Reference

How We Protect Your Account and Payment Information

When you open an account with wintomato, your personal data and payment details are encrypted and stored on secure servers.

Encrypted account securityDANA, OVO, GoPay and QRIS payment protectionYour data, transparent handling
wintomato How We Protect Your Account and Payment Information
REACH US ANYTIME

How to Contact Us About Your Privacy

Team online

Live Chat Support

Open your account and head to the chat icon in the lobby. Our team responds to privacy questions within 2 hours during peak times (10 AM to 11 PM Jakarta time) and typically within 4 hours outside those windows.

Email Privacy Requests

Send data access, correction or deletion requests to our privacy team at [email protected]. Include your account username and the specific information you need. We aim to respond within 7 business days.

Account Settings

Log in and navigate to Account > Privacy & Security to view what information we hold, update your contact preferences and adjust cookie settings. Changes apply immediately to your next session.

SECURITY AND COMPLIANCE

How We Secure Your Account and Data

Encryption in Transit and at Rest

All communication between your device and our servers uses TLS 1.2+ encryption. Personal and payment data are encrypted at rest using AES-256 standards. When you log in from Surabaya or anywhere else, your session is protected from the moment you open wintomato.

Two-Factor Authentication

Enable two-factor authentication in your account settings to add a second verification layer. During withdrawal, you'll receive a one-time code via SMS or email; only you can confirm the transaction.

Payment Processor Compliance

Our payment partners handling DANA, OVO, GoPay and QRIS transactions comply with PCI DSS standards. We never store your full payment credentials; tokens are issued by your bank or wallet provider and rotated regularly.

Cookie and Tracking Transparency

We use cookies to keep you logged in, remember your lobby preferences and detect fraud. You can manage non-essential cookies in Account > Privacy Settings. Essential cookies cannot be disabled without losing platform functionality.

Data Access and Deletion Requests

You have the right to request a copy of all data we hold about you. Submit requests through the Privacy Requests form in Account Settings or email [email protected]. Deletion may be restricted by law or ongoing disputes.

Regular Security Audits

We conduct quarterly penetration testing and annual third-party security audits. Any vulnerabilities are patched within 48 hours. Our security team monitors account activity 24/7 for suspicious logins or payment anomalies.

Frequently Asked About Your Privacy

We collect your full name, email, phone number, date of birth and residential address for identity verification. We also store your username, password hash and account preferences. Payment information — DANA account, OVO wallet, GoPay handle or QRIS identifier — is collected only during withdrawal setup and never stored in plain text.

We retain core account records for seven years where local law permits, in case of regulatory inquiries or disputed transactions. Personal contact details are deleted after 90 days unless you request otherwise. Payment audit trails are kept for compliance with local banking standards.

Yes. Go to Account > Privacy & Security > Data Export. You'll receive a complete ZIP file of your account activity, personal details and payment history within 48 hours. Choose CSV or JSON format. This includes your deposit and withdrawal records.

No. We do not sell, rent or share your personal data with third parties for marketing purposes. We share payment information only with our trusted payment processors and, where required by law, with financial regulators or law enforcement authorities.

Your full payment credentials are never stored on our servers. When you set up a withdrawal, your wallet provider or bank issues a unique token that we use for future transactions. Only that token is saved; your actual account number remains with your provider, encrypted on their secure servers.

Contact our support team immediately via live chat or email [email protected]. We'll freeze your account, verify your identity and review login history. If unauthorized transactions occurred, we'll initiate a recovery process and coordinate with your payment provider to reverse fraudulent withdrawals.

Yes, we use cookies for login sessions, fraud detection and your lobby preferences. Essential cookies keep you logged in and cannot be disabled. Visit Account > Privacy Settings to manage optional cookies for analytics and marketing. Your choice is saved immediately and applies to your next session.