Reference

How We Protect Your Account and Data

Your account security, payment safety and personal information are central to how coraltoto operates.

Account encryptionWithdrawal verificationPayment securityData privacy
coraltoto How We Protect Your Account and Data
REACH OUR LEGAL TEAM

Legal Support & Account Inquiries

Team online

Email Support

Send account, data or legal inquiries to our support address. Response time is typically within 24 hours on weekdays. We handle data access requests, account disputes and policy questions through this channel.

Live Chat

Chat with our support team Monday to Friday, 08:00–22:00 Western Indonesia Time. Ask about account policies, data handling, withdrawal verification or any legal concern tied to your gameplay.

Account Settings

Review your personal data, payment history and account activity directly in the Account page. You can update your profile, change your password and request data export from this section anytime.

HOW WE OPERATE SECURELY

Data Handling, Cookies & Account Safety

Encryption & Storage

All account data, payment details and personal information are encrypted in transit and at rest. We store only the information needed to process your deposits via DANA, OVO, GoPay and QRIS, confirm withdrawals and maintain your account history.

Cookie Usage

We use cookies to remember your login, language preference and gameplay session. Functional cookies help the lobby load faster on desktop and mobile; you can clear them anytime in your browser settings without losing your account.

Withdrawal Verification

Before each withdrawal, we verify your identity and payment method. This step protects both your account and the integrity of transfers back to your DANA, OVO, GoPay or QRIS wallet.

Data Retention

We retain account data for the life of your account and 12 months after closure for dispute resolution and regulatory compliance. You can request deletion of non-essential personal data by contacting support.

Third-Party Links

Our lobby includes game studios and payment partners. We do not control their privacy policies; we encourage you to review their terms. coraltoto remains responsible for the security of data we collect.

Access & Changes

Request access to your personal data, correct inaccuracies, or ask for export at any time through Email Support or Account Settings. We will confirm receipt and respond within 7 business days.

Your Account Rights & Data FAQs

Your account data is stored on secure servers and accessed only by coraltoto staff for operational purposes — confirming your identity, processing DANA, OVO, GoPay or QRIS payments, and resolving disputes. We do not sell or share your data with marketers or external parties.

Open your Account Settings page and select 'Download My Data', or email our support team with your account ID. We will compile your personal information, payment history and game activity and send it within 7 business days.

When you close your account, your balance must be withdrawn or forfeited. Your personal data is retained for 12 months to handle disputes and meet legal obligations. After 12 months, non-essential data is deleted; account history is kept for compliance only.

Yes. Contact our support team with your transaction ID and the date of the transaction. We investigate all disputes within 5 business days and either reverse the charge or explain why it was valid. You can also request your payment provider (DANA, OVO, GoPay, QRIS) to review the transaction.

Deposits through DANA, OVO, GoPay and QRIS are encrypted end-to-end. We do not store your mobile number or payment credentials; the payment provider handles authentication. Each deposit is verified by the provider before funds reach your coraltoto wallet.

Contact Live Chat or Email Support immediately with details. We will review your activity, freeze the account if needed, and work with you to secure it. Change your password and verify recent transactions in Account Settings once the issue is resolved.

You can request deletion of non-essential personal data — such as marketing preferences or gameplay tags — through Account Settings or Email Support. Account and payment data required for legal compliance cannot be deleted but can be anonymised after 12 months post-closure.