cosmictoto Privacy Policy

This page describes what we collect when you use cosmictoto and how we keep that data protected. We collect your email, national ID number, payment details, and betting history so we can operate your account, settle bets, process withdrawals, and comply with anti-money-laundering regulations. We do not sell your information to third parties, and we encrypt all sensitive data using TLS 1.2+ security.

Our servers may sit outside your jurisdiction — your data may be processed in multiple countries depending on our infrastructure partners. However, we apply the same privacy standards globally: encryption, access controls, and regular security audits. If you have concerns about data storage or processing location, contact our support team in English or Bahasa Indonesia, and we'll explain our practices in detail.

When you register an account on cosmictoto, accept a bonus, or place a bet on Liga 1, Piala Indonesia, or any market, you agree to this privacy policy. We update it periodically; changes take effect when posted. Your continued use of cosmictoto after an update means you accept the new terms.

What data we collect on cosmictoto

We collect your email address, password (hashed), national ID number, full name, date of birth, phone number, and proof-of-address document (utility bill, rental agreement, or bank statement) when you register and verify your cosmictoto account. We also collect your deposit and withdrawal history, payment method details (token only, never full card numbers), betting activity, game play records, and IP address when you log in.

On your mobile phone, we collect minimal data: your session token (not your password), device type (iOS or Android), push-notification preference, and login timestamp. We do not track your location, contacts, photos, or any other data on your device. Our cosmictoto app (if you download it from Google Play) does not request microphone or camera access.

How we use your data on cosmictoto

We use your email and ID number to verify your identity, create your cosmictoto account, and confirm your first withdrawal. We use your payment details to process deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet. We use your betting history and play records to settle bets, calculate winnings, and generate your account statement.

We share your data with our payment processors and banks only to execute deposits and withdrawals — they see your name, account number, and transaction amount, but not your cosmictoto betting history. We share aggregate betting data (total bets placed, average stake size, game popularity) with our internal compliance and analytics teams to detect fraud and improve our platform. We do not share your individual betting records with anyone outside cosmictoto without your explicit consent, except where required by law.

We also use your data for anti-money-laundering (AML) checks: we flag unusual patterns (sudden large deposits followed by immediate withdrawals, for example) and may request additional documents if needed. This is a legal requirement in our operating jurisdictions. All AML checks stay confidential within our compliance team.

Third-party processors and data locations

Our payment processors, email service providers, and cloud hosting may store copies of your data. These processors operate under data-protection agreements that require them to keep your information confidential and secure. They may sit in different countries — for example, our email service may route through servers in Southeast Asia or Europe. Your data is encrypted in transit and at rest, so the physical location of the server does not expose your information to casual access.

• 1
  Payment processorsData type

  When you deposit or withdraw, we share your name, payment-method token, and transaction amount with our payment partners. They do not see your cosmictoto betting history or ID number.

• 2
  Email and messaging servicesData type

  We send verification codes, password resets, and settlement confirmations via email. Our email provider stores these messages temporarily but does not use them for marketing.

• 3
  Cloud hosting and backupsData type

  Our servers are hosted by third-party providers. We encrypt database backups and limit access to a small team. Data is replicated across regions for disaster recovery but remains encrypted at all times.

Your rights on cosmictoto

You have the right to access all data we hold about you on cosmictoto — email us your request, and we'll send you a copy of your account details, betting history, and payment records within 5 business days. You can request corrections to your name, address, or contact details by logging into your account or contacting our support team. You can ask us to delete your account and associated data once your balance is zero and no open disputes exist.

You can opt out of marketing emails at any time by clicking "Unsubscribe" in any message we send. Push notifications on your mobile can be disabled in your cosmictoto account settings or your device's notification settings. We will still send you essential messages about account security, bet settlement, and regulatory compliance — you cannot opt out of these.

Cookies and tracking on cosmictoto

We use cookies to keep you logged in on cosmictoto and to remember your language preference and account settings. These cookies are essential for the platform to function; they do not track you across other websites. We also use basic analytics (Google Analytics or similar) to measure how many visitors use cosmictoto, which pages they visit, and how long they stay. This analytics data is anonymized — we cannot identify individuals from it.

We do not use tracking pixels, retargeting cookies, or third-party ad networks on cosmictoto. If you visit our site from Jakarta, Surabaya, Bandung, or Medan, we do not track your location beyond your IP address (which we log for security and fraud detection). You can disable cookies in your browser settings, but this may prevent you from logging into your cosmictoto account.

Data retention and security on cosmictoto

We keep your cosmictoto account data for as long as your account is active. Once you close your account, we retain transaction records, betting history, and identity documents for at least 5 years to comply with anti-money-laundering and tax regulations. We delete personal data (name, address, phone) within 30 days of account closure unless law requires us to keep it longer.

Our cosmictoto infrastructure uses industry-standard security: firewalls, intrusion detection, regular penetration testing, and staff access controls. We encrypt data in transit (HTTPS) and at rest (database encryption). All cosmictoto staff who handle sensitive data have undergone background checks and sign confidentiality agreements. We also maintain cyber-liability insurance in case of a data breach.

If we discover unauthorized access to your cosmictoto account or data, we will notify you via email within 48 hours and provide information about what data may have been exposed. We will also reset your password and offer account monitoring assistance. In the unlikely event of a large-scale data breach affecting multiple users, we will notify regulators and provide credit-monitoring services where required by law.

Contact and policy updates

If you have questions about this privacy policy, how we handle your data on cosmictoto, or concerns about data security, contact our support team via live chat (business hours) or email (24/7). We respond to privacy inquiries within 24 hours. Our support staff speak English and Bahasa Indonesia.

We may update this policy to reflect changes in our technology, legal requirements, or business practices. Updates take effect when posted on this page. If a change materially affects how we use your data, we'll notify you via email at least 30 days before the change becomes effective. Your continued use of cosmictoto after an update means you accept the new policy. If you disagree with a change, you may close your account and request a withdrawal of your balance.