Reference

How We Keep Your Account and Payment Data Safe

Q: What happens if I forget my password or suspect my account has been compromised?

Email support@surgatoto.club or use the 'Forgot Password' link on the login page. We verify your identity through email and SMS before issuing a reset link. If you suspect fraudulent activity, contact us immediately and we freeze your account pending investigation.

When you open an account with surgatoto and deposit through DANA, OVO, GoPay or QRIS, your personal information is protected by strict data-handling practices.

Data encrypted on depositPayment details never sharedAccount access you control

Explore the Lobby Read FAQ

What We Collect and Why

surgatoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

surgatoto collects your name, email, phone number and account details when you register. We also record your deposit and withdrawal history, device information, and gaming activity to verify your identity, process payments and prevent fraud. Your payment data — such as DANA, OVO, GoPay or QRIS

1
transaction IDs — passes through secure payment gateways and is never stored on our servers in readable form. We keep this information only as long as your account is active and for the period required by local law thereafter. Access to your data is limited to
2
staff who need it to support your account or comply with regulatory obligations. Where local law permits, we may share anonymised gameplay statistics with game studios to improve their titles. Your data is housed in secure data centres with encryption at rest and in transit.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

How to Access or Update Your Data

Email Support Email our data team at [email protected] with your request. We respond to data access and deletion requests within 7 business days and verify your identity before processing.

Live Chat Open the live chat in your account lobby between 09:00 and 23:00 Jakarta time, seven days a week. Our team can answer privacy questions and guide you through data-access steps in real time.

Account Settings Visit Settings → Privacy & Data in your account dashboard to see what personal information we hold, update your email and phone, or download a copy of your data in PDF format.

SECURITY & RETENTION

How We Protect Your Privacy Every Day

Encryption

All communications between your device and our servers use SSL encryption. Your password is hashed, never stored in plain text, and two-factor authentication is available in account settings to add a second layer of protection.

Cookie Policy

We use cookies to remember your login, language preference and game selections. No cookies track you across other websites. You can disable non-essential cookies in your browser settings without losing access to your account.

Data Retention

Account data is kept for the life of your account plus three years after closure, to comply with tax and anti-money-laundering rules. You can request deletion of non-mandatory fields earlier if local law permits.

Third-Party Access

Your data is shared only with payment processors, fraud-detection partners and game studios — never with marketers or data brokers. Each partner signs a data-protection agreement binding them to the same confidentiality rules.

Account Recovery

If you lose access to your account, we verify your identity through email or SMS before resetting your password. Your payment method and withdrawal address cannot be changed without additional verification steps.

Breach Response

If we detect unauthorised access to your account, we notify you immediately via email and SMS. Our security team investigates, reverses any fraudulent transactions and walks you through account recovery steps.

Privacy and Your Account — Answered

Yes. Go to Settings → Privacy & Data in your account and select 'Download My Data'. We compile your information in a PDF within 48 hours. You can also email [email protected] to request a full data report, which we provide within 7 business days.

We retain your transaction records for three years after account closure to satisfy tax and financial regulations. Your personal details (name, address, phone) are deleted 90 days after closure, except where law requires longer retention.

Your payment details are encrypted during transfer and never stored on our servers. Payment processing happens through third-party gateways certified for PCI compliance. We keep only a transaction ID and confirmation, not your account numbers or credentials.

No. We never sell personal data. We share anonymised gameplay statistics with game studios to help them improve their games, but your name, email and account details remain confidential and are used only to run your account and support.

Email [email protected] or use the 'Forgot Password' link on the login page. We verify your identity through email and SMS before issuing a reset link. If you suspect fraudulent activity, contact us immediately and we freeze your account pending investigation.

You can close your account anytime from Settings → Account. Personal data is deleted 90 days after closure, except transaction records kept for legal compliance. Deletion does not apply to data we must retain by local law, and we will inform you of any exceptions.

Go to Settings → Account Details to update email or phone. Changes take effect immediately. To update your withdrawal payment method, navigate to Settings → Payment Methods. We verify changes through SMS confirmation to ensure only you authorise them.

How We Keep Your Account and Payment Data Safe

How to Access or Update Your Data

How We Protect Your Privacy Every Day

Encryption

Cookie Policy

Data Retention

Third-Party Access

Account Recovery

Breach Response

Privacy and Your Account — Answered

01 Can I see what personal data surgatoto holds about me?

02 How long do you keep my deposit history after I close my account?

03 Is my DANA, OVO, GoPay or QRIS information secure when I deposit?

04 Do you sell my data to other companies or advertisers?

05 What happens if I forget my password or suspect my account has been compromised?

06 Can I request that surgatoto delete my account and all my data?

07 How do I update my email, phone or payment method safely?

Related Pages