todak Privacy Policy

This page describes what we collect when you use todak and how we keep that data protected. We collect personal information only to verify your identity, process your deposits and withdrawals, and send you account notifications. We do not sell your data to third parties, and we encrypt all communications between your phone and our servers.

Our privacy practices reflect our commitment to transparency. We explain what data we collect, who has access to it, how long we keep it, and what rights you have. If you have questions about how we handle your information on todak, our support team can clarify our practices or help you exercise your rights.

We encourage you to read this policy carefully before creating an account on todak. By using our platform, you agree to the data practices described here.

What Data We Collect on todak

We collect information in two categories: information you provide directly and information we collect automatically. When you register on todak, we ask for your full name, email address, phone number, and a valid government ID (passport, national ID card, or driver's license). This Know Your Customer (KYC) information is mandatory and used solely for account verification and regulatory compliance.

When you use todak, we collect information about your activity — which games you access, your betting history, your account balance, and your transaction records. We also collect technical information: your device type, operating system, browser version, IP address, and the pages you visit. This technical data helps us optimize our mobile app and website performance. We do not collect your location data unless you explicitly grant permission.

How We Use Your Data

We use your personal data for specific purposes. Your name, email, phone, and government ID are used to verify your identity and create your todak account. Your payment information (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details) is used to process your deposits and withdrawals. We never store your full payment credentials on our servers; instead, we use secure tokens provided by our payment partners.

Your betting history and account balance are used to settle your predictions and payouts. We use your email and phone to send you account notifications — password reset links, deposit confirmations, withdrawal status updates, and security alerts. We use technical data to improve our platform's speed, reliability, and security. We analyze usage patterns to identify and prevent fraud. We do not use your data for marketing purposes, and we do not share it with third parties except as required by law or to process your payments.

Third-Party Processors and Data Sharing

We work with third-party service providers to operate todak. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, and our banking partners) receive your payment information to process deposits and withdrawals. Our cloud hosting provider stores our servers and databases. Our email service provider sends account notifications. These processors are contractually bound to protect your data and use it only for the services they provide to us.

We may disclose your data if required by law, court order, or government request. We may also share aggregated, anonymized data (data that cannot identify you) with analytics partners to understand platform usage trends. We do not sell your personal data to advertisers, data brokers, or other commercial entities. Our servers may sit outside your jurisdiction; by using todak, you consent to your data being processed internationally where necessary to operate our platform.

KYC verification

We collect your government ID to verify your identity and comply with local regulations. This is a one-time requirement.

Payment processing

Your payment details are shared with our processors (local payment, online payment, e-wallet, mobile banking, local payment, banks) to complete transactions.

Account notifications

We send emails and SMS to your registered address and phone for security and transaction updates.

Data retention

We keep your data as long as your account is active and for a period after closure as required by law.

How We Protect Your Data

We encrypt all communications between your phone and our todak servers using industry-standard TLS encryption. Your password is hashed using a one-way algorithm and never stored in plain text. We use two-factor authentication (a one-time code sent to your phone) to verify your identity when you log in from a new device. Our servers are protected by firewalls, intrusion detection systems, and regular security audits.

We limit access to your personal data to employees and contractors who need it to perform their jobs. All staff sign confidentiality agreements. We do not store your full payment card details; instead, we use secure tokens provided by our payment partners. If we discover a data breach, we notify affected users and relevant authorities as required by law. We maintain incident response procedures to address security issues quickly.

Cookies and Tracking Technologies

We use cookies on todak to remember your login session, store your preferences, and track your activity for analytics. Cookies are small files stored on your device. Session cookies expire when you close your browser; persistent cookies remain until you delete them or they expire. We use both types to improve your experience and understand how you use our platform.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being set. If you disable cookies, some features of todak may not work properly. We also use web beacons and similar tracking technologies to measure campaign effectiveness and understand user behavior. You can opt out of analytics tracking by adjusting your browser's do-not-track settings, though we cannot guarantee all third parties will honor this preference.

Your Rights Regarding Your Data

You have the right to access your personal data on todak. You can view your account information, transaction history, and betting records by logging into your account. You have the right to correct inaccurate data — if your name or contact details are wrong, contact our support team to update them. You have the right to request deletion of your account and associated data, subject to legal retention requirements. We will delete your data within a reasonable timeframe after your request, except where we are required to retain it by law.

You have the right to data portability — we can provide your data in a structured, machine-readable format. You have the right to object to certain uses of your data, such as marketing communications. You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights. To exercise any of these rights, contact our support team through your todak account with your request and verification details.

Data Practices Across Indonesia

We operate todak across supported regions in Indonesia, including Jakarta, Surabaya, Bandung, and Medan. Our data practices comply with applicable Indonesian law and regulations. We work with local payment partners — online payment, e-wallet, mobile banking, local payment, online payment, and Indonesian banks (e-wallet, mobile banking, local payment, online payment) — to process your transactions securely. During major holidays like Idul Fitri, Idul Adha, and Imlek, our data processing and support operations continue, though response times may vary.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by email or by posting a notice on todak. Your continued use of our platform after changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Us About Privacy

If you have questions about our privacy practices, concerns about how we handle your data, or requests to exercise your rights, contact our support team through your todak account. We respond to privacy inquiries during standard business hours. Our support team can clarify our data practices, help you access or correct your information, or assist with data deletion requests. We take all privacy concerns seriously and work to resolve them promptly.

Summary: Our Privacy Commitment on todak

We at todak collect personal data only to verify your identity, process your payments, and operate our platform. We encrypt all data in transit and at rest. We do not sell your information to third parties. We share data only with payment processors and service providers who are contractually bound to protect it. We retain your data only as long as necessary and comply with all applicable legal requirements.

You have rights over your data — you can access it, correct it, request deletion, and object to certain uses. Our support team is available to help you exercise these rights or answer questions about our privacy practices. We remain committed to protecting your information and operating todak with transparency and respect for your privacy.