LEGAL REFERENCE

How We Handle Your Account Data

This is the lctoto privacy policy — the page that tells you exactly what we collect when you open an account, what we keep, and what we never...

Indonesia-focusedPlain EnglishMobile-friendlyUpdated regularly
lctoto How We Handle Your Account Data

Our Privacy Posture and Your Rights

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Reach Our Privacy Desk Directly

Team online

Privacy Inbox

Email our data team for export, correction or deletion requests. We reply inside two working days and confirm the action against your registered account before any change is committed.

Live Chat

Open the chat bubble in the lobby and ask for the privacy queue. The agent routes you straight to a data handler so you skip the standard cashier and account flow.

Account Centre

Inside your account you'll find a privacy panel with download, edit and close-account buttons. Most requests resolve there without needing to message us at all.

TRUST MARKERS

How We Keep This Policy Honest

Reviewed Quarterly

Our privacy text is reviewed every quarter against Indonesia data rules and our own product changes. If something material shifts...

Named Owner

A single privacy owner signs off every revision. That accountability means the wording you read here matches what our engineers...

Plain Language

We strip legalese where we can. If a clause needs a defined term, we explain it inline so you don't...

Audit Trail

Every data export, correction and deletion is logged with a timestamp and operator ID. You can request the audit slice...

Limited Sharing

Processors handling DANA, OVO, GoPay and QRIS settlements receive only the transaction slice. Marketing, analytics and product teams work on...

Breach Protocol

If anything ever touches your account record without authorisation, we notify you directly and tell the relevant Indonesia authority within...

SIDE BY SIDE

Consistency Across Our Policy Pages

01

Terms of Service

The terms page references this privacy policy by section number. Definitions of account, device and wallet reference match exactly between the two documents.

02

Cookie Notice

Cookie categories described here line up one-to-one with the toggles on our cookie banner. Nothing tracks you that isn't named on both pages.

03

KYC Statement

Identity checks described in our KYC notice use the same retention windows and deletion triggers stated in this privacy text — no hidden secondary copy.

04

Cashier Disclosures

Wallet processor names shown at cashier match the third-party list in this policy. If a partner changes, both pages update in the same release.

05

Marketing Preferences

Opt-in language on the sign-up form mirrors the consent clause here. Withdrawing consent in your account flows back through the same record.

06

Account Closure

The closure flow inside your account triggers the deletion timetable described in this policy. No separate request channel is needed for standard cases.

07

Children's Notice

Our age clause is identical across registration, terms and this policy. Accounts flagged as underage are handled the same way every time.

PLATFORM SNAPSHOT

What Defines This Policy Page

01
Single Source Everything about your data lives on this one page. We don't scatter clauses across help articles or hide retention timetables behind a support ticket — scroll once and you have the full picture.
02
Versioned Updates Each revision carries a date and a short note explaining what changed. You can compare versions on request so you always know which clause governed your account at any point.
03
Indonesia Context Wording is tuned to Indonesia data expectations and the wallet rails our readers actually use. Generic global boilerplate has been rewritten for the local account flow.
04
Reader Controls Export, correction and deletion buttons sit inside your account, not buried in email threads. The policy describes each control and what timeline you should expect after pressing it.
05
Minimal Collection We only ask for fields the lobby actually needs. If a section of the site doesn't require a data point, you won't be prompted for it during sign-in or at cashier.
06
Clear Sharing Map Third parties are listed by category and purpose. You can see at a glance which processor handles wallet settlement versus identity checks versus device safety.

Privacy Questions Readers Ask Us

Your registered name, a contact channel, device fingerprint for sign-in safety, and the wallet reference you pick at cashier. Nothing else is required to get you into the lobby on day one.

For the period Indonesia financial and gaming rules require, then we purge. The exact window depends on the data type and is listed in the retention clause inside the details section above.

Yes. Open the privacy panel in your account or email the privacy desk. We package your record as a readable file and deliver it within two working days of identity confirmation.

No. We never sell your details. Marketing partners only see aggregated, de-identified figures, and processors handling DANA, OVO, GoPay or QRIS receive just the slice needed to settle that transaction.

We trigger the deletion timetable described in this policy. Records the law requires us to retain are isolated and purged when the window closes; everything else goes immediately on closure.

We publish revisions with a timestamp at the top of the page and notify registered accounts through the channel you chose at sign-up. Old versions stay available on request for comparison.

Use the privacy inbox listed in our support section, or open live chat and ask for the privacy queue. A named data handler will respond and log the case against your account.