Reference

Explore Your Rights on to28

to28 operates within a legal framework shaped around Indonesian users — covering account rights, data handling, and access policies where local law permits.

Jurisdiction-aware policiesDANA, OVO, GoPay & QRIS coveredData retained per Indonesian normsAccount rights clearly statedContact path always open

Explore the Lobby Read FAQ

Browse Our Terms and Conditions

to28 Service availability depends on jurisdiction. Users are responsible for checking local law before access.

Our terms govern every account action — from the moment you register through to withdrawal processing via DANA, OVO, GoPay or QRIS. Access to specific features depends on local law, and we mark any region-restricted section clearly so you are never left guessing. Account eligibility, transaction

1
limits, and dispute procedures are all covered in the full document. We update terms when regulations change and notify you by email at least seven days before any material revision takes effect. If a clause is unclear, our support team in Jakarta is available to walk
2
you through it. We do not apply retroactive changes to funds already in your account wallet.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

REACH US DIRECTLY

Open a Legal Query With Our Team

If a term, clause or data-handling rule is unclear, our support team is reachable around the clock. Players in Surabaya and across Indonesia can contact us through live chat, email or our dedicated legal request form. Response times for legal queries are capped at 48 hours on business days.

Team online

Live Chat

Available 24 hours a day, seven days a week. Start a chat directly from your account dashboard to raise a legal question or flag a clause you need clarified — no email thread required.

Email Support

Send detailed legal queries to our compliance address. We acknowledge within four hours and deliver a substantive response within 48 business hours, including references to the specific policy section involved.

Legal Request Form

Use the in-account form under Settings › Legal to submit data-access requests, correction notices or account-closure instructions. Each submission receives a unique reference number for tracking.

HOW WE HANDLE DATA

Switch Between Your Rights at Any Time

Account security, cookie management and data retention are not afterthoughts — they are written into our system architecture.

Cookie Policy

We use session and analytics cookies only. You can adjust cookie preferences from the footer banner on any page, and opt-out choices are stored against your account so they persist across devices.

Data Retention

Transaction records — including DANA, OVO, GoPay and QRIS receipts — are retained for five years per Indonesian financial regulation. Account profile data is removed within 30 days of a verified deletion request.

Account Security

Two-factor authentication is available for every account and enforced automatically on logins from new devices. Session tokens expire after 30 minutes of inactivity to reduce unauthorised access risk.

Data Access Requests

You may request a full export of your account data at any time via Settings › Legal. We process export requests within 14 calendar days and deliver them as an encrypted file to your registered email.

Correction Rights

If your profile data is inaccurate — name, address or payment alias — submit a correction notice through the Legal Request Form. Corrections to financial records are reviewed by our compliance team before being applied.

Who to Contact

For data protection queries specifically, our compliance officer handles all correspondence. Reach them via the legal email address listed in the Contact section of your account dashboard — not general support.

Get Clear Answers on Policy Matters

These are the questions we receive most often about account rights, data handling and legal access. Each answer refers to a specific policy section so you can verify it directly in the full terms document.

Yes — certain game categories and promotional structures depend on local law. We display a region notice on any restricted feature so you know immediately if something is unavailable in your area.

Go to Settings › Legal in your account, then select Data Export. We process the request within 14 calendar days and send an encrypted file to your registered email address.

Yes. Submit a deletion request through the Legal Request Form. Profile data is removed within 30 days; transaction records linked to DANA, OVO, GoPay or QRIS are retained for five years per regulation.

We send an email notification at least seven days before any material change takes effect. The updated document is also posted in Settings › Legal with a clear revision date at the top.

We use session cookies for login continuity and analytics cookies for site performance. Adjust preferences via the footer cookie banner; your choice is saved to your account and applies across all your devices.

Our compliance officer manages all data protection correspondence. Use the legal email address in your account dashboard under Contact — not the general live chat — for formal complaints.

Live chat responses are immediate around the clock. Email and Legal Request Form submissions receive acknowledgement within four hours and a substantive reply within 48 business hours.

Explore Your Rights on to28

Open a Legal Query With Our Team

Live Chat

Email Support

Legal Request Form

Switch Between Your Rights at Any Time

Cookie Policy

Data Retention

Account Security

Data Access Requests

Correction Rights

Who to Contact

Get Clear Answers on Policy Matters

01 Does access to all features depend on local law?

02 How do I request a copy of my personal data?

03 Can I ask to have my account data deleted?

04 How will I know when the terms change?

05 What cookies does to28 use and how do I manage them?

06 Who handles formal data protection complaints?

07 How long does it take to get a response to a legal query?

Related Pages