Your Privacy Comes First at cbtoto
We built cbtoto around your account security and data protection. Every transaction through DANA, OVO, GoPay and QRIS is encrypted. This policy shows exactly how we handle your...
How We Protect Your Information
cbtoto collects your account details, payment preferences and gameplay history to deliver your lobby experience. We use industry-standard encryption for all transactions. Your DANA, OVO, GoPay and QRIS payment data never leaves our secure servers. We don't sell your information to third parties. Where local law permits, we retain account records for dispute resolution and fraud prevention. Your consent to this policy
is required to open an account and access our live tables, slots and sportsbook.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Why Your Data Is Safe With Us
SSL Encryption
Every login, deposit and withdrawal uses 256-bit SSL encryption. Your DANA, OVO, GoPay and QRIS transactions are protected end-to-end.
PCI Compliance
We meet Payment Card Industry standards for handling payment data. Regular audits ensure our security protocols stay current and effective.
Data Minimization
We collect only the information needed to run your account and process payments. No unnecessary data collection or tracking beyond lobby operations.
Fraud Detection
Our systems monitor for suspicious activity on your account. Unusual login patterns or payment attempts trigger immediate verification steps.
Regular Audits
Third-party security firms audit our infrastructure quarterly. We fix vulnerabilities immediately and publish transparency reports annually.
Indonesia Jurisdiction
cbtoto operates under Indonesian law where applicable. Your privacy rights are protected by local regulations and our commitment to transparency.
Our Privacy Standards vs Industry Baseline
| Data Retention | We keep account records for 7 years post-closure for dispute resolution. Most platforms retain indefinitely or delete after 3 years. |
|---|---|
| Payment Transparency | Your DANA, OVO, GoPay and QRIS transaction history is visible in your account. Many platforms hide payment details or charge for access. |
| Third-Party Sharing | We never sell your data to advertisers or data brokers. Industry standard allows selling anonymized data; we don't participate. |
| Encryption Standard | All data in transit and at rest uses 256-bit encryption. Competitors often use 128-bit or weaker protocols for cost savings. |
| Breach Notification | We notify affected users within 24 hours of any security incident. Industry average is 30-60 days or longer. |
| User Control | You can download your data, request deletion or opt out of communications anytime. Most platforms require support tickets or deny requests. |
| Policy Updates | We notify you 30 days before any privacy policy change. You can review changes and close your account if you disagree. |