Reference

topitoto Legal Policy for Your Account

Our legal terms govern how your account, personal data and transactions are handled on topitoto — where local law permits.

Account TermsData & PrivacyDANA / OVO / GoPay / QRIS ScopeCookie PolicyContact & Requests

Explore Our Lobby Read FAQ

Understand Your Rights Under Our Terms

topitoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

topitoto operates under a jurisdiction-dependent framework: eligibility and access depend on local law, and we apply these terms to all accounts regardless of the deposit method chosen — DANA, OVO, GoPay, QRIS, virtual account or bank transfer via BCA, BRI, Mandiri or BNI. Our terms cover

1
account creation, wallet-linking conditions, transaction records and how we store activity data. We retain transaction logs for the period required by the applicable legal framework, after which they are purged from active systems. Any dispute regarding a QRIS payment confirmation or a DANA wallet mismatch is
2
handled through our documented dispute path, not through informal messaging. By opening an account you acknowledge these terms and confirm that your use of the platform is permitted where local law permits. We review and update this policy when regulatory requirements change, and we notify you
3
via the contact address on your account.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

LEGAL CONTACT

Reach Us for Policy or Account Requests

If you need to submit a data-access request, correct account information or raise a legal query, our support team has a dedicated policy channel.

DATA & SECURITY

How We Handle Your Data and Account Security

From phone verification at account creation to cookie management in your browser, we apply consistent security practices to protect your information.

Phone Verification

We verify your mobile number before account access is granted. This one-time check links your identity to your account and prevents unauthorised wallet connections, including DANA and OVO.

Cookie Management

Our site uses session and analytics cookies. You can review active cookies and withdraw consent at any time through the cookie settings link in the page footer, without affecting your account status.

Data Retention

Transaction records — including GoPay and QRIS payment confirmations — are retained for the period set by applicable law, then removed from active storage. You may request a copy before deletion.

Account Security

Password resets require both email and phone confirmation. If you suspect unauthorised access, freeze your account instantly from the security settings tab before contacting our live chat team.

Data-Access Requests

Submit a written request via our legal email inbox to receive a copy of the personal data we hold on your account. We fulfil verified requests within the timeframe required by the applicable framework.

Policy Updates

When we revise these terms, we send a notification to your registered contact address at least 7 days before changes take effect, giving you time to review or close your account if needed.

Legal Questions About Your topitoto Account

Common questions about how our legal terms apply to your account, your data and your rights on topitoto.

Send a request to our legal email inbox with your registered phone number and account ID. We verify your identity first, then fulfil the data-access request within the timeframe the applicable framework requires.

Yes. All deposit and withdrawal records — including DANA wallet links and QRIS payment confirmations — fall within our transaction data policy. Dispute and retention rules apply equally to every payment rail we support.

We retain transaction logs for the period mandated by the applicable legal framework. Once that period ends, records are purged from active systems. You can request a copy of your data before it is removed.

Access and eligibility depend on local law. Where local law permits, you may open an account, link a supported wallet such as OVO or GoPay, and access the lobby. We do not override jurisdiction-specific restrictions.

Submit a correction request through the Help Centre form or via live chat. For changes to your registered phone number, additional identity verification is required before the update is applied to your account.

On account closure we remove active profile data promptly, but transaction records are retained for the legally required retention period. After that window closes, all remaining data is deleted from our systems.

We send a notification to your registered contact address at least 7 days before any policy change takes effect. You can review the updated terms in the Help Centre and contact us with questions before the changes apply.

topitoto Legal Policy for Your Account

Reach Us for Policy or Account Requests

How We Handle Your Data and Account Security

Phone Verification

Cookie Management

Data Retention

Account Security

Data-Access Requests

Policy Updates

Legal Questions About Your topitoto Account

01 Who do I contact to request a copy of my personal data from topitoto?

02 Does topitoto legal policy cover DANA and QRIS transactions?

03 How long does topitoto keep my account and payment records?

04 Is my eligibility to open a topitoto account subject to local law?

05 How can I update or correct personal information on my topitoto account?

06 What happens to my data if I close my topitoto account?

07 How will topitoto notify me of changes to its legal terms?

Related Pages