Reference

How hengtoto Handles Your Privacy

When you open an account with us, your personal information and payment details stay secure on our platform.

Account verification onlyPayment data encryptedNo third-party sharing without consent
hengtoto How hengtoto Handles Your Privacy
CONTACT & RIGHTS

How to Request Data Access or Changes

If you want to see what data we hold about you, ask us to update it, or request deletion, reach out through our support channels.

Email Support Send a data-access or deletion request to our privacy team at [email protected]. Include your registered phone number or account email so we can verify you quickly.
Live Chat Open the chat window in your lobby during support hours (08:00–22:00 WIB, Surabaya time zone) to ask about your privacy settings or request account data export.
Account Settings Visit the Privacy & Security tab in your account menu to review what personal details we hold, update your phone or email, or opt out of promotional messages.
DATA SECURITY MEASURES

How We Keep Your Information Safe

Every deposit and withdrawal is encrypted end-to-end using SSL technology, the same standard banks use. We run regular security audits to check for vulnerabilities and keep payment data in isolated, locked servers.

SSL Encryption

All data moving between your device and our servers is encrypted with 256-bit SSL, protecting your payments and personal info from interception.

Payment Isolation

DANA, OVO, GoPay and QRIS payment details are processed through PCI-certified gateways, not stored on our main platform database.

Password Security

Your login password is hashed and salted so we cannot see it, and you can enable two-factor authentication (2FA) via SMS for extra login protection.

Fraud Detection

We monitor login patterns and withdrawal requests in real-time. If activity looks unusual, we ask you to confirm your identity before processing the transaction.

Data Retention

Account and transaction records are kept for seven years where local law requires; older records are deleted or anonymized to reduce your digital footprint.

Privacy Team

Our dedicated privacy officer reviews data practices quarterly and handles deletion or correction requests within the timeframe set by your local jurisdiction.

Frequently Asked About Your Privacy on hengtoto

Below are the questions we hear most about how we use your data, what rights you have, and how we protect your account.

No. We do not sell or rent your personal information to third parties. We only share data with payment processors (for DANA, OVO, GoPay and QRIS transactions) and fraud-prevention partners when needed to keep your account safe. We never share your details with marketing or advertising networks.

Yes. Email [email protected] with your account details and we will send you a complete data export within 14 days. The file includes your profile, transaction history, and any personal information linked to your account.

Your account is deactivated immediately and login access stops. Transaction records are retained for seven years for compliance; personal details like your name and phone are kept on file until requested for deletion, then removed within 30 days of your request.

Payment records (withdrawal amounts, dates, DANA, OVO, GoPay or QRIS reference numbers) are kept for seven years to meet regulatory requirements. Your actual card or bank account number is deleted from our servers within 24 hours of the transaction completing.

Yes, we use cookies to keep you logged in and to track your lobby activity so we can show you relevant games and fix technical issues. You can manage cookie settings in your browser; blocking cookies may limit some features. We do not use cookies to track you on other websites.

We notify affected users by email or SMS within 72 hours of discovering a breach, explain what was compromised, and outline steps we've taken to secure your account. We also file a report with local authorities where required by law.

Yes. Contact our privacy team at [email protected] to request account deletion. Personal details are removed within 30 days; transaction records are kept only as long as local law requires, then deleted. A fresh account can be created after deletion is complete.