Reference

bolatoto Privacy Policy for Indonesian Accounts

Our Privacy Policy sets out exactly what personal data we collect when you open an account, how we use it to process payments via DANA, OVO, GoPay and…

Data collected at account creationDANA, OVO, GoPay & QRIS transaction recordsCookie and device data explainedYour right to access or delete dataContact path for privacy requests
bolatoto bolatoto Privacy Policy for Indonesian Accounts
PRIVACY REQUEST CHANNELS

How to Reach Us About Your Privacy

If you want to request a copy of your data, ask us to correct inaccurate details or submit a deletion request, our privacy team is reachable through three channels. Response times for data requests are typically within 72 hours on business days. Provide your registered phone number so we can match your request to the correct account before acting on it.

Team online

Live Chat

Open the live-chat window from your account dashboard — available around the clock, including weekends. Mention 'privacy request' so the agent routes you directly to the data team.

Email

Send a written data request to our privacy address listed in the account help section. Include your registered phone number and specify whether you are requesting access, correction or deletion.

Account Help Centre

Log in, navigate to Settings, then select Privacy & Data. From there you can download a summary of stored data or submit a formal deletion request without contacting support.

DATA HANDLING STANDARDS

How We Manage, Secure and Retain Your Data

Security and transparency are built into each step of how we handle account data — from the moment you complete phone verification to the point your withdrawal clears…

Account Security at Login

Phone verification is required before account access is granted.

Cookie and Device Data

We use session cookies to keep you logged in across pages and analytics cookies to understand how account sections are…

Payment Data Handling

Transaction identifiers for GoPay, QRIS and virtual-account payments are stored to support withdrawal verification and dispute resolution.

Data Retention Periods

Account data is retained for as long as your account remains active plus the period required by applicable regulations.

Third-Party Data Sharing

We share data only with payment processors required to clear DANA, OVO, GoPay or bank-transfer transactions, and with identity-verification services…

Your Right to Request Changes

You may request access, correction or deletion of your personal data at any time through live chat, email or the…

Privacy Policy — Frequently Asked Questions

The questions below cover what Indonesian account holders ask most about how bolatoto collects, stores and processes personal data. If your question is not listed here, reach the privacy team via live chat or the in-account help section.

We collect your name, email address, phone number and the payment method you register — such as DANA, OVO, GoPay or a bank transfer through BCA or Mandiri. Phone verification is completed before account access is granted.

Transaction records for DANA, QRIS and other payment rails are used to verify deposits, process withdrawals and resolve any payment disputes. This data is shared only with the payment processor needed to clear your transaction.

No. We do not sell personal data. Data is shared only with payment processors and identity-verification services where required, and only to the extent needed to complete your transaction or meet regulatory requirements.

Log in, go to Settings, then Privacy & Data to download a summary of stored records. You can also send a written request via email or contact us through live chat, quoting your registered phone number.

Yes. Submit a deletion request through the Privacy & Data section in your account or via email. We aim to remove non-mandatory records within 30 days. Whether full deletion is possible depends on local law and any outstanding account obligations.

Data is retained while your account is active and for the period required by applicable regulations after closure. Payment reference numbers — including OVO and virtual-account records — are kept for the minimum period required.

The same Privacy Policy terms apply across Indonesia, including for accounts accessed from Jakarta or Surabaya. Specific data-processing obligations and your deletion rights depend on local law in your region.