Reference

How idatoto Handles Your Personal Information

When you open an account with us, we collect only what we need to run your account and process payments via DANA, OVO, or GoPay.

Account data kept secureDANA, OVO, GoPay payment contextYour right to access or delete dataNo data sold to third partiesContact us to update your records
idatoto How idatoto Handles Your Personal Information
REACH OUR TEAM

Contact Us About Your Privacy

If you have a question about the data we hold, want to correct something on your account, or need to request deletion, our support team is the right place to start. You can reach us through live chat inside the platform, by email, or via our social messaging channel. We aim to respond to all privacy-related requests within a reasonable timeframe and will confirm receipt of your query when it arrives.

Team online

Live Chat

Open the chat icon inside your account dashboard. Describe your data query and our team will pull up your account record to assist you directly.

Email Support

Send a detailed message to our support email address. Include your registered account name so we can locate your data record without delay.

Social Messaging

Reach us through our official social messaging channel. Good for quick questions about what data we hold or how to update your linked e-wallet details.

HOW WE PROTECT YOU

Data Handling, Cookies, Security and Retention

We apply encryption to all data in transit between your device and our servers. Your account login uses an OTP verification step sent to your registered mobile number, which means no one else can access your account even if your password is exposed. We keep data only for as long as it is needed for account operation, payment verification, or regulatory compliance — then it is deleted or anonymised. You can request a copy of your own data at any time.

Encryption in Transit

All data moving between your browser or app and our servers is encrypted via SSL. This covers your account details, wallet selections and any DANA, OVO or GoPay transaction context we process.

OTP Account Access

Every login triggers a one-time password to your registered mobile number. This blocks unauthorised access even if your email or password is compromised elsewhere.

Cookie Use

We use session cookies to keep you logged in on mobile. Analytical cookies help us understand which parts of the account flow cause friction. You can clear cookies at any time in your browser settings.

Data Retention

Account and transaction records are held only as long as required for payment verification and compliance purposes. When retention is no longer needed, data is deleted or anonymised from our active systems.

Your Privacy Questions, Clearly Answered

These are the questions we get most often about data, account privacy and your rights as someone with an active idatoto account. If your question is not here, our live chat team can help you directly.

We collect your name, email address, date of birth, mobile number, and the e-wallet details you use — DANA, OVO, or GoPay. We also log your device type and session activity to protect your account.

No. Your wallet PIN and password stay inside your own e-wallet app. We only receive a payment confirmation from the wallet processor — never your credentials or authentication codes.

Yes. Contact us via live chat or email with your registered account name. We will compile and send you a summary of the personal data associated with your account within a reasonable timeframe.

Send a deletion request through our support email or live chat. We will verify your identity via the OTP linked to your registered number, then process the deletion in line with our retention obligations.

We do not sell or rent your data to advertisers. We share limited information only with payment processors — such as DANA, OVO, GoPay networks — and fraud-prevention partners, strictly to complete your transactions.

We keep payment and account records for as long as needed for transaction verification and applicable compliance requirements. After that period, records are deleted or anonymised from our active systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.