grandtotoPrivacy Policy

This page describes what we collect when you use grandtoto and how we keep that data protected. We at grandtoto handle your personal information according to strict privacy standards. Your email, phone number, national ID, and banking details are encrypted and stored on secure servers. We do not sell your data to third parties, and we do not use your information for marketing outside our platform.

When you install our Android APK or access us via iOS browser, we collect only the information necessary to operate your account, process deposits and withdrawals, and comply with local regulations. This privacy policy applies to all grandtoto users regardless of jurisdiction. If you have questions about how your data is handled, our support team can provide details via email or in-app chat.

Read on to understand our data collection, use, storage, and your rights under this policy.

What We Collect on grandtoto

Account Registration Data

When you create an account on grandtoto, we ask for your email address and a password. We send a verification code to that email to confirm ownership. We also request your phone number and verify it via SMS. This dual verification ensures only you can access your account.

Identity Verification (KYC)

To deposit and withdraw funds on grandtoto, we require Know Your Customer (KYC) verification. We collect your full legal name, date of birth, national ID number, and a photo of your ID card or passport. Some accounts also require a recent selfie to match against your ID. Our verification team uses this data to check against government records and prevent fraud. We store this information encrypted and separate from your gaming account.

Financial Data

We collect your bank account details or mobile wallet information when you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer from mobile banking, local payment, online payment, or e-wallet. We store virtual account numbers and transaction records to track deposits and withdrawals. We do not store your bank password or PIN; your bank handles authentication directly.

Gameplay and Transaction History

We record every bet, game result, deposit, and withdrawal on your grandtoto account. This data includes timestamps, amounts, game titles, and multipliers or odds. We keep this history indefinitely for compliance, dispute resolution, and fraud prevention. You can download your full transaction history as a CSV file anytime.

Encryption

We encrypt your personal data in transit and at rest using industry-standard TLS and AES algorithms.

Third Parties

We share data only with payment processors and compliance partners who have signed data protection agreements.

Cookies

Our platform uses session cookies to keep you logged in. We do not use tracking cookies across other websites.

How We Use Your Data

Account Operations

We use your email and phone to send account notifications — login confirmations, deposit receipts, withdrawal status, and password resets. We use your KYC data to comply with anti-money-laundering regulations and verify you are eligible in your jurisdiction. We use your banking details to process deposits and withdrawals.

Fraud Prevention

We analyse your account activity to detect suspicious patterns — multiple failed logins, unusual withdrawal requests, or signs of account takeover. If we detect fraud, we may freeze your account pending review. We never use your data to deny legitimate withdrawals without investigation.

Legal Compliance

We are required by law to retain certain data for regulatory reporting and tax compliance. We may disclose your information to law enforcement, tax authorities, or courts if legally compelled. We do not voluntarily share your data with government agencies.

Your data is your responsibility to protect. We encrypt and guard it on our end, but you must keep your password secure and enable two-factor authentication when available.

Your Rights and Our Obligations

Data Access and Correction

You can request a copy of all personal data we hold about you on grandtoto. Email our support team with your account email, and we will provide a CSV file of your information within ten business days. If your data is incorrect, you can update it in your account settings or request changes via support.

Account Deletion

You can request account closure anytime. We will suspend your account immediately, but we retain your transaction history and KYC records for regulatory compliance (typically three to seven years). We do not delete this data on demand because we are legally required to maintain it for tax and anti-money-laundering purposes.

Withdrawal of Consent

If you do not consent to certain data processing, you can disable push notifications, opt out of optional marketing emails, or restrict cookie settings in your browser. However, we cannot process your deposits or withdrawals without collecting KYC data — this is a legal requirement, not optional.

Data Location and International Transfer

Our servers may be located outside your jurisdiction. We employ secure transfer protocols to move your data between datacentres. By using grandtoto, you consent to your data being stored and processed internationally in accordance with this policy.

Jurisdiction and Service Area

We operate grandtoto only in jurisdictions where online gaming is permitted by local law. If you are in an unsupported region, your account will be restricted, and we may delete your account data after a retention period. You are responsible for verifying your jurisdiction's legal status.

Contact and Support

For privacy questions, email our support team or contact us via in-app chat. We respond to privacy-related inquiries within ten business days. If you believe we have violated your privacy, you may file a complaint with your local data protection authority.

Policy Updates

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email. Your continued use of grandtoto after a policy update constitutes acceptance of the new terms.