Password strength and account access
Your exo toto password is the first line of defense for your account. We require passwords to be at least 8 characters long and include a mix of uppercase letters, lowercase letters, numbers, and symbols. A strong password is difficult to guess and unique to exo toto—do not reuse passwords from other sites or services.
If you forget your password, use the "Forgot Password" link on the login screen. We'll send a reset link to your registered email address. Click the link, create a new password, and log in. This process takes a few minutes. If you don't receive the email, check your spam folder or contact our support team.
Two-factor authentication (2FA)
Two-factor authentication adds a second security layer to your account. After you enter your password, we send a code to your phone via SMS or a authenticator app. You enter this code to complete login. Even if someone obtains your password, they cannot access your account without the second factor.
We recommend enabling 2FA immediately after creating your account. To set it up, log in, navigate to Account Settings, and select "Enable Two-Factor Authentication." Choose SMS or an authenticator app (such as Google Authenticator or Authy). Follow the prompts to confirm. Once enabled, 2FA is required every time you log in from a new device.
Two-factor authentication is the single most effective way to prevent unauthorized account access. Enable it as soon as you create your exo toto account.
Identity verification and KYC
Before your first withdrawal, we may request identity verification. This is KYC (Know Your Customer) compliance—a standard practice across financial platforms. You upload a copy of your ID (passport, national ID, or driver's license), a selfie, and proof of address (utility bill, bank statement, or rental agreement). Our compliance team reviews these documents and confirms they match your account details.
Verification typically takes a few hours during business hours. If there's a discrepancy—for example, your name on the ID differs from your account name—we'll send you a message asking for clarification. Respond promptly, and we'll complete verification as soon as possible. We store your documents securely and delete them after a set retention period.
Payment method verification
When you deposit via DANA, e-wallet, mobile banking, or bank virtual accounts, we verify that the payment source matches your account holder name. This prevents unauthorized deposits and protects you from account takeover. If you try to deposit from a payment method that doesn't match your account name, the deposit will be rejected.
Withdrawals are processed back to the same payment method you used to deposit. This creates a clear audit trail and ensures that only you can move money out of your account. If you want to withdraw to a different payment method, contact our support team. We'll verify your identity and update your withdrawal address.
Deposit and withdrawal audit trail
Every deposit and withdrawal on exo toto is recorded with a timestamp, amount, payment method, and status. You can view your transaction history in your account dashboard. This transparency helps you spot unauthorized activity. If you see a transaction you don't recognize, contact our support team immediately.
Account recovery and suspicious activity
If you suspect unauthorized access to your account, change your password immediately and enable 2FA if you haven't already. If you cannot access your account, use the "Forgot Password" link to reset it. If you believe your account has been compromised, contact our support team right away. We can freeze your account, review your transaction history, and help you regain control.
We monitor accounts for suspicious activity—unusual login locations, rapid withdrawals, or multiple failed login attempts. If we detect suspicious behavior, we may temporarily lock your account and ask you to verify your identity. This is a protective measure. Respond to our verification request, and we'll unlock your account.
Key takeaways
- Use a strong, unique password and change it regularly
- Enable two-factor authentication on your account
- Verify your identity before your first withdrawal
- Deposits and withdrawals must match your account holder name
- Review your transaction history regularly for unauthorized activity
Data privacy and encryption
Your personal data on exo toto is encrypted in transit (using HTTPS) and at rest (in our secure database). We do not share your data with third parties except where required by law or to process your payments. Your payment information (local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet details) is handled by our payment processors, who are bound by strict confidentiality agreements.
We retain your data only as long as necessary to provide our services and comply with legal requirements. After a set retention period, we delete your documents and personal information. You can request a copy of your data or ask us to delete it by contacting our support team. We'll respond within a reasonable timeframe.