Reference

How we protect your account and payment details

At tobrut slot, your privacy is built into every deposit, withdrawal and login.

End-to-end encryption on all depositsPayment details never stored on our serversYour right to access and update your data
tobrut slot How we protect your account and payment details
PRIVACY QUESTIONS

How to contact us about your data

Support Chat Open a ticket in your account dashboard or email us at [email protected].
Email Request Send a formal data request to privacy@tobrutslot.
Account Settings Update your email, phone and payment method directly in your account settings under Security.
DATA HANDLING PRACTICES

How we keep your privacy safe every day

Encryption Standard

All data in transit and at rest uses AES-256 encryption, the same standard banks use.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to count page views and game selections.

Third-Party Access

Your data is never sold. We share only what's necessary with payment processors (DANA, OVO, GoPay, QRIS), our hosting provider…

Data Retention

Account data stays with us for seven years after closure for tax and anti-fraud purposes, where local law permits.

Account Recovery

If you lose access to your account, we verify your identity using your registered email and phone number before sending…

Your Rights

You can request a copy of all your data, ask us to correct errors, request deletion, or object to us…

Frequently asked questions about your data

No. When you tap DANA, OVO, GoPay or QRIS in your chip row, you're redirected to the bank's or wallet provider's secure page. We never receive your password or card details — only a confirmation that the deposit succeeded. Your bank encrypts everything; we see only the transaction ID.

We keep your name, email, phone and transaction history for seven years for tax and anti-money-laundering compliance, where local law permits. After seven years, we permanently delete it unless a court order or regulator asks us to keep it longer. You can request early deletion for non-compliance data anytime.

Only you and our compliance and support teams can access your account details. Compliance staff review data only to verify you match our terms and flag suspicious activity. Support sees only the minimum needed to help you reset a password or dispute a withdrawal.

No. We never sell or share your data with other operators, marketers or ad networks. We share only with our payment processors, hosting provider and compliance partners — all under strict confidentiality agreements. We also may share anonymised gameplay data with game studios to improve their titles.

We flag your account as closed immediately and stop collecting new data. Your historical data is archived and retained for seven years for legal reasons, but we remove you from all marketing lists, disable your login and stop tracking your activity the moment you request deletion.

Open your account, go to Settings > Security and edit your email or phone. Enter a one-time code sent to your current email to confirm the change. The update takes effect in seconds. We log every change so you can see who modified your account and when.

Only if you opt in. When you open your account, we ask permission to send you emails and SMS about new games and promotions. You can withdraw consent anytime in Settings > Communication Preferences. We'll stop all marketing mail within 24 hours and will never sell your contact details to third parties.