totofarm Casino & Sportsbook Data Care

This page describes what we collect when you use totofarm and how we keep that data protected. Our privacy commitments are straightforward: we collect only what is necessary to operate our platform, process your payments, verify your identity, and comply with local law. We do not sell your information to third parties, and we encrypt all sensitive data in transit and at rest.

We at totofarm understand that trust is essential when you fund an account via DANA, e-wallet, mobile banking, or local payment, or when you place bets on Liga 1 and live casino tables. This policy outlines how we handle your personal data, your rights, and the technical and organizational measures we undertake to protect your privacy.

If you have questions about our data practices or wish to exercise your rights, our support team is available in English during standard business hours via in-app chat and email.

What Data We Collect on totofarm

We collect your data across several categories. Your account information includes your email, phone number, and username — required to set up your totofarm login and contact you about your account. Your identity information includes your full name, date of birth, government ID number, and address — collected during Know Your Customer (KYC) verification to comply with anti-money-laundering regulations and prevent account fraud.

We collect your payment data when you deposit or withdraw. If you use DANA, e-wallet, mobile banking, or local payment, we record the e-wallet account identifier and transaction amounts (but not your e-wallet password — that stays with your e-wallet provider). If you transfer via online payment, e-wallet, mobile banking, local payment, or online payment, we record your bank account details and transaction history. We also collect your betting and gaming data — which games you play, your stakes, outcomes, and session durations — to enable our platform to function and to allow you to retrieve your betting history.

We also collect technical data. Our servers log your IP address, device type, operating system, and browser fingerprint for security and fraud prevention. We use cookies and similar tracking technologies to remember your login session, your language preference, and your table stakes — this data helps us recognize you when you return and streamline your experience.

Our totafarm platform may collect location data if you grant permission on your mobile device — we use this only to prevent account access from suspicious jurisdictions. We do not track your real-time location or share location data with third parties.

How we use your data

We use your account and identity data to operate totafarm, process your deposits and withdrawals, verify your age and identity, and comply with local gaming and financial regulations. We use your payment data to execute your transactions via e-wallet, mobile banking, local payment, online payment, and your bank. We use your betting and gaming data to calculate your winnings, generate your account statement, and fulfill withdrawal requests.

We use your technical data to prevent fraud, detect unauthorized access attempts, and secure our platform. We use your cookies to maintain your login session and remember your preferences. We do not use your data for marketing unless you have explicitly opted in, and you can unsubscribe from marketing communications at any time via your account settings.

Third-party processors and data sharing

We share your data with necessary partners. Our payment processors (e-wallet providers and banks) receive your payment information to settle your deposits and withdrawals — this is unavoidable and essential. We may share your identity data with regulatory authorities and anti-money-laundering services if required by law. Our hosting provider, located outside Indonesia, stores our database backups — your data may be stored on servers in other jurisdictions, subject to encryption and data protection agreements.

We do not sell your data to advertisers, brokers, or third-party gaming platforms. We do not share your gaming history with marketing firms. Our third-party partners are contractually bound to confidentiality and are prohibited from using your data for their own purposes.

Your Rights and Our Safeguards

You have the right to access your personal data on totafarm at any time. Navigate to your Account Settings to review your profile, identity verification status, payment methods, and betting history. You also have the right to correct inaccurate data — if your address or phone number has changed, update it in your account settings. You have the right to request deletion of your account and associated data, subject to regulatory retention requirements (we may retain your identity and payment records for seven years to comply with gaming and financial law).

Our data security measures include encryption of all sensitive data in transit (using HTTPS) and at rest (using AES-256 encryption). Our servers are protected by firewalls, intrusion detection systems, and regular security audits. We limit access to your data to authorized staff members who need it to perform their roles. We do not retain your password in plain text — it is hashed using industry-standard algorithms, so even our administrators cannot see your password.

Cookies and tracking

Our totafarm website uses essential cookies to maintain your login session and remember your language. These cookies are necessary for the platform to function and cannot be disabled without breaking your account access. We also use analytics cookies to measure site traffic and identify technical issues — you can disable these via your browser settings without affecting core functionality.

We use a single-pixel tracking image on our confirmation pages to measure successful transactions — this data helps us detect fraudulent patterns and improve our payment flow.

Retention and jurisdiction

We retain your data only as long as it is necessary for the purposes outlined in this policy. Account data and betting history are retained for your account lifetime and seven years after account closure (to comply with gaming and tax regulations). Identity verification data (ID number, address) is retained for seven years. Payment transaction records are retained for seven years in compliance with financial regulations. Technical logs and IP addresses are retained for 90 days unless a fraud investigation extends retention.

Our servers may be located outside Indonesia. By using totafarm, you acknowledge that your data may be stored and processed in other jurisdictions. We ensure that all international data transfers are protected by data processing agreements that impose standards equivalent to Indonesian data protection law.

Contact and changes to this policy

If you wish to exercise your rights, request access to your data, or lodge a complaint about our data practices, reach out to our English-speaking support team via in-app chat (available during standard business hours) or email us directly. We respond to data subject requests within 30 days.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email and via in-app notification. Continued use of totafarm after such changes constitutes your acceptance of the updated policy. Our services are available only where local law permits. Users are responsible for verifying that their access and use comply with their own jurisdiction's regulations.