Reference

Your Data, Kept Clear and Local

We explain what we collect when you open an account, contact support, or use DANA, OVO, GoPay, and QRIS for account checks.

DANAOVOGoPayQRIS

Browse lobby Read FAQ

What This Policy Actually Covers

castelototo Service availability depends on jurisdiction. Users are responsible for checking local law before access.

This policy covers the data we collect, why we collect it, and how you can ask us to change or remove it. We only keep records that help us open and secure your account, process DANA, OVO, GoPay, and QRIS activity where local law allows, answer

1
support chats, and settle account questions. When you send a message, we may store the text, time, device type, and basic browser signals so we can trace the request accurately. We do not ask for extra details beyond what is needed for the task, and we
2
stop using older records once they are no longer required for security, legal, or account reasons. A customer in Jakarta sees the same rules we use elsewhere on the site. If the law in your location does not allow access, we keep the same standard and
3
block the service rather than taking shortcuts.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

CONTACT PATHS

How to Reach Us

If you need a privacy answer, we reply through live chat and email every day from 10:00 to 22:00 WIB.

Live Chat Send us a message through live chat and ask for a privacy data check, correction, or removal request. We confirm the account email and explain the next step before we change anything.

Email Support Use the support email for data questions, cookie choices, or record copies. Tell us the account name, device, and last login so we can locate the right file quickly.

Account Form Open your account settings, then send a privacy request from the verification area. We use that step to make sure the request comes from the account holder before we act.

DATA SAFEGUARDS

How We Handle Your Data

We keep privacy handling tied to the account itself. That means login records, cookie settings, support transcripts, and payment-check traces stay linked only as long as we need them for service, security…

Storage Control

We store account details, login times, and support messages on controlled systems so we can answer requests and confirm ownership. We do not ask for extra fields unless the request cannot be completed without them.

Cookie Use

Our cookies remember your language, session state, and basic device signals. That helps the page stay signed in on mobile and desktop, and it lets us spot unusual access without collecting more than we need.

Security Checks

If you change an email, phone number, or payment route, we ask for a fresh verification step. That may include a code, a chat confirmation, or a check of the latest login device.

Retention Limits

We keep records only while they still serve a clear account, security, or legal purpose. Once they are no longer needed, we remove them or strip the parts that identify you.

Correction Requests

To correct or update your record, send the exact change through your account page or live chat. Tell us what should change, and we will confirm the request before editing the file.

Contact And Access

If you want a copy, a restriction, or a removal request where local law allows it, email or chat us from the registered account and include the latest login details.

Common Questions About Privacy Rights

These are the questions we hear before someone opens an account or sends a privacy request. We answer them from the same policy we use on mobile and desktop, and we keep the wording tied to the real data we handle: login records, cookie settings, support chats, and payment-check traces. If local law does not permit access, we apply the policy only where it is allowed.

It covers the account data we collect, the cookie and device signals we read, the support chats you send, and the records tied to DANA, OVO, GoPay, and QRIS activity where local law allows.

We keep the account name, contact route, login time, device type, and any verification step you complete. We use those fields to confirm access, answer requests, and keep a clear record of changes.

Yes. Use your account page or live chat and ask for a copy, correction, or removal request. We first verify the registered account, then we handle the file according to local law.

Cookies help us remember your session, language choice, and basic device state. They do not replace account checks, and you can ask us to explain which cookie entries sit on your browser.

Those rails only add the records we need for a payment check, such as reference time and status. We do not use wallet data for anything outside the account task that triggered it.

We keep them only while they are needed for service, security, tax, or dispute handling. When that reason ends, we remove or anonymise the parts that identify you, as required by law.

Send a message through live chat or email from the registered account, then include the latest login device and your request. Our team replies from 10:00 to 22:00 WIB every day.

Your Data, Kept Clear and Local

How to Reach Us

How We Handle Your Data

Storage Control

Cookie Use

Security Checks

Retention Limits

Correction Requests

Contact And Access

Common Questions About Privacy Rights

01 What does this privacy policy cover?

02 Which details do you store when I join?

03 Can I request a copy or correction?

04 Do cookies change how my data is used?

05 Do DANA, OVO, GoPay, and QRIS affect privacy?

06 How long do you keep my records?

07 How do I contact you about a privacy issue?

Related Pages