Reference

How kartoto Keeps Your Privacy Safe

Your account, payment history and personal information stay protected every time you deposit via DANA, OVO, GoPay or QRIS on kartoto.

Encryption on all transfersDANA, OVO, GoPay, QRIS secureYour data, your control
kartoto How kartoto Keeps Your Privacy Safe
REACH OUR TEAM

Contact Us About Your Privacy

Email Support Send privacy questions or data requests to our support team at [email protected]. We respond to all requests within 5 working days, including access and deletion inquiries.
Live Chat Use the chat widget in your account lobby during support hours (09:00–22:00 WIB, seven days a week) to ask about cookies, data retention or account security.
Account Settings Visit Settings > Privacy & Security in your kartoto account to update your contact details, adjust cookie preferences, or request a data download.
HOW WE HANDLE IT

Data Security and Your Rights

Account Security

All logins use encrypted connections. Your password is hashed; we never store it in plain text. Two-factor authentication is available under Settings > Security to add an extra layer to your account.

Payment Protection

Deposits and withdrawals via DANA, OVO, GoPay and QRIS go through encrypted channels. Your card or wallet details are tokenized, so kartoto never holds the raw numbers.

Data Retention

We keep your account data active for the life of your account. Closed accounts are archived for 24 months where local law permits, then deleted. Transaction records are retained for dispute and compliance review.

Cookie Policy

Essential cookies keep you logged in and prevent fraud. Analytics cookies help us improve the lobby. You can adjust non-essential cookies in Settings > Preferences without losing core functionality.

Your Access Rights

You can request a full download of your personal data, including account history and transactions, by emailing [email protected] or through Settings > Privacy & Security.

Deletion Requests

Close your account or request permanent deletion through Settings > Account > Close Account. We process deletion within 30 days where local law permits, unless legal holds apply.

Privacy and Data Questions

Your account is immediately deactivated and all personal data is archived. After 24 months, archived data is deleted unless a legal hold applies. You can request immediate deletion by emailing [email protected], though transaction records may be kept for compliance.

No. Your payment details and deposit/withdrawal history stay within kartoto and are only shared with DANA, OVO, GoPay and QRIS operators to process your transactions. We do not sell or transfer your data to third parties.

All transfers use bank-grade SSL encryption. Look for the padlock icon in your browser address bar when entering payment details. Your wallet or card numbers are never stored—only a secure token is kept on file.

We use session cookies to keep you logged in and analytics cookies to track user behaviour. Visit Settings > Preferences to disable non-essential cookies. Disabling essential cookies will log you out and may affect site stability.

We retain transaction records for as long as your account is active and for 24 months after closure where local law permits. This supports dispute resolution, fraud detection and compliance with local regulations.

Yes. Email [email protected] or go to Settings > Privacy & Security and select 'Download My Data'. We provide a complete file of your account info, payment history and activity within 10 working days.

We log your IP address and device type to detect fraud and ensure account security. This data helps us spot unusual login attempts from Semarang or Makassar and protect your account. You cannot disable this, but it is stored securely and never shared externally.