Reference

goyangtoto Privacy Policy: What We Collect and Why

Our Privacy Policy sets out exactly how goyangtoto handles the personal information you share when you open an account, make a deposit via DANA or QRIS, or reach…

Data collected only as neededDANA, OVO, GoPay & QRIS details protectedYour rights, clearly statedRetention periods disclosedContact path for data requests
goyangtoto goyangtoto Privacy Policy: What We Collect and Why
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

Team online

Live Chat

Our live chat channel is open around the clock. Use it to raise a data query, ask about stored payment records or request a copy of the information we hold on your account.

Email Support

Send a written data request to our support address. We aim to acknowledge receipt within 24 hours and resolve the request within 14 days, consistent with what local law requires.

Account Help Centre

The Help Centre inside your account dashboard includes a dedicated privacy-request form. Submitting through that form attaches your account ID automatically, which speeds up our verification step.

DATA HANDLING PRACTICES

How goyangtoto Handles Your Information

We apply layered controls across every stage of data handling — collection, storage, processing and deletion.

Encrypted Storage

All account data — including phone numbers used during verification and bank transfer references — is stored using AES-256 encryption. Encryption keys are rotated on a scheduled basis and are never held alongside the data they protect.

Cookie Use

We use session cookies to keep you logged in across the lobby and functional cookies to remember your preferred deposit method, such as QRIS or OVO. You can adjust cookie preferences in your browser settings at any time.

Account Security

Phone verification is required before your account is activated. After activation, any change to your registered mobile number triggers a second verification step to prevent unauthorised modifications to your payment or withdrawal details.

Data Retention

We keep account and transaction records for as long as your account is active, plus the additional period required by Indonesian financial regulations. Once that period ends, records are permanently deleted from our servers within 30 days.

Third-Party Sharing

We share your data only with payment processors — such as the rails behind DANA, GoPay and virtual account services — who are contractually bound to handle it according to the same standards we apply internally. We do not sell your data.

Your Rights

You may request a copy of your data, ask us to correct inaccurate records, or request deletion of your account and associated data where local law permits. Submit requests through live chat, email or the in-account privacy form.

Privacy Policy Questions We Get Asked

These are the questions we hear most often about our Privacy Policy. If yours is not here, reach us via live chat or the Help Centre form and we will respond within one business day.

We collect your phone number, a verified identity document and the device identifier used at registration. Payment-related data — such as your DANA wallet reference or QRIS scan record — is collected only when you make a transaction, not in advance.

No. We store only the transaction reference and payment status returned by the OVO or GoPay processing rail. Your full wallet login credentials are never passed to or stored on our servers.

We retain account and transaction records for the period required by Indonesian financial regulations after account closure. Once that retention window closes, your records are permanently deleted from our servers within 30 days.

Yes. Submit a data-access request through live chat, via email or using the privacy form inside your account dashboard. We acknowledge receipt within 24 hours and provide the data within 14 days where local law permits.

We share data only with the payment processors that power DANA, OVO, GoPay, QRIS and virtual account rails, under strict data-handling agreements. We do not sell personal data or share it with advertising networks.

We use session cookies to maintain your login state and functional cookies to remember your preferred payment method, such as QRIS or OVO. You can disable non-essential cookies in your browser settings without affecting account access.

Contact our support team immediately via live chat, which is available 24 hours a day. For a formal written complaint, use our email support channel. We treat potential data-breach reports as high-priority and respond within one business day.