Reference

dewatoto Privacy Policy: What We Collect and Why

The dewatoto Privacy Policy sets out exactly what personal information we collect when you open an account, how we use it to process your deposits via DANA, OVO…

Account data protectedDANA & QRIS payment records securedData access on requestRetention limits appliedIndonesia-applicable terms
dewatoto dewatoto Privacy Policy: What We Collect and Why
REACH OUR PRIVACY TEAM

Contact Us About Your Privacy Rights

If you have a question about your data, want to request a copy of what we hold, or need to update information tied to your DANA or OVO wallet, our support team is available 24 hours a day, seven days a week. You can reach us through live chat directly from your account dashboard, by email, or via our Telegram channel. Our team in Surabaya handles data-access requests and typically responds within one business day to any privacy-related query.

Team online

Live Chat

Open a live chat session from your account dashboard at any time — 24/7 availability for data queries, account-verification questions and payment-record requests.

Email Support

Send a written data-access or deletion request to our privacy email. We acknowledge within 24 hours and complete most requests within three business days.

Telegram Channel

Reach the support team on our Telegram channel for quick privacy questions. Useful when your account is locked or when verifying which payment data we hold.

HOW WE PROTECT YOUR ACCOUNT

Six Ways We Handle Your Data Responsibly

From the moment you complete phone verification to every QRIS deposit you make, we apply structured data-handling practices.

Cookie Usage

We use session cookies to keep you logged in and preference cookies to remember your chosen payment method — for example, whether you last deposited via DANA or GoPay. You can clear these from your browser at any time.

Account Security

Your account password is stored as an encrypted hash; we never store it in plain text. Phone verification is required before account access is granted, adding a second layer of identity confirmation.

Data Retention

We keep transaction records — including OVO and bank-transfer logs — for the period required by Indonesian financial regulations. Account data is deleted or anonymised within 30 days of a verified account-closure request.

Third-Party Sharing

Payment processors such as QRIS and virtual-account providers receive only the minimum data needed to clear your deposit. We do not share your game history or browsing behaviour with advertisers.

Your Access Rights

You may request a full export of the personal data we hold on your account at any time. Where local law permits, you can also request correction or deletion. Use live chat or email to start the process.

Policy Change Notices

When we update this Privacy Policy, we post a notice on the login page at least seven days before the change takes effect. We also send an email to the address registered on your account so you are not caught off guard.

Frequently Asked Questions About Our Privacy Policy

The questions below reflect what you are most likely to search before opening an account or making your first deposit. If your question is not covered here, live chat is available 24/7 and our team responds to email privacy requests within one business day.

We collect your name, phone number, email address and the payment method you register — DANA, OVO, GoPay, QRIS or a bank transfer option. Phone verification is required before account access is granted, and that record is retained for security purposes.

We share only the minimum required data with DANA, OVO, GoPay or QRIS processors to complete your transaction. We do not sell or transfer your payment records to advertisers, data brokers or unrelated third parties under any circumstances.

Transaction logs — including QRIS and bank-transfer records via BCA or Mandiri — are kept for the period Indonesian financial regulations require. After a verified account-closure request, personal data is deleted or anonymised within 30 days.

Yes. Submit a data-access request via live chat or email. Where local law permits, we will produce a full export of your account and transaction data. Most requests are completed within three business days of identity confirmation.

We use session cookies to maintain your login state and preference cookies to remember your last payment method — for example, GoPay or DANA. You can remove these from your browser settings at any time without losing your account.

We post a notice on the login page at least seven days before any policy update takes effect and send an email to your registered address. You are not required to accept changes silently — contact us via live chat if you have concerns.

Yes. Use of your account and the data practices described in this Privacy Policy depend on local law. Where local law permits, all the rights and processes described here apply to your account fully.