Reference

How We Handle Your Personal Information

At olxtoto asli, your personal data is collected only for the purposes of operating your account, processing transactions through DANA, OVO, GoPay and QRIS, and delivering account-level support…

Data encrypted at rest and in transitDANA, OVO, GoPay & QRIS transaction records protectedAccount data accessible on request within 3 business daysNo data sold to third-party advertisers
olxtoto asli How We Handle Your Personal Information
PRIVACY CONTACT CHANNELS

Reach Us About Your Privacy Rights

If you want to access, correct or remove your personal data held by olxtoto asli, our privacy support team is available seven days a week, 07:00–23:00 WIB. We aim to acknowledge every privacy request within 24 hours and resolve it within three working days. You can reach us through any of the channels below — choose whichever is most convenient for you.

Team online

Live Chat

Open the chat widget from any page inside your account dashboard. Our privacy agents are available 07:00–23:00 WIB, seven days a week, and respond within minutes to data-related queries.

Email

Send your privacy request or data-deletion query to our dedicated address at [email protected]. We respond within 24 hours and resolve most cases within three working days.

Help Centre Ticket

Log into your account, navigate to Settings → Help → Submit a Request, and select 'Privacy & Data' as the category. This creates a trackable ticket so you can monitor resolution progress in real time.

DATA HANDLING PRACTICES

How olxtoto asli Protects and Manages Your Data

Our data practices are built around six concrete commitments — from how cookies work on your browser to how long we retain your GoPay and QRIS transaction logs.

Cookie Use

We use session cookies to keep you logged in across pages and analytics cookies to measure load times. We do not use third-party advertising cookies. You can disable non-essential cookies in your browser settings at any time without losing account access.

Account Security

Each account is protected by password hashing using bcrypt with a minimum work factor of 12, plus optional two-factor authentication via your registered email. We notify you by email within one hour of any unrecognised login attempt detected on your account.

Data Retention

Transaction records — including DANA deposits and OVO withdrawals — are retained for five years to meet Indonesian financial record-keeping requirements. Profile data such as name and email is deleted within 30 days of a verified account-closure request, where local law permits.

Third-Party Processors

We share only the minimum data necessary with payment processors handling DANA, GoPay and QRIS transactions. Each processor operates under a data-processing agreement that restricts them from using your information for any purpose beyond completing your transaction.

Your Right to Access

You can request a full export of the personal data we hold on your account at any time. Submit the request through Settings → Privacy → Data Export, and we will deliver a structured file to your registered email address within three business days.

Correction & Deletion

Incorrect name, phone number or email on your account? Update them directly in Settings → Profile, or raise a correction request via live chat. Deletion requests are processed within three working days and confirmed by email once your data has been removed from active systems.

Your Privacy Rights — Common Questions

The questions below come directly from the kinds of queries our support team receives about data, cookies, account records and how to exercise your rights. If your question is not listed here, open a ticket through the Help Centre or contact us via live chat between 07:00 and 23:00 WIB.

We collect your name, email address, phone number, and the device identifiers associated with your login session. If you deposit via DANA, OVO, GoPay or QRIS, we also retain the transaction reference number and amount for record-keeping purposes that depend on local law.

Log into your account and go to Settings → Privacy → Data Export. We will compile your full record — profile details, session history and transaction metadata — and deliver it to your registered email within three business days of receiving the request.

No. We do not sell, rent or transfer your personal information to advertising networks or marketing companies. Data shared with third parties is limited to payment processors such as DANA and GoPay gateway operators, and only for completing your transactions.

Transaction records — including DANA deposits, OVO withdrawals, GoPay transfers and QRIS payments — are retained for five years. This period is set to meet Indonesian financial record-keeping obligations and depends on local law.

Submit a deletion request through Settings → Help → Submit a Request (select 'Close Account & Data Deletion'). We process verified requests within three working days and send email confirmation once your data has been removed from active systems, where local law permits.

We use session cookies to maintain your login state and first-party analytics cookies to measure page performance. We do not deploy third-party advertising cookies. You can turn off non-essential cookies in your browser settings without affecting your ability to access your account.

Change your password immediately from Settings → Security, then contact our live chat team between 07:00 and 23:00 WIB. We will review login logs, flag the session and, if needed, temporarily lock the account while we investigate the access with you.