Reference

How obor toto Handles Your Personal Data

At obor toto, your personal data belongs to you — we collect only what is necessary to run your account, process withdrawals through DANA, OVO, GoPay and QRIS…

Data collected only as neededDANA, OVO, GoPay & QRIS transactions logged securelyAccount deletion available on requestIndonesian data standards appliedNo data sold to third parties
obor toto How obor toto Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to review, correct or remove the personal data obor toto holds about you, our privacy team is reachable through three direct channels.

Live Chat Open the chat widget inside your account dashboard — available daily 08.00–23.00 WIB.
Email Privacy Request Send a written data request to our privacy inbox.
Account Settings Panel Navigate to Settings › Privacy inside your obor toto account to download a copy…
DATA HANDLING STANDARDS

Six Ways We Protect Your Information

Data protection at obor toto is not a single step — it is built into every layer of your account, from the moment you deposit via GoPay to the moment you request…

Encrypted Storage

All personal and payment data — including your DANA wallet ID and transaction history — is stored with AES-256 encryption at rest. Decryption keys are rotated on a scheduled basis and held separately from the data store.

Cookie Transparency

We use session cookies to keep you logged in and analytics cookies to see which pages load slowly on mobile. You can disable non-essential cookies from the Privacy tab in your account settings at any time without affecting your QRIS or OVO payment flow.

Payment Data Minimisation

When you pay via GoPay or DANA, we pass only the transaction reference and amount to the payment gateway. We never store your full e-wallet PIN or bank account number on our servers.

Account Access Logs

Every login to your account is timestamped and tied to a device fingerprint. If we detect a sign-in from an unrecognised device, we send an alert to your registered email before allowing session access.

Data Retention Policy

Active account data is held while your account is open. If you request closure, non-financial personal data is deleted within 30 days. Payment records are retained for five years as depends on local law, then permanently purged.

Your Right to Correction

You can update your name, phone number and contact email at any time from the Account Details page. For changes to your linked OVO or DANA identifier, contact our support team via live chat during operating hours for identity verification.

Common Questions About Your Privacy at obor toto

Below are the questions our account holders ask most often about how we handle their data. If your question is not covered here, reach out via live chat between 08.00 and 23.00 WIB and our team will respond directly.

We collect your name, email address, mobile number and, when you add a payment method, the identifier for your chosen rail — such as your DANA phone number or GoPay account. Device type and IP address are also logged for security purposes.

We do not sell your data to advertisers or data brokers. We share only the minimum fields required with payment processors like the QRIS network or OVO settlement layer to complete your transactions, and with identity-verification services where local law requires it.

Personal account data is held while your account remains active. After you close your account, non-financial records are deleted within 30 days. Transaction records linked to DANA, OVO, GoPay and QRIS are retained for five years as depends on local law.

Yes. Go to Settings › Privacy in your account and select 'Download My Data'. We will prepare a file containing your account details, session history and transaction log within 48 hours and notify you by email when it is ready.

Submit a deletion request from Settings › Privacy or contact us via live chat. We will remove your personal data within 30 days, except for financial records that must be retained as depends on local law. You will receive email confirmation once deletion is complete.

We use session cookies for login continuity and optional analytics cookies to monitor page performance. You can turn off non-essential cookies from the Privacy tab in your account settings; this will not interrupt your QRIS payment flow or account access.

Change your password immediately from Account Settings, then contact our live chat team between 08.00 and 23.00 WIB. We will review the access log tied to your device fingerprint and freeze any suspicious activity while we investigate alongside you.