todshop Privacy Policy

This page describes what data we collect when you use todshop and how we keep that information protected. We are committed to transparency about our data practices, and we comply with privacy regulations applicable to the jurisdictions where todshop operates.

When you register an account, place a bet on Liga 1 or Piala AFF, join a live-dealer table, or make a deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, you share information with us. We collect only what is necessary to operate the platform, process your transactions, verify your identity, and prevent fraud and money laundering.

We do not sell your personal data to third parties. We do not share your information beyond what is required by law or necessary for payment processing. This policy outlines exactly what we collect, why we collect it, and how long we retain it.

What Data We Collect on todshop

We collect your email address, phone number, full name, and date of birth during account registration. These are essential for account creation and email verification. We also collect your country and city of residence to verify compliance with jurisdiction restrictions; if you access todshop from Jakarta, Surabaya, Bandung, Medan, or Semarang, that information helps us confirm legal eligibility.

When you make a deposit or withdrawal, we collect transaction data: the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank name), the amount, the date and time, and the outcome (completed, pending, or failed). This data is necessary for settlement and financial record-keeping.

We also collect gameplay data: the games you play (sportsbook matches, live-dealer table sessions, slot spins, esports markets), the dates and times you play, and your account balance. This data helps us understand usage patterns, detect fraud, and optimise the platform. We do not store video recordings of your personal device—only logs of your activity within todshop.

Identity Verification: When you request a withdrawal above certain thresholds, we may ask for a copy of your government-issued ID or a utility bill. We collect these documents to comply with anti-money-laundering regulations. These documents are stored securely and are never shared outside our compliance team.

How We Use Your Data

We use your email address to send you account confirmations, password-reset links, and support messages. Your phone number is used for account recovery if needed. We do not send marketing emails or SMS unless you explicitly opt in.

We use your payment information to process deposits and withdrawals securely. Your payment provider (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or your bank) receives only the information necessary to complete the transaction—we do not share additional personal details with them.

We use gameplay and transaction data to detect suspicious patterns that might indicate fraud or money laundering. If we notice unusual activity—for example, sudden large deposits followed by immediate withdrawals, or access from multiple countries in a short time—we may request verification or temporarily suspend your account pending review.

We also use your data to comply with legal obligations. If a regulatory authority or court requests your account information, we may be required to disclose it. We will notify you of such requests whenever legally permitted to do so.

Data Storage and Third Parties

Our servers may be located outside your country of residence; however, your data is encrypted both in transit and at rest. We use industry-standard encryption (TLS 1.2 or higher) to protect all personal and financial information.

We do not share your personal data with third parties for marketing or sales purposes. However, we may share limited information with third parties who perform necessary functions: payment processors (to settle transactions), identity verification services (to check documents you submit), and legal authorities (if required by law). Each third party is contractually bound to protect your data.

Payment processors: We share transaction details with online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet to process deposits and withdrawals.
Identity verification: We may use third-party services to verify your identity document. These services receive only your document image, not other personal data.
Legal compliance: We may share account information with financial regulators or law enforcement if legally compelled to do so.
Cookies and tracking: We use cookies to remember your login session and preferences. You can disable cookies in your browser, but this may limit platform functionality.

Data Retention

We retain your account data for as long as your account is active. If you close your todshop account, we delete your personal information (email, phone, address) within a reasonable timeframe, unless we are required by law to retain it for compliance or dispute resolution purposes.

Transaction records and gameplay history are retained longer, as these are necessary for financial audits and regulatory compliance. We typically retain these records for seven years, in line with standard financial regulations applicable in regions where we operate, including those where major holidays like Idul Fitri and Idul Adha fall.

If you request deletion of your data, we will comply to the extent permitted by law. However, if an investigation into fraud or money laundering is ongoing, we may retain relevant data until the investigation concludes.

Your Rights and Contact Information

You have the right to access the personal data we hold about you. To request a copy of your data, contact our support team via in-app chat or email. We will provide your information within a reasonable timeframe.

You have the right to correct inaccurate information. If your name, email, or address has changed, update it in your todshop account settings or request assistance from support. You also have the right to request deletion of your data, subject to legal and operational constraints.

If you have concerns about how we handle your data, contact our support team. We take privacy violations seriously and will investigate any complaint. If you believe we have violated applicable privacy law, you may also file a complaint with the relevant data protection authority in your jurisdiction.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes via email or by posting an updated policy on our website. Your continued use of todshop after an update constitutes your acceptance of the revised policy.

For questions about our privacy practices, contact our support team through in-app chat, email, or our FAQ page. You can also review our Terms and Conditions and Legal Notice for additional information about how todshop operates and your rights as a user.