Password security and account access
Your leo78 password is the first line of defense. We require a minimum length, a mix of character types, and prohibit common patterns. Your password should never be shared, reused from other platforms, or written where others can access it. leo78 stores all passwords using encryption algorithms that make reverse-engineering unfeasible—we cannot retrieve your password even if you forget it. Password reset always requires verification of your registered email address.
If you suspect your password is compromised, change it immediately. Visit Account > Security Settings, verify your identity, and create a new password. This action does not automatically log you out of existing sessions, but we recommend logging out from all devices after a password change as an added precaution. You can force-logout all sessions except your current one through your account dashboard.
Two-factor authentication
Two-factor authentication (2FA) adds a second verification layer beyond your password. Enable 2FA in Account > Security Settings by linking your mobile phone. When you log in from a new or unrecognized device, leo78 sends a time-based code to your phone—you enter this code to complete login.
2FA protects against unauthorized access even if someone obtains your password. We recommend enabling 2FA immediately after registration. If you lose access to your registered phone, contact support to update your 2FA device without delays.
Identity verification and KYC compliance
Before withdrawing funds, leo78 requires identity verification. This process protects both you and the platform by confirming your identity and ensuring compliance with regional anti-money-laundering regulations. Verification is straightforward: upload a clear photo of your government-issued ID (KTP, passport, or driving licence) and a selfie holding the ID. Our system processes these documents securely within one business day.
- KYC verification
- Know-Your-Customer process confirming your identity before withdrawal; required by regional law and leo78 policy
- Document security
- Your ID photo and selfie are encrypted and stored separately from your account profile, accessible only to authorized compliance staff
- Processing time
- Standard verification completes within one business day; expedited review available upon request through support
Verification failures are rare and typically result from document image quality (blurry photos, poor lighting) or mismatched information between your ID and your account. If your verification is rejected, support explains the reason and allows you to resubmit with corrected documentation. Failed verifications do not restrict your demo play or account access—only live deposits and withdrawals require verified status.
Payment information and data encryption
When you deposit via DANA, e-wallet, mobile banking, local payment, or bank transfer, leo78 never stores your payment credentials directly. online payment and e-wallet linking uses OAuth authentication—you approve leo78 access to these wallets without sharing login credentials. Bank transfers generate unique virtual account codes specific to your account; your actual bank details are never exposed to leo78 systems. All payment data in transit is encrypted using industry-standard protocols.
Session security and device management
leo78 tracks active sessions on your account. You can view all logged-in devices in Account > Active Sessions and force-logout from any device remotely. This feature is valuable if you've logged in on a shared computer or public device—logging out from that device prevents further unauthorized access without requiring a password change.
Sessions expire automatically after subject to verification of inactivity for security. During tournaments (Liga 1, Piala Indonesia, Piala AFF, or scheduled slot events), your session remains active while you play—inactivity timers reset with each game action. However, if you step away from leo78 without actively playing, the system logs you out after the inactivity window expires.
Withdrawal verification and fraud prevention
Before processing your withdrawal, leo78 verifies that the destination account matches your verified identity. If you registered with one bank account but attempt to withdraw to a different account, our system flags this for manual review. This protects against unauthorized withdrawals if your account is compromised. Withdrawals always return to the payment method you used for deposits—online payment to e-wallet, mobile banking to local payment, bank to bank. This design ensures traceability and prevents unintended fund transfers.
Large or unusual withdrawal requests may trigger additional review before processing. This is not a penalty—it's standard fraud prevention. Our support team contacts you via your registered email or phone to confirm the request. Once confirmed, the withdrawal processes without further delays.
Account recovery and unauthorized access response
If you suspect unauthorized access—unusual login times, unfamiliar games in your Recently Played list, or unexpected withdrawal requests—contact support immediately. Our team can:
- Force-logout all active sessions except your current one
- Review your transaction history and flag suspicious activity
- Reset your password and 2FA settings without requiring your current password
- Freeze your account temporarily while we investigate
- Recover your account if your credentials are compromised
Account recovery speed depends on complexity, but we prioritize security cases and typically resolve them within hours. During recovery, your funds remain protected in segregated accounts—leo78 does not move or freeze your balance without explicit authorization except in fraud investigation scenarios.
Data privacy and third-party sharing
Your personal data—name, contact information, ID documents, payment methods—is never shared with third parties for marketing or other purposes. leo78 shares data only with payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) to complete transactions and with regulatory authorities if required by law. Your transaction history and game play records are accessible only to you and leo78 staff with explicit need-to-know access.
You can request a complete data export or request deletion of your account and associated data at any time through Account > Privacy Settings. Data deletion is permanent and cannot be reversed—your account, balance, history, and documents are all removed. Export requests take up to 30 days to compile; deletion takes up to 60 days to fully process across all systems.