Reference

How poltartoto Handles Your Personal Data

At poltartoto, your personal data is collected only for the purpose of operating your account securely and processing transactions through DANA, OVO, GoPay and QRIS.

Data collected only for account operationsDANA, OVO, GoPay & QRIS transactions securedYour right to request data deletionIndonesia-based data handling practices24/7 privacy contact channel available
poltartoto How poltartoto Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Our Privacy Team

We keep three direct contact paths open so you can raise a data query, request a correction, or ask for account data deletion without delay. Our privacy support team is available every day from 07:00 to 23:00 WIB, and you can expect an initial response within two business hours during those windows. Whether you are in Surabaya or anywhere else in Indonesia, the same channels apply.

Team online

Live Chat

Start a live chat session from your account dashboard between 07:00 and 23:00 WIB. Our privacy team handles data queries, correction requests and deletion requests directly through this channel.

Email Support

Send your privacy request to our dedicated email address found in your account settings. We respond within two business hours during operating hours and confirm every action taken on your data.

In-Account Privacy Form

Log in, navigate to Settings, then select Privacy Requests. Submit your query through the structured form and receive a reference number instantly so you can track the status of your request.

DATA HANDLING PRACTICES

Six Ways We Protect Your Privacy

Our data handling framework covers every stage of your account lifecycle — from the moment you register to the point you request deletion.

Encrypted Storage

All personal data, including DANA and OVO wallet identifiers, is stored using AES-256 encryption at rest. Encryption keys are rotated on a scheduled basis and held separately from the data stores they protect.

Cookie Controls

We use session cookies to keep your account login active and analytics cookies to understand page load performance. You can review and adjust your cookie preferences at any time from your account settings page.

Account Security Layers

Two-step verification is available for all accounts and is triggered automatically when a login attempt comes from an unrecognised device or a new IP address. You receive an immediate notification on your registered contact.

Data Retention Schedule

Transaction data linked to GoPay and QRIS payments is retained for the period required by Indonesian financial regulation, after which it is permanently deleted. Non-financial profile data is removed within 30 days of a verified deletion request.

Third-Party Sharing Policy

We share data with payment processors such as DANA, OVO, GoPay and QRIS only to the extent needed to complete your transaction. No profile data is passed to external marketing or advertising platforms under any circumstance.

Your Correction Rights

You can request a correction to any inaccurate personal data we hold. Submit the request via the in-account Privacy Form or email support. We verify your identity first, then action the correction within three working days.

Frequently Asked Privacy Questions

Below are the questions we receive most often from account holders about how poltartoto collects, stores and manages personal data. If your specific question is not covered here, our privacy support team is reachable via live chat or email between 07:00 and 23:00 WIB every day.

We collect your name, email address, phone number and the wallet identifiers for whichever payment method you use — DANA, OVO, GoPay or QRIS. Device and session data is also collected to protect your account from unauthorised access.

Transaction records linked to DANA, OVO, GoPay and QRIS are held for the period required under applicable Indonesian financial regulation. Once that period ends, records are permanently and irreversibly deleted from our systems.

Yes. Log in to your account, go to Settings, and select Privacy Requests. Submit a data access request there. We verify your identity and deliver a structured data export within five working days. Eligibility depends on local law.

No. We do not sell, license or share your personal data with any advertiser or marketing company. Data is shared only with payment processors such as DANA and GoPay, and only to complete your transaction.

Use the in-account Privacy Form under Settings, or contact our privacy team via live chat or email between 07:00 and 23:00 WIB. After identity verification, non-financial data is deleted within 30 days. Financial records follow the regulatory retention period.

We use session cookies to maintain your login state and performance cookies to monitor page load speed. No advertising cookies are placed on your device. You can view and manage your cookie preferences inside account settings at any time.

Support agents can view the transaction reference and status for your DANA, OVO, GoPay or QRIS payment to resolve the issue. They cannot view or export your full data profile. All support interactions are logged and held for 90 days.