Reference

How We Protect Your Account and Data

When you open an account with xbtoto, your personal information and payment details are protected under strict policies.

Data collected only for account verificationLocal payment methods securedWithdrawal verification built inYour privacy controls explained
xbtoto How We Protect Your Account and Data
REACH US ANYTIME

How to Request Data Changes or Ask Questions

Your privacy questions are answered by our support team across multiple channels.

Live Chat Open the chat widget in your account lobby or on this site.
Email Support Send your privacy request to [email protected] with your account email and registered phone number.
Account Settings Log in to your account and go to Settings > Privacy & Security.
SECURITY & CONTROL

How We Handle Your Data Day to Day

Every piece of your information is treated with care. Your account password is encrypted before it leaves your device; our servers never see the raw password.

Encryption Standard

All passwords and payment data travel over HTTPS. DANA, OVO, GoPay and QRIS transactions use bank-level encryption. Account login details are never logged in readable form.

Data Retention

We keep your account data for as long as your account is active. After closure, game history and deposits are archived for 2 years for regulatory purposes. Personal details like your phone number are deleted after 90 days unless required by local law.

Access Control

Only authorised support staff can view your full account details, and only when you contact us. No third parties see your name, phone or payment history without your written consent.

Cookies & Tracking

We use cookies to keep you logged in and speed up the lobby. You can manage cookie settings in your browser or through Account Settings > Privacy. Some features may not work if you block all cookies.

Withdrawals Verified

When you request a payout to your DANA, OVO, GoPay or QRIS account, we verify your identity and the destination account matches your registration. This protects you from unauthorised transfers.

Your Right to Know

Request a full export of your data anytime by emailing [email protected]. We'll send you a file with every game, deposit, withdrawal and login on your account within 14 days.

What You Ask About Privacy

Read the questions below for clarity on how your data flows when you play slots, join live tables or deposit through local payment methods.

No. We never sell your name, phone, email or account details. We share data only with our payment processor to complete DANA, OVO, GoPay and QRIS deposits and withdrawals. We may disclose account information to regulators if required by local law, but we do not monetise your data.

Your game history and transaction records are kept for 2 years to settle disputes and comply with local requirements. Personal information like your phone and email are deleted within 90 days of closure. You can request immediate deletion by emailing [email protected].

Deposits are processed through encrypted payment gateways and we do not store your full payment details. We record only the transaction ID and amount. Your bank handles the final transfer; we never hold your account credentials.

Yes. Each login is recorded so you can see where and when your account was accessed. If you spot unfamiliar logins in Account Settings > Security, contact us immediately. We'll help you secure your account.

Only you and our support team (if you contact us with a question) can access your full bet history. Live table streams show your username and avatar but not your personal details. Your balance and account number are never visible to other players.

Yes, we use cookies to keep you logged in across sessions and to remember your language and volume settings. You can manage cookies in your browser settings or through Account Settings > Privacy. Disabling cookies may slow down the lobby or cause logout.

Email your request to [email protected] and we'll send a complete data export within 14 calendar days. Include your account email and registered phone number to speed up verification. Most requests are fulfilled within 5 working days.