Live / Casino
At bffstoto, we collect and use your personal data only to run your account, process deposits through DANA, OVO, or GoPay, and keep your session secure across devices. This page explains what we collect, why we collect it, and what choices you have — no vague promises, just a clear account of how your information moves through our platform.
When you open an account with bffstoto, we collect the details you provide during registration — name, email address, and the payment method you choose to use, whether that is DANA, OVO, GoPay, Bank Transfer, LinkAja, or QRIS. We also record transactional data: deposit amounts, withdrawal requests, and the timestamp of each action so your wallet history stays accurate and traceable from your account dashboard after login. Beyond account data, our platform logs session information automatically — your device type, browser environment, IP address, and the pages you visit within the lobby. This helps us keep your session consistent whether you switch from a phone to a desktop mid-game, and it lets us identify unusual access patterns that could signal an unauthorized login attempt. We do not sell your personal data to third parties. Payment processing through DANA, OVO, or GoPay involves those providers handling transaction data under their own privacy terms, and we encourage you to review those separately. Access to and availability of our services depend on local law and eligible regions in Indonesia.
Transaction records tied to your DANA deposits and withdrawals are stored in your account wallet log.
OVO payment events are logged with timestamps and amounts; visible in your account transaction history after login.
GoPay activity appears in your wallet record alongside other payment events, kept for account accuracy.
Bank Transfer entries are held in your transaction log with reference numbers for your own verification.
This privacy policy covers your interactions with bffstoto directly — your account, your session data, and the payment rails you use to fund your wallet. It does not extend to third-party services linked from our platform, and it does not govern how payment providers like DANA, OVO, or GoPay manage data on their end. Understanding the boundary helps you know who to contact when a specific data question arises.
Login credentials, device session logs, and account profile details fall fully under this policy. We hold and process this data to keep your account functional and secure across sessions.
Deposit and withdrawal records processed through our platform are covered here. The payment provider's own privacy terms govern what happens on their side of the transaction.
Your in-lobby behaviour — which game rooms you open, how long a session runs — is logged by us and covered by this policy. We use it for session continuity and platform improvement, not for profiling.
External links, payment apps, and studio platforms operate under their own terms. Once you leave bffstoto's domain, this policy no longer applies and we have no control over how that data is used.
You have practical options when it comes to the personal data bffstoto holds. You can request a copy of the account data we have on file, ask us to correct any detail that is wrong, or raise a question about how a specific piece of information is being used. These are not abstract entitlements — they are actions you can initiate through our support channel and we will respond with the specific records or corrections your request covers. Account profile details like your registered email or linked payment method can be updated by following the fields shown in your account settings after login. For anything outside that self-service path — deletion requests, data-portability questions, or concerns about how session data is being used — our support team handles them directly. Availability of certain rights may depend on local law and eligible regions in Indonesia.
Request a summary of the personal data we hold on your account. We will provide the relevant records through our support channel within a reasonable period.
Update your registered name, email, or linked payment method through the fields in your account settings. For corrections we cannot action automatically, contact support directly.
If you are unsure why a specific piece of data was collected or how it is being used, send your question through support and we will give a clear, specific answer.
You may ask us to remove personal data associated with your account. We will confirm what can be actioned and what must be retained for legal or transaction-record obligations.
If you have a question about this privacy policy, want to exercise one of your data rights, or need to flag a concern about how your information is handled, the paths below connect you to the right place. Be specific about your account and the data point in question — it speeds up the response.
Open the chat widget from any page on bffstoto while logged in. Describe your privacy question and include your registered email address so the team can pull the right account record.
Send your data request or policy question to our support address shown in your account dashboard after login. Include your account username and the specific data subject in the subject line.
Some account-level data actions — like updating your profile or reviewing transaction history — are available directly in your account settings without needing to contact support.
Security and transparency are not afterthoughts in how we run account data at bffstoto. Your login sessions use encrypted connections, and payment events processed through DANA, OVO, or GoPay are handled over secure channels consistent with those providers' standards. We do not store full payment credentials on our platform — the payment app or bank holds that detail, and our record contains only what is needed for your wallet history.
Every login and in-session action on bffstoto runs over an encrypted connection. Your account data is not transmitted in plain text at any point during a normal session.
We use session cookies to keep you logged in across pages and to remember your device for continuity. Preference cookies are optional and can be managed through your browser settings.
Transaction records are retained for as long as your account is active and for the period required by applicable obligations. If you request account deletion, we will confirm what is removed and what must be kept.
When this policy changes in a meaningful way, we will update the page here on bffstoto. The current version is always what applies to your account from the date shown at the top of this page.
Straightforward answers to the questions we hear most often about how bffstoto collects, stores, and handles personal data.
We collect the registration details you enter — name, email, and your chosen payment method such as DANA, OVO, or GoPay. We also log session data automatically, including your device type and IP address, to keep your account secure and your session consistent across devices.
We do not sell your data. Payment transactions involve the provider — DANA, OVO, GoPay, Bank Transfer — processing their side under their own terms. We share data with third parties only where required by law or to operate core account functions.
Contact our support team through the live chat or email path shown in your account dashboard after login. Tell us your registered email and what you are looking for, and we will provide the relevant account record within a reasonable timeframe.
Yes. Submit a deletion request through support with your account username. We will confirm what can be removed and what must be retained — transaction records, for example, may need to be kept for a period under applicable obligations in Indonesia.
We use session cookies to keep you logged in and maintain lobby state across pages. Optional preference cookies can be turned off in your browser settings. Disabling session cookies will affect your ability to stay logged in during a session.
Contact support immediately through live chat from bffstoto while logged in, or via the email address in your account dashboard. Describe what you noticed and include your account username so the team can review session logs and take action quickly.