Reference

Privacy Policy for Your Account

DANA, OVO, GoPay and QRIS activity, login sessions and lobby choices such as Sic Bo or Rocket Crash are covered by this Privacy Policy when you use xltoto.

DANA account recordsOVO wallet checksGoPay transaction logsQRIS payment trailCookie controls
xltoto Privacy Policy for Your Account
PRIVACY CONTACTS

Three Ways to Reach Us

A privacy request should not feel like a maze. We keep contact paths close to the account area so you can ask about data access, correction, cookie choices, or a payment record without leaving the flow. For faster handling, include your registered phone number, account email, the payment rail involved, and the date of the action you want us to check.

Team online

Live chat desk

Use live chat from 09:00 to 01:00 WIB for quick privacy questions about login alerts, cookie prompts, or recent wallet references. We may ask you to confirm your account email before discussing personal data.

WhatsApp privacy queue

Send a WhatsApp message through the account help panel when you need a record checked for DANA, OVO, GoPay or QRIS. Add the transaction date and your registered phone number for faster tracing.

Email request path

Email [email protected] for access, correction, deletion or cookie questions that need written handling. We reply with the next account step and may request proof that the account belongs to you.

DATA HANDLING

Six Controls Behind the Policy

Privacy work is part of daily operations, not a separate promise page. We connect account checks, wallet records, cookies, login alerts and support transcripts so your request can be handled with context.

Account sign-up fields

When you create an account, we ask for details needed to identify you, secure login access, and connect wallet activity. Extra fields are reviewed so the sign-up step stays tied to policy needs.

Payment record handling

DANA, OVO, GoPay and QRIS references are stored with transaction time, amount and account link so support can trace wallet questions. We do not ask for wallet PINs or full payment app passwords.

Cookie choices

Cookies help keep your session active, remember language preference, and notice repeated failed logins. You can clear them in your browser path, then sign in again to rebuild a fresh session.

Device sessions

We read device type, browser version, IP range and session time to detect unusual account access. If a new device looks risky, support may ask you to confirm recent activity before data changes.

Retention windows

We keep account and wallet records only as long as needed for service checks, dispute tracing, security and legal duties. Some deletion requests may be limited when records are still needed.

Change requests

You can ask us to correct a phone number, email address or account detail through chat, WhatsApp or email. We verify identity first so another person cannot alter your personal data.

Questions About Your Data

These answers cover the privacy questions we receive most often from Indonesia account holders. They focus on account data, cookies, wallet references, device sessions and contact steps. If your situation involves a specific DANA, OVO, GoPay or QRIS record, send the date and account email so we can trace it properly.

We collect account details such as phone number, email address, login credentials, device signals and wallet references. These details help us create access, secure sessions, answer support requests and connect DANA, OVO, GoPay or QRIS activity to your account.

Payment records help us trace wallet questions, match transaction times, and respond when you ask about a DANA, OVO, GoPay or QRIS entry. We store references, not your payment app password or wallet PIN.

Yes. Contact live chat, WhatsApp or [email protected] with the detail you want corrected. We verify that the account belongs to you before changing phone numbers, email addresses or profile data.

You can request deletion through email or support channels. We review the account, wallet records and security history first, because some data may need to stay for transaction tracing or legal duties where local law permits.

Cookies keep your login active, remember browser choices, and help us spot repeated failed access attempts. On Chrome for Android, open Settings, Site settings, then Cookies if you want to clear or adjust them.

Only support and account staff assigned to privacy handling can read the request details needed for the case. We limit access to the account record, payment reference and identity check needed to answer you.

We acknowledge privacy emails during 09:00 to 01:00 WIB support hours and explain the next account step. Complex requests, such as deletion or payment tracing, may take longer while we verify ownership and records.