LEGAL REFERENCE

Your Privacy Matters to Us

We've built tol77 around your trust. This privacy policy shows exactly how we handle your account details, payment information and personal data across our live casino tables, slot...

Data ProtectionPayment SecurityAccount PrivacyTransparencyYour Control

Explore Games Read FAQ

How We Protect Your Information

tol77 collects and processes your personal information to deliver account services, process payments through DANA, OVO, GoPay and QRIS, and comply with local regulations in supported regions. We use encryption for all payment data, store your account details on secure servers, and never share your information with third parties without your consent. Your data is retained only as long as needed to

maintain your account and fulfil legal obligations. You have the right to access, update or request deletion of your personal information at any time.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Questions About Your Privacy

Team online

Email Support

Reach our privacy team directly with questions about how we handle your data, account security or payment information. We respond within 24 hours.

Account Settings

Manage your privacy preferences, communication choices and data sharing settings directly from your account dashboard. Changes take effect immediately.

Data Request Form

Submit a formal request to access, update or delete your personal information. We'll process your request and confirm completion within 14 days.

TRUST MARKERS

Privacy Standards We Follow

Encryption Standard

All payment transactions and account data use industry-standard SSL encryption. Your DANA, OVO, GoPay and QRIS details are protected end-to-end.

Regular Audits

We conduct quarterly security audits and penetration testing to identify and fix vulnerabilities before they affect your account or payment flow.

Compliance Framework

tol77 operates under data protection regulations for supported Indonesian regions. Our privacy practices align with local legal requirements and international standards.

Staff Training

Every team member handling your data completes mandatory privacy and security training annually. Access to personal information is restricted by role.

Incident Response

If a security incident occurs, we notify affected users within 48 hours and provide clear steps to protect your account and payment methods.

Third-Party Vetting

Payment processors, hosting providers and service partners sign strict data protection agreements. We audit their security practices annually.

Consistency Across Our Platform

Same Privacy Rules Everywhere	Whether you're on desktop exploring live tables, mobile browsing slots or checking sportsbook markets, your privacy protections remain identical.
Payment Data Handling	DANA, OVO, GoPay and QRIS transactions follow the same encryption and fraud-detection protocols across all devices and lobby sections.
Account Sync	Your privacy settings, communication preferences and data choices sync instantly across web and mobile. Update once, apply everywhere.
Consistent Retention	We keep your account history, transaction records and personal details for the same duration whether you play live casino or sportsbook.
Unified Support	Privacy questions, data requests and security concerns route to the same team regardless of which tol77 section you contact from.
Policy Updates	When we update this privacy policy, the changes apply uniformly across all tol77 services. We notify you 30 days before changes take effect.
Your Rights Everywhere	Access, correction and deletion rights apply to all your data across live tables, slots, sportsbook and account settings without exception.

What Defines Our Privacy Approach

Minimal Collection

We ask only for information needed to verify your account, process payments and comply with local law. No unnecessary data requests.

Clear Consent

Before we use your data for marketing, analytics or third-party sharing, we ask your permission explicitly. You control every consent choice.

Transparent Processing

This policy explains exactly what data we collect, why we collect it, how long we keep it and who can access it. No hidden practices.

Payment Isolation

Your DANA, OVO, GoPay and QRIS details never leave our secure payment gateway. We don't store full card numbers or sensitive credentials.

Deletion Rights

Request permanent deletion of your account and all associated personal data. We remove everything within 30 days except legally required records.

No Selling Data

We never sell, rent or trade your personal information to advertisers, data brokers or marketing firms. Your privacy is not a product.

Privacy Questions Answered

All payment details are encrypted using SSL 256-bit technology and stored on PCI-compliant servers. We never retain full payment credentials. Your wallet provider handles the actual transaction; we only see confirmation codes.

No. We don't share your personal information with third parties without explicit consent. Payment processors and hosting providers sign strict confidentiality agreements. Marketing partners never receive your account details or transaction history.

We delete personal data within 30 days of account closure, except records required by law (transaction history for tax compliance, fraud investigation). You can request a full data export before deletion.

We notify all affected users within 48 hours with details of what was compromised and steps to protect your account. We provide free credit monitoring if payment data was exposed. We also file incident reports with local authorities.

Yes. Submit a data access request through your account settings or email our privacy team. We'll provide a complete export of your information within 14 days, including account details, transaction history and communication records.

Only with your permission. You control marketing emails, SMS notifications and analytics tracking through account settings. Opt out anytime. We never sell analytics data to third parties or use it for targeted advertising.

Request permanent deletion through account settings or contact support. We remove all personal information within 30 days. Legally required records (tax documents, fraud investigation files) are retained separately and anonymized.