LEGAL REFERENCE

Your privacy matters to us

We built rectoto around your trust. This privacy policy shows exactly how we collect, use and protect your personal data — from the moment you open your account...

Data ProtectionTransparent PracticesYour ControlSecure StorageIndonesia-Compliant
rectoto Your privacy matters to us

What we collect and why

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Questions about your privacy

Team online

Email Support

Reach our privacy team at [email protected] with any concerns about how we handle your data. We respond within 24 hours.

Account Settings

Review and update your personal information anytime in your account dashboard. Control what data you share with us.

Data Requests

Request a copy of your personal data or ask us to delete your account. Submit requests through your account or email us directly.

TRUST MARKERS

How we earn your trust

Encryption Standard

All data transmitted between your device and our servers uses industry-standard SSL encryption. Your payment details and personal information are never exposed.

Regular Audits

We conduct quarterly security reviews to identify and fix vulnerabilities. Third-party auditors verify our data handling practices.

Compliance Framework

rectoto operates under Indonesian data protection standards and international privacy best practices. We update our policy as regulations evolve.

Limited Access

Only essential team members can access your personal data. Staff sign strict confidentiality agreements and receive regular privacy training.

Transparent Logging

We maintain detailed logs of who accesses your account and when. You can request an access report anytime from your dashboard.

No Data Sharing

We never share your information with marketing partners, advertisers or unrelated third parties. Your data stays within rectoto.

Consistency across rectoto

Same Policy Everywhere
Whether you're on mobile, desktop or our app, the same privacy protections apply. Your data handling is identical across all platforms.
Unified Account Data
Your profile, transaction history and preferences sync securely across devices. One account, one privacy standard, everywhere.
Consistent Payment Security
DANA, OVO, GoPay and QRIS transactions all use the same encryption and fraud-detection systems. No shortcuts on any payment method.
Single Privacy Team
One team oversees data protection across all rectoto services. Policies don't vary by region or product — consistency is our standard.
Unified Retention Rules
We keep your data for the same duration whether you're active or inactive. Clear timelines apply to all account types.
Coordinated Updates
When we update this policy, the change applies to every rectoto user simultaneously. No hidden variations or delayed rollouts.
Transparent Change Log
We publish a dated history of every policy change. You can see exactly what changed, when and why — no surprises.
QUICK SIGNAL

What defines our approach

01
Your Consent First We ask permission before collecting optional data. You control what information you share beyond the essentials needed for your account.
02
Right to Access Request a complete copy of your personal data anytime. We'll deliver it in a readable format within 14 days of your request.
03
Right to Delete Ask us to erase your account and associated data. We'll remove it permanently, except where law requires us to retain records.
04
Breach Notification If your data is ever compromised, we notify you immediately with details of what happened and steps you should take.
05
Cookie Transparency We use cookies only to remember your login, track site performance and prevent fraud. You can disable non-essential cookies anytime.
06
No Automated Decisions We don't use algorithms alone to make decisions about your account. A human reviews any action that affects your access or funds.

Privacy questions answered

We retain your data for as long as your account is active, plus five years after closure for legal and fraud-prevention purposes. You can request deletion earlier where permitted by law.

We store only the reference tokens your payment provider gives us, not your actual card or wallet credentials. Your bank details never touch our servers directly.

Yes. Go to Account Settings, select 'Data Export' and we'll email you a complete file within 14 days. It includes your profile, transaction history and preferences.

We anonymise most of it immediately. Transaction records stay encrypted for five years to comply with Indonesian financial regulations, then are permanently deleted.

No. We share data only with payment processors (to process your DANA, OVO, GoPay or QRIS transaction) and legal authorities when required by law.

We use SSL encryption, regular security audits, strict access controls and fraud-detection systems. Our team monitors for threats 24/7 and responds to incidents immediately.

Yes. Every email includes an unsubscribe link. You can also disable marketing communications in your Account Settings without affecting your gaming access.