How kebon toto encrypts your data
Every time you log into kebon toto, your username and password travel over an encrypted connection. We use TLS (Transport Layer Security) encryption, the same standard that banks and payment apps use. This means that even if someone intercepts your connection, they cannot read your login credentials or payment information.
Your account data — your name, ID number, email, phone, and payment methods — is stored in encrypted databases. We do not store your password in plain text. Instead, we store a cryptographic hash, which means even our own staff cannot see your password. If you forget your password, we can reset it, but we cannot retrieve the original.
What encryption protects
Encryption protects your login credentials, payment information, and account balance from being intercepted during transmission. It does not protect you from phishing emails or malware on your device.
Always verify that you're visiting kebontoto.app before logging in. Phishing sites may look identical to kebon toto but are designed to steal your credentials. If you receive an email asking you to "verify your account" or "confirm your payment method," do not click the link — log into kebon toto directly through your browser instead.
Identity verification and KYC
Before you can deposit funds into kebon toto, we verify your identity. This process, called Know Your Customer (KYC), is a legal requirement in most jurisdictions. It protects you by preventing account takeover and money laundering, and it protects kebon toto by ensuring we know who our users are.
During signup, we ask for your full name, date of birth, and a copy of your government-issued ID (KTP, passport, or driver's license). We verify this information against our fraud-detection systems. If everything checks out, your account is approved within a few hours. If we detect a discrepancy, we'll contact you to clarify.
Once your identity is verified, we match your withdrawal method to your deposit method. If you deposit via DANA, you can only withdraw to e-wallet. This prevents unauthorized transfers and keeps your funds secure. If you need to change your payment method, contact our support team, and we'll help you update it.
Creating and protecting your password
Your kebon toto password is your first line of defense. A strong password is long, unique, and difficult to guess. We recommend at least 12 characters, mixing uppercase and lowercase letters, numbers, and symbols.
Do not reuse passwords across websites. If one site is compromised, attackers will try your password on other sites, including kebon toto. Use a password manager (like Bitwarden or 1Password) to generate and store unique passwords for each service.
Change your kebon toto password periodically — at least once every few months. If you suspect your password has been compromised, change it immediately. Log into your account, go to Settings, and select Change Password. You'll be asked to enter your current password and then your new password.
- Strong password
- At least 12 characters, mixing letters, numbers, and symbols. Example: Tr0pic@lSunset#2024
- Weak password
- Short, common, or reused across sites. Example: password123 or kebon2024
- Password manager
- A tool that generates and stores unique passwords for each site, so you only need to remember one master password.
Securing your device and network
Your kebon toto account is only as secure as the device you use to access it. If your phone or computer is infected with malware, attackers can steal your login credentials or intercept your transactions.
Keep your device's operating system and apps up to date. Security updates patch vulnerabilities that attackers exploit. On Android, enable automatic updates in the Google Play Store. On iOS, go to Settings and enable automatic updates. On your computer, enable automatic updates for Windows, macOS, or Linux.
Use antivirus software on your computer. On Android, consider using Google Play Protect, which scans apps for malware. Avoid downloading apps from untrusted sources — always use the official app store.
When accessing kebon toto, use a secure network. Avoid public Wi-Fi networks at cafes or airports, as they may not be encrypted. If you must use public Wi-Fi, use a VPN (Virtual Private Network) to encrypt your connection. A VPN creates a secure tunnel between your device and the internet, protecting your data from eavesdropping.
Two-factor authentication and new-device verification
kebon toto offers optional two-factor authentication (2FA) to add an extra layer of security. When 2FA is enabled, logging in requires both your password and a code from your phone. Even if someone steals your password, they cannot access your account without that code.
To enable 2FA, log into kebon toto, go to Settings, and select Security. Follow the prompts to link your phone number or email. We'll send you a code each time you log in from a new device. Enter the code to complete the login.
We also monitor for suspicious login attempts. If we detect a login from an unusual location or device, we may ask you to verify your identity via email or SMS. This extra step protects your account from unauthorized access. If you receive a verification request that you did not initiate, do not approve it — contact our support team immediately.
Recovering a compromised account
If you suspect your kebon toto account has been compromised — for example, you see unauthorized transactions or cannot log in — act immediately. Do not wait.
First, try to log in. If you can access your account, change your password immediately. Go to Settings, select Change Password, and enter a new, strong password. Then review your recent activity and transactions. If you see unauthorized activity, contact our support team right away.
If you cannot log in, use the "Forgot Password" link on the login page. We'll send a password-reset link to your registered email address. Click the link and create a new password. Once you've reset your password, log in and review your account activity.
If you cannot access your email or if you believe your account has been compromised in a way that password reset cannot fix, contact our support team. We're available in English during standard service hours. Provide as much detail as you can about the suspicious activity, and we'll investigate and help you recover your account.
Protecting your payment methods
kebon toto accepts deposits via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers through online payment, e-wallet, mobile banking, and local payment. Each payment method has its own security features, and we add an extra layer by verifying your identity before processing withdrawals.
When you deposit via online payment, you scan a QR code with your banking app. This is secure because the QR code is unique to your transaction and expires quickly. When you deposit via e-wallet or mobile banking, you're redirected to that app to confirm the transfer — you never enter your e-wallet password on kebon toto.
For bank transfers, we provide a virtual-account number that's unique to your kebon toto account. Transfer funds to that number, and they arrive in your kebon toto balance. Do not share your virtual-account number with anyone else.
When you withdraw, funds return to the same payment method you used to deposit. This matching system prevents unauthorized transfers. If you need to change your payment method, contact our support team, and we'll help you update it securely.
Recognizing and avoiding phishing scams
Phishing is a common attack where scammers send fake emails or SMS messages pretending to be from kebon toto. They ask you to click a link, log in, and "verify" your account or payment method. The link leads to a fake website that looks like kebon toto but is designed to steal your credentials.
- It asks you to click a link to "verify your account" or "confirm your payment method."
- It creates a sense of urgency ("Your account will be closed in 24 hours").
- The sender's email address looks similar to kebon toto's but is slightly different (e.g., [email protected] instead of [email protected]).
- It asks for sensitive information like your password, ID number, or full card details.
If you receive a suspicious email claiming to be from kebon toto, do not click any links. Instead, log into kebon toto directly through your browser and check your account. If there's a legitimate issue, you'll see a notification in your account dashboard. If you're unsure, contact our support team.