Reference

How kartoto protects your account and your rights

When you open an account with us, your data, withdrawals and access are governed by clear terms.

Account security & verificationData handling & retentionPayment & withdrawal terms
kartoto How kartoto protects your account and your rights
REACH US ANYTIME

Contact paths for account and legal questions

Our support team handles account terms, payment disputes, data requests and policy questions every day.

Live Chat Open the lobby, scroll to footer, tap 'Support'. We answer account and legal questions daily, 08:00 to 22:00 WIB. Fastest route for payment or withdrawal issues.
Email Support Send account terms, data-access or dispute details to [email protected]. We respond within 5 business days and keep a record of your request for our files.
Account Dashboard Log in, go to Settings > Account & Legal. View your data, see recent transactions, and file a data-access request directly from your account panel.
HOW WE SECURE YOU

Data protection, encryption and account safety

kartoto encrypts all login, payment and personal data in transit and at rest using industry-standard TLS and AES protocols.

Encryption

All deposits, withdrawals and login credentials are encrypted end-to-end. Payment tokens expire after each session so your DANA, OVO, GoPay or QRIS details are never stored.

Withdrawal Verification

Every withdrawal request requires SMS code and email confirmation. We verify your identity again before funds leave the wallet to prevent fraud and account takeover.

Data Retention

We keep account records for as long as your membership is active, plus three years for regulatory compliance and dispute resolution. You can request deletion of non-essential data anytime.

Login Monitoring

All login activity is logged with timestamp and IP. Unusual patterns trigger automated alerts; you can see login history and revoke active sessions in Settings.

No Third-Party Sharing

We do not sell or share your account data with marketing or affiliate networks. Data is shared with payment partners and compliance bodies only where law requires it.

Your Rights

You can request your data, correct errors, export your account history, or request deletion of non-transaction records. Contact [email protected] to initiate any data request.

Your rights, account access and data questions

Your account remains active indefinitely. If you do not log in for 12 months, we may ask you to confirm your identity before next play. You can close your account anytime in Settings > Account Closure. We retain transaction records for three years after closure for compliance.

Yes. Log into your account, go to Settings > Account & Legal, and tap 'Download My Data'. We email a complete export within 5 business days, including all logins, deposits, withdrawals, game history and personal details we hold on file.

We never store your raw payment credentials. Deposits are tokenised — only a one-time reference is stored in your account. Each session generates a new payment token that expires after checkout. QRIS and bank transfers are processed through verified third-party gateways with their own encryption.

Withdrawals are processed within 24 hours of approval. You must complete SMS and email verification before we process funds. DANA, OVO and GoPay transfers usually arrive within minutes; bank transfers may take up to 1 business day depending on your bank's processing time.

Contact our support team via live chat or email [email protected] within 30 days of the transaction. We investigate, check your account history and payment records, and either approve a refund or provide a detailed explanation within 5 business days.

We operate where local law permits, including supported regions of Indonesia. We follow all applicable regulations on account opening, identity verification, anti-money-laundering rules and player protection. Access depends on local law; if your region is blocked, you cannot create or fund an account.

You can update your email, password and linked phone number in Settings > Account Details anytime. Identity details (name, ID number) cannot be self-edited for security; contact [email protected] if corrections are needed. They must match your payment account details.