How birtoto Handles Your Account Data
This is the birtoto privacy policy — the plain-language version of how we collect, store and use the information tied to your account. We've written it for you...
Policy Posture and Scope of This Notice
Where local law permits, this policy governs how birtoto processes the data attached to your account: the email or phone you registered with, device identifiers, session logs and the payment references generated when you top up. We keep these on access-controlled systems and we don't sell them on. In supported regions you can request a copy of your records, ask us to
correct an entry, or close the account entirely. Third-party processors — payment gateways, game studios, anti-fraud tools — see only the slice they need to complete a request, nothing more.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Contact Paths
If something in this policy needs clarifying, or you want to act on a data right, these are the channels that route straight to our privacy desk rather than general support.
Privacy Inbox
Email our data team directly when you want a copy of your account records, a correction to stored details, or full deletion. We aim to reply within three working days across supported Indonesia regions.
In-Lobby Chat
Open the chat bubble inside your account and ask for the privacy queue. The agent will escalate cookie questions, marketing opt-outs or consent withdrawals to the team that actually owns those settings.
Written Request
Prefer a paper trail? Send a signed letter referencing your registered handle and we'll match it to your file, verify identity, then action the request under the timelines this policy sets out.
How We Review This Policy
Signals that show this notice is maintained, not copy-pasted and forgotten.
Quarterly Review
Our compliance team re-reads this page every quarter against current Indonesian data practice. Any change to processors, retention windows or cookie categories triggers a fresh version stamped at the foot of the document.
Named Owner
A single privacy lead signs off every revision before it goes live. That person also handles escalations, so the wording you read here matches the person who'll answer your data request.
Plain Language
We rewrite jargon into sentences a first-time account holder can follow. If a clause needs a legal term, we explain it in the same paragraph rather than burying definitions in a separate glossary.
Processor List
Every third party that touches your data — payment rails, game providers, fraud screens — sits on a list we keep current. Adding a new processor means updating this policy before the integration goes live.
Retention Clock
Records have fixed lifespans tied to the reason we hold them. Once that reason ends and legal hold periods expire, the row is purged from active systems on a scheduled sweep.
Audit Trail
Access to account data is logged at the row level. If you ask who viewed your file and why, we can reconstruct that history rather than handing back a vague summary.
Consistency With Our Other Legal Pages
How this notice lines up with the rest of the birtoto legal set.
What This Policy Page Covers at a Glance
The visible building blocks of this notice, so you can jump to the part you actually need.
Data We Collect
Registration details, device fingerprints, session logs and the references tied to lobby activity. We list each category with the reason we hold it rather than lumping everything under one vague heading.
How We Use It
Running your account, keeping the lobby secure, meeting legal duties in supported Indonesia regions, and improving the parts of the product you actually open. No use beyond those buckets without a fresh consent.
Who Sees It
Internal staff on a role-based access model, plus the named third parties on our processor list. Each external party is bound by a contract that restricts use to the task we hired them for.
How Long We Keep It
Retention is tied to the reason. Active account data stays while the account is open; closed-account records sit for the legal minimum, then the scheduled purge clears them from live systems.
Your Rights
Access, correction, deletion, portability and the right to withdraw consent for marketing. Every right has a contact route in the support section above and a response window we publicly commit to.
Policy Updates
When wording changes, the version stamp at the foot of this page moves. Material changes are flagged inside your account on next sign-in so you don't miss something that affects you.