LEGAL REFERENCE

Your Data, Your Control

We built zorro toto around Indonesia's payment ecosystem and your account security. This policy explains how we collect, use and protect your information across live tables, slots and...

Data ProtectionPayment SecurityAccount PrivacyTransparencyYour Rights
Browse the Lobby Read FAQ
zorro toto Your Data, Your Control

Policy Scope & Jurisdiction

zorro toto operates under the laws of jurisdictions where local gaming regulations permit. We collect personal data — your name, email, phone number, payment details and gameplay records — to verify your account, process DANA, OVO, GoPay and QRIS transactions, and deliver live casino, slot and sportsbook services. Your data is encrypted and stored securely. We do not sell your information to

third parties. Where local law permits, we retain account data for compliance and dispute resolution. You may request access, correction or deletion of your personal information by contacting our support team.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Questions & Support

Email Support Reach our privacy team at [email protected] with any data requests, account concerns or policy questions. We respond within 48 hours.
Live Chat Open the chat widget in your account dashboard to speak with a support agent about your privacy settings, data access or payment security.
Account Settings Manage your personal information, communication preferences and data-sharing choices directly in your account dashboard under Privacy & Security.
REVIEW SIGNALS

How We Protect Your Privacy

Encryption Standard

All account data, payment details and gameplay records are encrypted using industry-standard TLS 1.2+ protocols. Your DANA, OVO, GoPay and...

Compliance Framework

We follow data protection standards aligned with Indonesian regulations and international best practices. Regular security audits verify our systems meet...

Third-Party Vetting

Payment processors, live casino providers and sportsbook partners sign data-protection agreements. We audit their security practices annually to ensure your...

Access Controls

Only authorized staff can access your personal data, and only for account verification, fraud prevention or customer support. All access...

Incident Response

If a security breach occurs, we notify affected users within 72 hours and provide guidance on account protection steps. Our...

Data Retention

We retain your account data for the duration of your membership plus seven years for compliance and dispute resolution. You...

Privacy Consistency Across zorro toto

Live Casino Tables
Your gameplay data, bet history and session records are encrypted and stored separately from payment information. Evolution and other live providers do not retain your personal data.
Slot Lobbies
Slot session data is logged for responsible-play tracking and fraud prevention. Pragmatic Play and PG Soft titles do not collect personal information beyond your account ID.
Sportsbook Markets
Your betting history, odds selections and settlement records are encrypted. We do not share your sports preferences with third-party analytics firms.
Payment Processing
DANA, OVO, GoPay and QRIS transactions are processed through PCI-DSS-compliant gateways. Your wallet credentials are never stored on our servers.
Account Verification
We collect your name, ID number and phone for KYC compliance. This data is encrypted and accessible only to our compliance team for regulatory reporting.
Communication Preferences
You control email, SMS and in-app notifications in your account settings. We do not sell your contact details to marketing partners or affiliate networks.
Cookies & Tracking
We use session cookies to keep you logged in and analytics cookies to improve site performance. You can disable non-essential cookies in your browser settings anytime.

What This Policy Covers

Account Registration

When you open an account, we collect your name, email, phone number and date of birth for identity verification. This data is encrypted and used only for account management and compliance.

Gameplay Activity

We log your session times, game selections, bet amounts and outcomes to detect fraud, prevent underage access and support responsible-play tools. This data is retained for 12 months.

Payment & Withdrawal

Your DANA, OVO, GoPay and QRIS details are processed through secure payment gateways. We store only your wallet identifier, not your full credentials. Transaction history is retained for seven years.

Device & Location

We collect your IP address, device type and approximate location to verify your account, prevent fraud and comply with regional access rules. This data is deleted after 90 days.

Customer Support

When you contact our team, we store your messages, account notes and support tickets for dispute resolution and service improvement. You can request deletion of support records anytime.

Marketing Consent

We send promotional emails and SMS only if you opt in. You can unsubscribe from any campaign with one click. We never share your contact details with external marketers.

Privacy Policy Questions

Your wallet credentials are never stored on our servers. All transactions are processed through PCI-DSS-compliant payment gateways with end-to-end encryption. We store only your wallet identifier for future transactions, not your full payment details.

Yes. Email [email protected] with your account details and request type. We'll provide your personal information, gameplay history and payment records within 14 days. You can also download your data from Account Settings > Privacy & Security.

We retain your account data for the duration of your membership plus seven years for compliance and dispute resolution. Gameplay logs are kept for 12 months. Payment records are retained for seven years. You may request deletion where local law permits.

We share only your account ID and session token with Evolution, Pragmatic Play, PG Soft and other providers to deliver live tables and slots. We do not share your personal name, email, phone or payment details with game providers.

We monitor our systems 24/7 for unauthorized access. If a breach occurs, we notify affected users within 72 hours with guidance on account protection. We work with local authorities and security firms to investigate and prevent future incidents.

Yes. Contact [email protected] to request account deletion. We'll remove your personal information within 30 days, except data required by law for compliance and dispute resolution, which we retain for seven years.

We use session cookies to keep you logged in and analytics cookies to improve site performance. You can disable non-essential cookies in your browser settings. We do not use cookies to track you across other websites.