pestototo Privacy Policy: How We Handle Your Account Data
This policy explains what data pestototo collects when you access our lobby, create an account, or use a connected payment method like DANA, ShopeePay, or LinkAja — and how we keep that information under your control. What we collect, why we collect it, and how you can request changes are all set out in the sections below.
Account & wallet data
DANA, ShopeePay, LinkAja context
Your rights, clearly stated
Contact path included
POLICY SCOPE EXPLAINED
What This Policy Covers and How It Applies
When you open an account on pestototo, we collect the details you submit during registration — your email address, chosen username, and any payment identifiers you connect, such as a DANA wallet number or a ShopeePay account reference. We also collect session data: device type, browser session tokens, pages visited inside the lobby, and actions taken on your account dashboard. This data is used to operate your account, process transactions through connected e-wallets, and deliver support when you raise a question. We do not sell your personal data to third parties. Data shared with payment processors — DANA, ShopeePay, LinkAja — is limited to what those processors require to complete a transaction and is governed by their own published policies. Retention periods follow what is required under applicable Indonesian data regulations and may vary depending on account status. Cookies and similar session tools are used to keep you logged in and to measure how the lobby is used; you can manage cookie preferences through your browser settings. Access to this site and its data practices depends on local law and is available only where local law permits.
DANA
When you connect a DANA wallet, we pass only the transaction reference needed to confirm the deposit or withdrawal. Your DANA credentials stay within DANA's own system; pestototo does not store them.
ShopeePay
ShopeePay transactions work the same way — we send the amount and your account reference; ShopeePay handles authentication on their side. We retain only the transaction record in your account history.
LinkAja
LinkAja connections follow the same limited-data approach. We keep a record of each transaction for your account statement, but the payment credentials themselves are never stored on our servers.
INSIDE VERSUS OUTSIDE
Where This Policy Applies
Not every service you reach from the pestototo lobby falls under this policy. The table below shows what is inside and what falls to a third party's own terms.
Account access and login
Fully covered. Data you submit to create or access your account — email, password hash, session token — is managed by pestototo and governed by this policy.
Lobby transactions
Covered for the record we hold. The payment instruction we send to DANA, ShopeePay, or LinkAja is within scope; the payment processor's handling of that instruction is governed by their own policy.
Site content and game delivery
Game content delivered by studios in our lobby — including titles from Joker, CQ9, Microgaming, JDB, Habanero, and Spadegaming — is outside this policy. Those studios have their own data practices for game-session data they collect directly.
Third-party links and services
Any external site or service you reach by following a link from our pages is outside this policy entirely. We have no visibility into what those services collect or how they use it.
YOUR ACCOUNT RIGHTS
Actions Available to You Under This Policy
You have practical options when it comes to the data pestototo holds about you. You can request a copy of the account data we hold — submit the request through the support channel listed in the contact section below and we will respond within the timeframe required by applicable regulation. If your registered email, username, or connected payment reference is incorrect, you can update most details directly from your account settings page after login; for changes that require identity verification, the support team will walk you through the steps shown in your account. If you want to raise a question about how your data is handled — or request that your account be closed and your data reviewed for deletion — the contact path is through our support channels. Availability of deletion or correction rights may depend on local law and what is required for transaction record-keeping.
Review your records
Log in and open your account dashboard. Transaction history, connected payment methods, and session preferences are visible there without contacting support.
Correct account details
Most profile fields are editable directly in account settings. For email changes or payment-method updates that require verification, contact support and follow the steps shown in the verification flow.
Raise a data question
Use the live chat or email support channel to ask about data retention, processing purpose, or any other question this policy does not answer clearly. We will respond within the period required by applicable rules.
Request account closure
Send a closure request through support. We will confirm what data is retained after closure for regulatory record-keeping purposes and what is deleted, based on applicable Indonesian requirements.
REACH OUR TEAM
Contact Paths for Privacy Questions
If something in this policy is unclear or you need to act on a data request, these are the routes to reach us. Each channel connects to the same support team; choose whichever fits your situation.
Live Chat
Open the chat widget from any page inside the lobby. For account and privacy questions, have your registered email ready so the team can locate your record quickly.
Email Support
Send your question or data request to our support address listed in the account help section after login. Include your username and the nature of your request so we can route it correctly.
Account Help Section
Your account dashboard includes a help section that links directly to the relevant request forms — account correction, data review, and closure requests are all accessible there after login.
HOW WE PROTECT DATA
Data Handling, Cookies, and Account Security
pestototo uses standard web security practices to protect data in transit and at rest. Session data is encrypted and account access requires authenticated login. Here is what we do in each key area.
Data retention
We keep account records for as long as your account is active and for the period required by Indonesian transaction regulations after closure. You can ask support for the specific retention period that applies to your account type.
Cookies and session tools
We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can manage or clear cookies through your browser settings at any time; clearing session cookies will log you out.
Account security
Access to your account requires your registered credentials. We recommend using a unique password and checking your login history in the account dashboard if you suspect unauthorised access. Contact support immediately if something looks wrong.
Policy updates and contact
If this policy changes, the updated version is posted on this page. For questions about a specific change or to request a copy of the previous version, reach out through the support channels listed in the section above.
COMMON POLICY QUESTIONS
Frequently Asked Questions About This Policy
These are the questions we hear most often about data, privacy, and account rights at pestototo.
What personal data does pestototo collect when I open an account?
We collect your email address, chosen username, and device session data when you register. If you connect a payment method like DANA or ShopeePay, we also store the account reference needed to process transactions — not your payment credentials.
Does pestototo share my data with third parties?
We do not sell your data. We share only what is necessary with payment processors — DANA, ShopeePay, LinkAja — to complete a transaction. Game studios in our lobby may collect their own session data under their own policies, which are separate from ours.
How can I see the data pestototo holds about me?
Log in and open your account dashboard. Transaction history and connected payment references are visible there. For a full data export, submit a request through live chat or email support and we will respond within the applicable regulatory timeframe.
Can I request that my account data be deleted?
Yes. Send a closure and deletion request through support. We will confirm which records are deleted and which must be retained for regulatory purposes under applicable Indonesian law. Availability depends on your account status and local requirements.
How does pestototo handle cookies?
We use session cookies to keep you logged in and analytics cookies to measure lobby usage. You can manage or clear cookies through your browser settings. Clearing session cookies will end your current login session.
Who do I contact if I have a question this policy does not answer?
Reach us through live chat from any lobby page, or use the email support address listed in your account help section after login. Include your username and a brief description of your question so the team can route it to the right person.