Reference

Privacy Policy at castelototo

When you open an account with us, your personal data—from your deposit method to your withdrawal address—stays protected under our privacy framework.

Data encryption on all account pagesPayment info never shared with third partiesYour withdrawal requests verified before processing
castelototo Privacy Policy at castelototo
REACH US ANYTIME

How to Contact Us About Your Privacy

Team online

Live Chat

Our support team in Makassar responds to privacy questions during lobby hours. Open the chat widget in your account and ask about data access, deletion requests or policy updates. Average response time is under five minutes.

Email Support

Send a formal data-access request or privacy complaint to our compliance inbox. We reply within seven business days with your personal data summary or confirmation of any changes you requested.

Account Settings

Navigate to your profile page, then Privacy & Security, to review what personal data we hold on file. You can update your email, phone or address directly; confirmation takes effect within 24 hours.

HOW WE SAFEGUARD

Data Protection and Account Security

Encryption

All pages where you enter payment details, passwords or personal data use SSL encryption. Deposit confirmations via DANA, OVO, GoPay and QRIS are logged in encrypted vaults and never stored in plain text on our servers.

Payment Isolation

We do not store full payment card numbers or digital wallet credentials. DANA, OVO, GoPay and QRIS transactions are verified by the payment provider directly; we only record the transaction ID and amount.

Cookie Use

We use cookies to keep you logged in, remember your language preference and track your lobby navigation for analytics. These are session cookies; they expire when you close your browser or log out.

Data Retention

Account data is retained for the duration of your registration plus seven years after your last login, where local law permits. Closed accounts are archived securely; withdrawal and deposit records remain accessible for dispute resolution.

Third-Party Access

We share deposit and withdrawal data only with our payment processors and where required by local financial regulators. Game studios and sportsbook providers receive only your session ID, never your personal name or address.

Request Your Data

You have the right to request a full copy of your personal data held by castelototo. Email our privacy team with your account username and we will send a complete data export within ten business days.

Privacy and Data Access — Frequently Asked

You can request account closure and data deletion through your Account Settings or by contacting our support team. Depending on local law and any open withdrawal requests, we may retain certain records for fraud prevention and regulatory compliance. Deletion requests are processed within fourteen days.

Payment credentials are never stored on our servers. DANA, OVO, GoPay and QRIS transactions are processed directly by the payment provider; we only record the transaction confirmation and amount. All communication between castelototo and payment partners is encrypted.

No. We do not sell, rent or trade your personal data. We share account information only with our payment processors and, where local law requires, with financial regulators. Game studios see only your session activity, not your identity.

Your account data remains secure and private. Inactive accounts are not deleted automatically. You can log back in anytime; your wallet balance, game history and personal details will be exactly as you left them. We retain data for seven years after last login where local law permits.

Yes. Go to Account Settings, select Profile, then edit your email, phone number or address. Changes take effect within 24 hours and your account balance, game history and withdrawal history remain untouched. Confirmation is sent to both your old and new email addresses.

castelototo monitors all systems for unauthorised access. If a breach occurs, we will notify all affected users via email within 48 hours and explain what data was exposed and what steps we have taken to secure it. Check your registered email regularly for security alerts.

We use session cookies to keep you logged in and to track your lobby navigation for analytics and fraud prevention. Cookies expire when you log out or close your browser. You can disable non-essential cookies in your Account Settings; this may affect your lobby experience but does not prevent deposits or withdrawals.