Reference

How kartototo Handles Your Personal Data

We collect only what we need to run your account — login details, wallet identifiers from DANA, OVO or GoPay, and session activity.

Data collected only for account operationDANA, OVO, GoPay wallet data handled securelyYou can request access or deletion anytimeNo data sold to third partiesApplies where local law permits
kartototo How kartototo Handles Your Personal Data
DATA HANDLING STANDARDS

How We Protect and Manage Your Information

Data security at kartototo is operational, not just a statement. Here is how each key area works in practice — from how we store your wallet credentials to how long we keep session logs after your account goes inactive.

Wallet Data Security Your DANA, OVO and GoPay identifiers are stored encrypted and accessed only during transaction verification. We do not display full wallet numbers in your account history.
Cookie and Session Tracking We use session cookies to keep you logged in across your mobile browser and to remember your last lobby position. You can clear these via your browser settings at any time.
Data Retention Period Active account data is retained while your account is open. If you close your account, transaction records are held only as long as required by applicable regulations, then deleted.
Requesting Changes or Deletion Submit a privacy request through live chat or the Help Centre form. We aim to respond within a reasonable period and will confirm the action taken on your data in writing.
PRIVACY CONTACT PATHS

Reach Us About Your Privacy

If you want to review the data we hold, request a correction, or ask us to delete your account information, our support team handles privacy requests directly. Reach out through any of the channels below and include your registered account email or phone number so we can locate your record quickly.

Live Chat Start a live chat session from your account dashboard. Describe your privacy request and our team will respond with next steps and a reference number.
Email Support Send your data access or deletion request to our support email. Include the wallet type you registered with — DANA, OVO or GoPay — to help us identify your account.
Account Help Centre The Help Centre inside your account has a dedicated privacy request form. Submit it directly and track the status without needing a separate email thread.

Common Questions About Your Data Rights

These are the questions we hear most often from account holders about how their data is used, stored and managed on kartototo.

We collect your phone number or email, a password hash, and the wallet type you choose — DANA, OVO or GoPay. We do not collect identity documents unless a verification step requires it.

Wallet identifiers are encrypted at rest. Only the transaction reference and amount are logged for reconciliation. Full wallet account numbers are never stored in plain text on our servers.

Yes. Submit a data access request via live chat or the Help Centre form with your registered contact detail. We will compile and send you a summary of the data held on your account.

Contact us through live chat or email, confirm your registered phone number or email, and request deletion. We process this in line with applicable regulations and confirm once complete.

We share only what is needed with payment processors — like the reference data from an OVO transfer — to complete your transaction. We do not share data with advertisers or data brokers.

Inactive accounts retain data as long as required by applicable rules. Once that period ends, your personal and wallet data are deleted. You can also request early deletion by contacting support.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.