LEGAL REFERENCE

Your Privacy Matters to Us

We built tomat189 around your trust. This privacy policy shows exactly how we handle your account details, payment information and gameplay data. We're transparent about what we collect...

Data ProtectionPayment SecurityAccount PrivacyTransparent PracticesIndonesia-Compliant
Explore Games Read FAQ
tomat189 Your Privacy Matters to Us

Our Privacy Commitment

tomat189 operates under Indonesian data protection standards and regional compliance frameworks. We collect personal information only to verify your identity, process your DANA, OVO, GoPay and QRIS deposits, and deliver your gaming experience. Your data stays encrypted and is never sold to third parties. We retain account records for the duration of your membership plus the period required by local law. If

you have questions about how we handle your information, our support team is ready to help.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Questions? We're Here

Email Support Send privacy concerns to our dedicated team. We...
Live Chat Chat with our support agents in real time...
Account Settings Review and update your personal details anytime. Your...
PLATFORM TRUST SIGNALS

Why You Can Trust Our Privacy Standards

Encryption Standard

All data in transit and at rest uses industry-standard encryption. Your QRIS, DANA, OVO and GoPay payment details are protected...

Regular Audits

We conduct independent security reviews to verify our systems meet current privacy benchmarks. Audit results inform our ongoing data protection...

No Third-Party Sales

We never sell your personal information to advertisers, brokers or unrelated companies. Your data stays within tomat189 and our essential...

Transparent Logging

We keep detailed records of who accesses your account and when. You can request an access log anytime to see...

Compliance Team

Our legal and compliance staff monitor Indonesian data protection rules and regional updates. We adjust our practices to stay ahead...

Incident Response

If a security issue occurs, we notify affected account holders within 48 hours with clear steps to protect your account...

How Our Privacy Policy Stacks Up

Data Minimization
We ask for only the information needed to verify your identity and process DANA, OVO, GoPay and QRIS payments. No unnecessary fields, no hidden data collection.
User Rights
You can request access to your data, ask for corrections, or request deletion where local law permits. We process these requests within 14 days.
Cookie Transparency
Our cookie policy is plain-language. We explain what each cookie does, how long it stays, and give you control over non-essential tracking.
Payment Privacy
Your QRIS, DANA, OVO and GoPay details are tokenized. We never store full payment credentials on our servers; payment processors handle the sensitive data.
Gameplay Logs
We keep gameplay records for account verification and dispute resolution only. These logs are encrypted and accessible only to authorized staff.
Policy Updates
When we change this policy, we notify you 30 days in advance. You can review the changes and decide whether to continue using your account.
Indonesia-First Approach
Our privacy framework is built around Indonesian law and regional standards, not generic global templates. Your local rights are our baseline.
AT A GLANCE

What Defines Our Privacy Approach

01
Account Verification We verify your identity once during signup using your phone number and email. This one-time check keeps your account secure and prevents fraud across the platform.
02
Session Security Your login session expires after 30 minutes of inactivity. This protects your account if you step away from your device on a shared computer or public network.
03
Two-Factor Option Enable two-factor authentication in your account settings for an extra security layer. We send a code to your phone whenever you log in from a new device.
04
Data Portability Request a copy of your account data anytime. We'll send your personal information, transaction history and gameplay records in a standard format you can download.
05
Deletion Rights Close your account and request data deletion where permitted by law. We remove your personal details within 90 days, keeping only records required for compliance.
06
Privacy by Default Your account is private by default. We don't share your gameplay, balance or activity with other players, and we don't display your profile publicly.

Privacy Policy Questions Answered

We collect your name, phone number, email address and date of birth during signup. For DANA, OVO, GoPay and QRIS deposits, we collect transaction details only. We don't collect your browsing history, location data or device identifiers unless you opt in.

We retain your account records for seven years after closure to comply with Indonesian financial regulations. Personal details like your name and contact information are deleted within 90 days unless legal holds apply.

Yes. Log into your account, go to Settings, and select 'Download My Data'. We'll compile your personal information, transaction history and gameplay records into a downloadable file within five business days.

No. Payment details are tokenized and processed by our payment partners. We store only a reference token, not your actual card or wallet credentials. Your bank or e-wallet provider holds the sensitive data.

Only tomat189 staff with a legitimate business need can access your data. Our support team sees your contact details and transaction history. Our security team monitors access logs. We never share your information with marketing partners or advertisers.

We notify all affected account holders within 48 hours with details of what was compromised and steps to protect your account. We also report the incident to relevant Indonesian authorities and work with law enforcement if needed.

Yes. Visit our cookie settings page and disable non-essential cookies. Essential cookies for login and security will remain active. You can also use your browser's privacy settings to block third-party trackers.