Reference

shoptoto Privacy Policy: What We Collect and Why

Our Privacy Policy explains exactly what personal information shoptoto collects when you open an account, make a deposit via DANA or QRIS, or contact our support team —…

Account data handled securelyDANA, OVO, GoPay, QRIS context coveredYour rights clearly statedRetention periods disclosedContact path for data requests
shoptoto shoptoto Privacy Policy: What We Collect and Why
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you have a question about how your data is stored, want to request a copy of your account information, or need to update personal details linked to your OVO or DANA…

Live Chat Reach our data-support team via live chat on the shoptoto site, available seven days a week. Quote your registered phone number so we can locate your account quickly.
Email Support Send a written data request to our privacy email address. We aim to respond within 48 hours and will confirm receipt of any deletion or correction request by return email.
Account Help Desk For payment-related data queries — such as QRIS transaction records or GoPay deposit logs — use the Help Desk link in your account dashboard, which routes directly to our cashier verification team.
DATA HANDLING STANDARDS

Six Ways We Protect Your Information

Our data handling practices are built around six clear commitments that cover everything from how cookies work in your browser session to how long we keep account records after you close your…

Cookie Use

Session cookies track your login state and preferred wallet — DANA or OVO — so you do not re-enter details each visit. You can clear cookies in your browser settings at any time without losing your account.

Account Security

Phone verification is required before account access is granted. If an unfamiliar device attempts login, we flag the session and send a verification prompt to your registered mobile number immediately.

Payment Data Storage

Your QRIS code, GoPay wallet ID and bank transfer reference numbers are stored in encrypted form. We do not display full wallet credentials on any account page visible after login.

Data Retention

Active account data is retained while your account remains open. Closed-account data is held for a period required by applicable financial record-keeping obligations, then deleted according to our internal schedule.

Third-Party Sharing

We share your data only with payment processors — such as the rails handling DANA and OVO transactions — and only to the extent needed to process your deposit or withdrawal. We do not sell personal data to advertisers.

Your Access Rights

You may request a copy of the personal data we hold, ask us to correct inaccurate details, or request deletion of your account data. Submit requests via live chat or email; we acknowledge each request within two business days.

Your Questions About the shoptoto Privacy Policy

The answers below address the most common data and privacy questions we receive from account holders in Indonesia. If your question is not covered here, reach us through live chat or email and we will respond with a specific answer tied to your account.

We collect your name, email address, phone number and the payment method you register — DANA, OVO, GoPay, QRIS or a bank transfer rail. Device and session data is also logged to protect your account access.

Yes. Wallet identifiers linked to DANA, OVO and GoPay are stored in encrypted form and used only to process deposits and withdrawals. We do not expose full wallet credentials on any visible account screen.

After account closure, we retain data for the period required by applicable financial record-keeping obligations. Once that period lapses, the data is deleted according to our internal schedule.

Yes. Submit a data-access request via live chat or our privacy email address. We acknowledge requests within two business days and provide your data summary in a readable format.

We share data only with payment processors handling DANA, OVO, GoPay, QRIS and bank transfer rails, and only to the extent needed to complete a transaction. We do not sell your personal information to any advertiser or marketing network.

Our Privacy Policy applies to accounts where access is permitted and depends on local law. Any data processing tied to Indonesian payment rails such as QRIS and GoPay follows the same policy terms described on this page.

Contact our support team via live chat or email with your registered phone number. We will verify your identity, then action the correction or deletion request and confirm completion by return message.