certoto Privacy Policy: How We Handle Your Account Data
This page explains exactly what data certoto collects when you use your account, how we store it, and the choices you have over it. We keep this policy direct and specific — not padded with legal boilerplate — so you can read it in one sitting and know where you stand.
Account data handled with care
DANA & ShopeePay transaction records stored securely
You can review, correct or query your data at any time
Applies where local law and eligible regions permit
POLICY SCOPE EXPLAINED
What This Policy Covers and How It Applies
certoto collects the data you provide when you open an account, log in, deposit using DANA or ShopeePay, and interact with the lobby. This includes your registration details (name, email, contact number), transaction records linked to your e-wallet, and session activity logs used to keep your account secure. We do not sell your personal data to third parties, and we do not share it with advertisers. Data is retained for as long as your account remains active and for the period required under applicable local law — the specific retention window depends on jurisdiction and is shown in the account settings section visible after login. Where you use a local payment method such as DANA or ShopeePay, the transaction record sits both in your certoto wallet history and within the payment provider's own system; each provider's handling of that record falls under their own privacy terms, not ours. This policy applies to access from Indonesia where local law and eligible regions permit. If the law in your region limits or modifies any part of this policy, the locally applicable version takes effect. We update this page when our practices change; the current version is always the one shown here.
DANA wallet transaction records
ShopeePay deposit history
Account login and session logs
Registration and contact details
INSIDE VS OUTSIDE
Where This Policy Applies Across Your Account
Not every part of your experience falls under this single policy document. Understanding which areas this policy covers — and which sit under separate terms — helps you know exactly where to look when you have a question about your data.
Account Access
Login credentials, session tokens and device identifiers collected when you sign in fall fully under this policy. We store these to keep your account secure and to detect unusual activity. You can review your active sessions from the account security tab after login.
Transactions
Deposit and withdrawal records tied to your certoto wallet — including amounts processed via DANA or ShopeePay — are covered here. The payment provider's own terms govern their copy of the transaction. Both records exist independently; this policy only addresses the certoto side.
Site Content & Lobby
Browsing data collected while you explore game categories, switch between live tables and slot rooms, or check your wallet balance is logged for performance and personalisation. This data does not leave our systems for marketing purposes and is covered by this policy.
Third-Party Services
Game studios that supply content to the lobby operate their own data handling for in-game events. Links to external platforms, support tools or payment gateways are not covered by this policy. Each third party publishes its own terms, and we recommend you check them directly.
YOUR ACCOUNT CHOICES
Practical Steps You Can Take Over Your Data
You are not a passive subject of this policy — there are real actions available to you. If you want to see the data certoto holds on your account, you can submit a data access request through the support channel and we will return a summary of your stored records. If any detail is wrong — a misspelled name, an outdated contact number — you can correct it directly in the account profile section after login, or ask support to update it on your behalf. If you want to raise a question about how a specific piece of data was collected or used, our policy support path is the right place to start. We aim to respond to data queries within the timeframe required by applicable local regulation. Closing your account does not automatically erase all records; some data must be retained for the period required by local law, and the exact duration depends on your jurisdiction. The current retention status for your account is shown in your account settings after login.
Review Your Records
Submit a data access request via the support channel. We will compile and return a summary of the personal data held on your account, covering registration details, transaction history and session logs, within the timeframe required under applicable local regulation.
Correct Account Details
Log in and open the account profile section to update your contact number, email or display name directly. For fields that require manual correction, contact support with the change you need and we will process it after verifying your identity.
Raise a Data Question
If you are unsure how a specific piece of your data was collected, stored or used, reach out through the policy support path listed on this page. Give us the data point in question and we will explain the basis for its collection and how long it is kept.
Request Account Closure
You may request account closure at any time. Some data will be retained post-closure for the period required under local law. The specific items retained and their retention window are shown in your account settings and in the closure confirmation we send.
REACH OUR POLICY TEAM
How to Contact Us About This Policy
If you have a question about how we handle your data, want to exercise one of your account rights, or need to report a concern about a specific piece of information we hold, use one of the contact paths below. Provide your registered account email when you write so we can locate your record without delay.
Live Chat Support
Open the chat icon from any page after login. Select the privacy or account category from the menu, then describe your query. A support agent will handle your data-related request and escalate to the policy team if needed.
Email Contact
Write to our support address with 'Privacy Query' in the subject line. Include your registered email and a clear description of the data point or action you are requesting. We respond within the timeframe set by applicable local regulation.
Account Settings Path
Log in and navigate to account settings to review current privacy preferences, check retention status and update communication options directly. Changes saved here take effect on your account immediately and are reflected in your next session.
HOW WE PROTECT YOUR DATA
Data Handling, Cookies and Account Security
We apply access controls to your account data so that only the systems and personnel that need it for a specific function can reach it. Session data is protected with standard transport-layer encryption during transmission. Cookie usage on the site covers session management, login persistence and lobby performance — you can review and adjust cookie preferences from the settings panel in your browser or from the cookie notice shown on your first visit.
Cookie Controls
We use cookies for session management and lobby performance only. No advertising cookies are placed without your acknowledgement. You can review which cookies are active and adjust your preference from the cookie settings panel shown in your browser or on your first visit to the site.
Account Security
Login access is protected by the credentials you set at registration. If we detect an unusual login pattern on your account, we flag it for review. You can check your active sessions and remove unrecognised devices from the security section of your account settings after login.
Data Retention
We keep your data for as long as your account is active and for the additional period required by applicable local law. The exact retention window for each data type is visible in your account settings. After the retention period ends, data is deleted or anonymised.
Policy Updates
When our data handling practices change, we update this page and note the revision date at the bottom of the policy. If a change materially affects how we handle your personal data, we will notify you via the contact address on your account before the change takes effect.
POLICY QUESTIONS ANSWERED
Common Questions About Your Privacy on certoto
These are the questions we receive most often about how this policy works in practice. If your question is not covered here, the support paths listed above are the right next step.
What personal data does certoto collect when I open an account?
We collect the registration details you provide — name, email and contact number — along with login session data and your transaction history. When you deposit via DANA or ShopeePay, the transaction record is stored in your account wallet. No additional data is collected without your knowledge.
Does certoto share my data with third parties?
We do not sell or share your personal data with advertisers or unrelated third parties. Payment processors such as DANA and ShopeePay receive only the transaction data needed to complete your deposit or withdrawal. Game studios in our lobby handle in-game event data under their own separate terms.
How long does certoto keep my account data after I close my account?
Some records must be retained after account closure for the period required under applicable local law. The specific items kept and their retention window are shown in your account settings and in the closure confirmation. Data no longer required is deleted or anonymised at the end of that period.
Can I see the data certoto holds on me?
Yes. Submit a data access request through the live chat or email support path listed on this page. Include your registered account email. We will compile a summary of your stored records and return it within the timeframe required by applicable local regulation.
How do I correct wrong information on my account?
Log in and open the account profile section to edit your contact number or email directly. For fields that require manual correction, contact support with the specific change needed. We verify your identity before updating the record to protect your account from unauthorised changes.
Does this policy apply to my DANA or ShopeePay transaction data?
This policy covers the transaction record stored in your certoto wallet. The copy of that transaction held by DANA or ShopeePay is governed by each provider's own privacy terms, not by this policy. We recommend reviewing those terms directly if you have questions about the provider's side of the record.
Mobile / Slots