lapaktoto Platform Privacy Notice

This page describes what we collect when you use lapaktoto and how we keep that data protected. We collect personal information—your email, name, phone number, and identification documents—to verify your identity, process your deposits and withdrawals, and comply with anti-money-laundering law. We do not sell or trade your data to advertisers or data brokers. We store your information securely using encryption, and we retain it only as long as necessary for account operations and legal compliance.

Our servers may sit outside your jurisdiction (for example, outside Indonesia if you are accessing lapaktoto from Jakarta, Surabaya, Bandung, Medan, or Semarang). By using our platform, you consent to that international data transfer, subject to the protections outlined in this notice. If you have questions about how we handle your data, contact our support team via the app's help section.

This privacy notice is effective immediately and applies to all lapaktoto users worldwide. We may update it periodically, and changes take effect upon posting to this page.

What Data We Collect

Account information we require

When you create a lapaktoto account, we collect your email address, a password you choose, and your phone number (for two-factor authentication). We use your email to send account notifications (password resets, withdrawal confirmations, security alerts) and your phone number to deliver SMS verification codes when you log in from a new device or request a sensitive action (withdrawal, payment method change).

For account verification (KYC), we also request your full name, date of birth, residential address, and a copy of a government-issued ID (passport, national ID card, or driver's license). We use this information to confirm your identity, prevent fraud and money laundering, and comply with financial regulations in jurisdictions where we operate. Your ID scan is encrypted and stored securely; we do not use it for any purpose other than identity verification.

Payment and transaction data

Every deposit, bet, win, and withdrawal on lapaktoto is logged in your Transaction History. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the payment method, amount, date, and settlement status. When you withdraw, we record the destination account, amount, and status. This data is retained indefinitely to support account auditing, dispute resolution, and regulatory compliance.

Data retention: We retain your account data—name, email, phone, transaction history—as long as your account is active and for a period thereafter as required by law or for dispute resolution and fraud investigation.

Device and usage information

Our mobile app and web platform collect technical information: your device type, IP address, browser type, and pages you visit within lapaktoto. This helps us diagnose technical problems, improve performance, and detect fraud or unauthorized access. We also log your login times and locations (inferred from IP address) to spot suspicious activity. If your account shows multiple logins from different cities (e.g., Jakarta and Medan) within an unrealistic time window, our system may flag this for security review.

Cookies and tracking

We use cookies (small files stored on your device) to maintain your session, remember your preferences, and track your activity on lapaktoto. Session cookies expire when you log out. Preference cookies (e.g., your language setting or preferred payment method) persist for longer. We do not use cookies to track you across other websites; our cookies apply only to lapaktoto.app. You can disable cookies in your browser settings, but doing so may impair some features (e.g., you may need to re-enter your email each time you visit).

How We Use and Protect Your Data

Our use of your information

We use your data to: operate lapaktoto (process logins, deposits, bets, withdrawals), verify your identity and prevent fraud, comply with anti-money-laundering and financial regulations, investigate disputes and complaints, and improve our platform. We do not use your personal information to market to you outside lapaktoto, sell to third-party advertisers, or build profiles for resale. We may contact you via email or SMS for account notifications only (e.g., "Your withdrawal is pending," "Your account passed KYC verification").

Third-party processors and international transfer

We share your data with third parties only when necessary: payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive deposit and withdrawal details to process transfers; identity verification services may review your ID scan to confirm authenticity; hosting providers store our databases. These processors are contractually bound to protect your data and not use it for other purposes. Our servers are located outside Indonesia; by using lapaktoto, you consent to this international transfer of your personal data.

We at lapaktoto encrypt all sensitive data in transit and at rest, and we limit employee access to personal information to those who need it for their role.

lapaktoto security team

Data security and encryption

All communications between your device and lapaktoto servers use TLS (Transport Layer Security) encryption, which protects your data from interception. Your password is hashed (converted to a scrambled form that cannot be reversed) and never stored in plain text. Your two-factor authentication codes are valid for only subject to verification and expire after use. We do not keep backups of your password or 2FA codes. If you lose your password, you must reset it by confirming your email and phone number.

Your rights regarding your data

You have the right to request a copy of all data we hold about you, and we will provide it within a reasonable timeframe in a readable format. You can request correction of inaccurate data (e.g., if your address is misspelled). You can request deletion of your account and associated personal information, though we may retain anonymized transaction records for compliance purposes. You can withdraw consent for certain data uses, though this may limit our ability to process deposits or withdrawals. To exercise these rights, contact our support team with your account email and a valid identity document.

Data breach notification

If we discover that your personal data has been compromised (e.g., unauthorized access to our servers), we will notify you via email and SMS within a reasonable timeframe and explain what data was affected and what steps you should take to protect yourself. We maintain incident response and breach-notification procedures to minimize harm. We do not disclose breach details to the public unless required by law or if the breach affects a large number of users.

Compliance with local law

We may disclose your data to government agencies or law enforcement if required by law (e.g., a court order, subpoena, or anti-money-laundering investigation). We will not voluntarily share your data with authorities but will comply if legally compelled. If you are in Jakarta, Surabaya, Bandung, Medan, or Semarang and your local jurisdiction requires data localization (storing data within that country), we will comply with those requirements or cease service in that jurisdiction.

Enable two-factor authentication to protect your account
Use SMS 2FA to ensure only you can log in and approve withdrawals, even if someone obtains your password.
Keep your password private and unique
Do not share your lapaktoto password with anyone, and do not reuse it on other websites.
Review your Transaction History regularly
Check deposits, bets, and withdrawals to detect unauthorized activity and report discrepancies immediately.
Contact us if you suspect a breach or misuse
If you believe your account or data has been compromised, contact lapaktoto support immediately via the app help section.

Contact us about privacy

If you have questions about this privacy notice, want to exercise your data rights, or believe we have mishandled your information, contact us through the help section in your lapaktoto account. Provide your account email, a description of your concern, and any relevant details. Our privacy team will respond within a reasonable timeframe and work to resolve your concern. Our services are available only where local law permits; users are responsible for verifying that access complies with their own jurisdiction's regulations.