support hours, typically 08:00–22:00 WIB daily. They can log your legal inquiry or forward it directly to our compliance team.

Email Inquiry

Send a formal request to our legal contact address listed in your account settings under 'Help > Legal Contacts'. Include your account username, the nature of your request and any supporting details. Responses arrive within five business days.

Account Settings Panel

Navigate to Settings > Privacy & Data when logged in. You can view what personal information we hold, request a copy of your data or submit a deletion request. The panel shows the status of any active requests.

DATA AND ACCOUNT SECURITY

How We Protect Your Information and Account

Your account security and data privacy are core to how we operate bbtoto online. We use industry-standard encryption for all transactions, two-factor authentication to protect account access, and segregated payment processing so…

Encryption and Payment Security

All deposits and withdrawals use SSL encryption, the same standard banks use. DANA, OVO, GoPay and QRIS transactions are routed through dedicated payment gateways that do not store your full card or bank details on our platform.

Two-Factor Authentication

When you log in from a new device or location, we send a verification code to your registered email or phone. This second step stops unauthorized access even if your password is compromised. You can enable or disable this in Settings > Security.

Withdrawal Verification

Before any withdrawal clears, we verify your identity via a second method — a live chat confirmation, email link or SMS code. This ensures funds go to the account holder only, regardless of which payment method you used.

Cookie and Session Management

We use session cookies to keep you logged in and remember your game preferences. These expire after 30 minutes of inactivity. You can clear cookies in your browser settings or disable them entirely; logging out will end your session immediately.

Data Retention and Deletion

Your account data is kept for as long as your account is active, plus the retention period required by local payment law, usually seven years after your final transaction. You can request deletion of non-essential data through Settings > Privacy & Data.

Access Requests and Rights

You can request a full copy of the personal data we hold about you, including your profile, transaction history and support records. Submit this request via the Privacy & Data panel or contact our legal team. Responses arrive within 14 days where local law permits.

Your Questions About Account Terms and Data

We collect your full name, email address, phone number, date of birth and payment method details when you register. We also record your IP address, device type and browser type for security and fraud prevention. This information is used to verify your identity, process your deposits and withdrawals, and comply with payment industry rules.

Yes. Go to Settings > Privacy & Data in your account lobby and select 'Request My Data' or 'Request Deletion'. For non-essential data, deletion is usually completed within 14 days. Account transaction records are retained for the period required by payment law, typically seven years, and cannot be deleted while your account is active.

After you close your account, we retain your name, transaction history, withdrawal records and dispute logs for the minimum period required by local payment law, usually seven years. Your password and session data are deleted immediately. Depends on local law for any extensions beyond this period.

Your DANA, OVO, GoPay and QRIS details are encrypted and never stored on our gaming servers. All transactions route through dedicated payment gateways that meet bank-level security standards. We never ask for your full card number, PIN or bank login details. Two-factor verification is required before every withdrawal.

Change your password immediately and enable two-factor authentication in Settings > Security. Contact our support team via live chat or email right away with your account username and a description of the suspicious activity. Our security team will review your account history and help you recover access if needed.

We do not sell your personal data to third parties. We share information only with payment processors (DANA, OVO, GoPay and QRIS) to complete your deposits and withdrawals, and with legal authorities where required by law. All third parties are bound by confidentiality agreements and must meet the same security standards we maintain.

You can close your account at any time through Settings > Account > Close Account. All funds must be withdrawn first. Once closed, your account is inactive but your data is retained as required by law. Reopening depends on local law and our compliance review; contact support for details on your specific situation.