Reference

lakitoto Privacy Policy — What We Collect and Why

The lakitoto Privacy Policy explains exactly what personal data we collect when you open an account, how we use it to process payments via DANA, OVO, GoPay and…

Account data protectedDANA & QRIS context coveredYour rights clearly statedIndonesia-specific scopeContact path available
lakitoto lakitoto Privacy Policy — What We Collect and Why
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you have a question about how your data is stored, want to request a correction or need to know the status of a deletion request…

Live Chat Available 24 hours a day, seven days a week.
Email Support Send detailed privacy requests — data access, correction or deletion — to our privacy…
WhatsApp Message us directly via WhatsApp for quick privacy queries.
HOW WE HANDLE IT

Data Handling, Cookies and Account Security

We apply a layered approach to data protection that covers storage encryption, access controls and cookie management.

Storage Encryption

All personal data — including phone numbers used for account verification and payment wallet references like OVO and GoPay — is stored using encryption at rest. Access is limited to authorised personnel only.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand which lobby sections are opened most. You can manage cookie preferences through your browser settings at any time without losing your account data.

Account Security Steps

Phone verification is required before your account becomes active. If we detect login attempts from an unrecognised device — common for players in Makassar or Denpasar switching between mobile and desktop — we trigger an additional check.

Data Retention

Transactional records, including QRIS and bank transfer receipts, are retained for the period required by applicable regulations where local law permits. After that period, records are deleted from our active systems.

Third-Party Sharing

We share data only with payment processors needed to complete DANA, OVO, GoPay and QRIS transactions, and with identity-verification services required at account level. We do not share data with advertisers.

Your Rights and Requests

You may request to access, correct or delete your personal data at any time. Submit your request through live chat or email; we will confirm receipt within 24 hours and complete eligible requests within 30 days.

Privacy Policy — Questions We Hear Most

The questions below come from account holders who want to understand how their data is used before or after registering. Each answer is specific to the lakitoto Privacy Policy and the payment methods we support in Indonesia.

We collect your name, phone number, email and payment wallet details such as your DANA or OVO account reference. Device data and session logs are also recorded to protect your account from unauthorised access.

Yes. Any QRIS scan reference, DANA wallet ID or bank transfer detail you submit during a deposit or withdrawal is covered by this policy and stored under encryption. We do not expose these to third-party advertisers.

We retain transactional records — including GoPay and virtual account receipts — for the period required by applicable regulations where local law permits. Once that period ends, records are removed from active storage.

Yes. Contact us through live chat or our privacy email with your registered phone number and account ID. We will compile and send your data within 30 days of receiving a verified request.

We use session cookies for login continuity and analytics cookies to track which lobby areas are visited. You can adjust cookie settings in your browser; this does not affect your account balance or payment method preferences.

The policy applies to all accounts opened where local law permits. Specific data-retention or disclosure obligations may vary by region, so we note throughout the policy that certain practices depend on local law.

Submit a deletion request via live chat or email, quoting your account ID. We will confirm receipt within 24 hours. Eligible records are removed within 30 days, subject to any retention requirements that depend on local law.