Reference

topitoto Privacy Policy and Your Personal Data

The topitoto Privacy Policy sets out exactly what personal data we collect when you open an account, deposit via DANA, OVO, GoPay or QRIS, and access our lobby…

Data collected at account openingDANA, OVO, GoPay, QRIS transaction recordsCookie and session dataYour right to access or delete dataContact path for privacy requests

Explore Our Lobby Read FAQ

What This Policy Covers and Where It Applies

topitoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

This policy covers all personal data processed by topitoto when you create an account, verify your phone number, and connect a local wallet such as DANA, OVO, GoPay or QRIS. We also process bank transfer and virtual account references linked to BCA, BRI, Mandiri and BNI

1
when you choose those rails. Data is stored on secured servers and is not sold to third parties. The scope of this policy and your rights under it depend on local law. Where local law permits, you may request a copy of the data we hold
2
on your account at any time by contacting our privacy team. We retain transaction records for the period required by applicable regulations and delete account data promptly when a verified closure request is received.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about how topitoto handles your personal data, want to request a copy of your account data, or need to report a…

HOW WE HANDLE DATA

Six Ways We Protect Your Account Data

Data security at topitoto is built around six operational practices that apply from the moment you complete phone verification through to every QRIS or bank transfer you make.

Account Data Encryption

All personal details entered during account opening — name, phone number, email — are encrypted in transit and at rest. We use TLS protocols on every page where your data is submitted.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how you navigate the lobby. You can manage cookie preferences from the account settings page at any time.

Payment Data Handling

DANA, OVO, GoPay and QRIS transaction references are stored only as payment identifiers. We do not store full wallet credentials or PIN data on our servers at any point in the transaction flow.

Data Retention Period

Account records are retained for the period required by applicable regulations. When you request account closure, non-regulatory personal data is deleted within 30 days of identity verification.

Third-Party Sharing

We share data only with payment processors required to clear DANA, OVO, GoPay, QRIS and bank transfers, and with identity verification providers. No data is sold or passed to advertising networks.

Your Rights and Requests

Where local law permits, you have the right to access, correct or delete the data we hold. Submit a verified request via live chat or the Help Centre form and we will respond within two business days.

Questions About the topitoto Privacy Policy

The answers below address the most common privacy questions we receive from account holders in Indonesia. If your question is not covered here, the privacy contact paths in the section above connect you directly to our team.

We collect your phone number, email address and the identity details you submit during verification. Payment rail references — such as your DANA or QRIS identifier — are also logged against your account for transaction reconciliation.

Yes. Every deposit and withdrawal processed through DANA, OVO, GoPay, QRIS or bank transfer generates a transaction record covered by this policy. We store payment references, not full wallet credentials.

Submit a data access request via live chat or the Help Centre form at topitoto.xyz. Include your registered phone number. We verify your identity first, then deliver your data summary within two business days where local law permits.

Transaction records are kept for the period required by applicable regulations. Non-regulatory personal data is deleted within 30 days of a verified account closure request being confirmed by our privacy team.

We share data only with the payment processors needed to clear your DANA, OVO, GoPay, QRIS or bank transfer, and with identity verification providers. No data is passed to advertising networks or sold to any third party.

Use the privacy request form in the Help Centre or contact live chat between 08:00 and 24:00 WIB. After identity verification, corrections are applied within two business days and deletions within 30 days where local law permits.

We use session cookies for login continuity and analytics cookies to track lobby navigation. You can review and adjust cookie preferences inside account settings at any time without affecting your ability to access the platform.

topitoto Privacy Policy and Your Personal Data

Reach Our Privacy Team Directly

Six Ways We Protect Your Account Data

Account Data Encryption

Cookie Policy

Payment Data Handling

Data Retention Period

Third-Party Sharing

Your Rights and Requests

Questions About the topitoto Privacy Policy

01 What personal data does topitoto collect when I open an account?

02 Does the topitoto Privacy Policy apply to DANA, OVO and GoPay deposits?

03 How can I request a copy of the data topitoto holds on my account?

04 How long does topitoto keep my account and transaction records?

05 Does topitoto share my data with third parties or advertising networks?

06 How do I request correction or deletion of my personal data on topitoto?

07 What cookies does topitoto use and can I turn them off?

Related Pages