Reference

rosetoto Privacy Policy for Indonesian Accounts

The rosetoto Privacy Policy sets out exactly what personal data we collect when you open an account, how we store it, and the steps we take to keep…

Data collected at account openingDANA, OVO, GoPay & QRIS contextRetention periods stated clearlyYour right to request deletionIndonesia-specific access wording
rosetoto rosetoto Privacy Policy for Indonesian Accounts
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy Rights

If you want to review, correct or delete the personal data we hold on your account, our support team is available around the clock.

Live Chat Access live chat from inside your account dashboard — available 24 hours a day, seven days a week. Quote your registered phone number so we can pull up your data record immediately.
Email Data Request Send a written privacy request to our data team by email. Include your account username and the DANA or OVO number linked to your account so we can verify your identity before actioning changes.
In-App Help Form Find the Help Form under Account Settings on mobile or desktop. Select 'Privacy Request' from the category dropdown and describe what data you need reviewed, corrected or removed.
DATA HANDLING STANDARDS

Six Ways We Protect Your Account Data

Our data-handling practices are built around your account security and your right to understand what we store.

Encryption at Rest

All personal data — including your DANA wallet ID and BRI virtual account number — is encrypted at rest using AES-256. We do not store raw payment credentials after a transaction is confirmed.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to measure lobby performance. You can disable non-essential cookies from the Cookie Settings link in your account footer at any time.

Account Session Security

Each login session is tied to your verified phone number and device fingerprint. If we detect a login from an unrecognised device, we trigger an OTP challenge before granting account access.

Data Retention Period

We retain your account data for as long as your account remains active and for up to five years after closure, in line with financial record-keeping obligations. After that window, data is permanently deleted.

Third-Party Sharing Limits

We share data only with payment processors — such as QRIS network operators and OVO's settlement layer — strictly to complete your transactions. No data is passed to marketing networks or sold externally.

Right to Access and Correct

You may request a copy of all data we hold on your account, or ask us to correct inaccurate details, at any time. Submit the request via live chat or the in-app Help Form and we will respond within seven days.

Privacy Policy Questions We Hear Most

Below are the questions Indonesian account holders ask most often about the rosetoto Privacy Policy. If your question is not covered here, reach out through live chat or the in-app Help Form — our team can walk you through any data request step by step.

We collect your name, email address, phone number, and the payment detail you link — such as your DANA wallet ID, OVO number or BCA virtual account. We also log your device type and session activity in aggregate form.

We store only the reference identifiers needed to route transactions — your DANA wallet ID or GoPay-linked phone number. Raw payment credentials are never stored once a transaction is confirmed by the payment network.

We retain your data for up to five years following account closure to meet financial record-keeping obligations. After that period expires, all personal data associated with your account is permanently deleted from our systems.

Yes. Submit a data access request through live chat or the in-app Help Form under Account Settings. We aim to provide a full data copy within seven calendar days of verifying your identity via your registered phone number.

Some data rights and account feature eligibility depend on local law. Where local law permits, you may exercise the full range of access, correction and deletion rights described in this policy without any additional steps.

We use session cookies for login continuity and analytics cookies to improve lobby performance. Non-essential cookies can be disabled at any time via the Cookie Settings link in your account footer on both mobile and desktop.

Reach our data team via live chat in your account dashboard, by email or through the in-app Help Form — selecting 'Privacy Request' as the category. We acknowledge all privacy concerns within 24 hours of receipt.