Reference

How We Handle Your Privacy at royaltoto heylink

Your account information and payment details stay secure with us. When you open your account in Surabaya or anywhere in Indonesia, we encrypt your data and keep it…

Encrypted account accessLocal payment data securityYour privacy choices explained
royaltoto heylink How We Handle Your Privacy at royaltoto heylink
CONTACT US

Privacy Questions – Reach Our Support Team

If you have questions about how we handle your data, you can contact us through live chat, email or our support form. Our team replies to privacy requests within 48 hours on business days. You can also ask to see, update or delete your personal information — just let us know what you need.

Team online

Live Chat

Open your account and tap the chat icon. We answer privacy questions during lobby hours, Monday to Sunday, 8am to midnight Indonesia time.

Email

Send your privacy request to our data team. Include your account email and username so we can find your records quickly and respond within 48 hours.

Account Settings

Go to My Account > Privacy & Data to see what information we hold, update your contact details, or request a copy of your data in one file.

DATA SECURITY PRACTICES

How We Protect Your Information

Encryption is standard on every login and payment. Your DANA, OVO, GoPay and QRIS transactions are tokenised so we never see your full account numbers.

Encrypted Transfers

Every deposit and withdrawal is encrypted end-to-end. Payment data flows through bank-grade channels and is never stored in plain text on our systems.

Account Verification

Withdrawals and password changes trigger a confirmation email or SMS. If your account logs in from a new city or device, we may ask you to verify before funds move.

Cookie & Tracking

We use cookies to remember your login and recognise your device so you don't re-enter credentials. You can disable non-essential cookies in your browser; essential ones keep your account secure.

Data Retention

Account records stay with us for as long as you play. After you close your account, we keep transaction logs for 7 years to comply with Indonesian financial reporting rules.

Staff Access Control

Only authorised support and fraud-prevention staff can view your data, and only when needed to help you or investigate a problem. Every access is timestamped and logged.

Third-Party Sharing

We share your data with payment processors (DANA, OVO, GoPay, QRIS operators), fraud-detection services and tax authorities where local law requires. We do not sell your data to marketers.

Frequently Asked Questions About Privacy

Below are answers to the questions we hear most from players about data, cookies, account security and your rights.

Yes. Go to My Account > Privacy & Data > Download My Data. We'll compile your profile, login history, all transactions and gameplay logs into one file and email it to you within 5 business days.

We store payment records (sender, amount, date, method) for 7 years to comply with Indonesian tax and anti-fraud reporting. Your account balance and game history stay in your profile while your account is open.

Your login credentials and game history are deleted within 30 days. Transaction records for tax and fraud purposes are kept for 7 years. You can request earlier deletion of non-critical data by emailing our privacy team.

No. We share data only with payment processors (DANA, OVO, GoPay, QRIS), fraud services and tax authorities where local law requires. We never sell contact details or gameplay data to advertisers or other platforms.

We use tokenisation so we never store your full account number. Payments flow through bank-grade encryption. Your bank and the payment provider control the actual account; we only receive confirmation that the transfer cleared.

Yes. Every marketing email has an unsubscribe link at the bottom. Or go to My Account > Communication Preferences and toggle off promotional messages. You'll still receive account security and withdrawal alerts.

We monitor for breaches and notify you immediately if your data is compromised. We inform the Indonesian Financial Services Authority (OJK) and law enforcement as required. We cover identity-theft services and credit monitoring for affected accounts.