Reference

boytoto Privacy Policy: What We Collect and Why

Our Privacy Policy sets out exactly what personal data boytoto collects when you open an account, make a deposit via DANA or QRIS, and access the lobby —…

Account data collected at registrationDANA, OVO, GoPay & QRIS transaction recordsCookie and device data policyYour right to access or delete dataContact path for privacy requests
boytoto boytoto Privacy Policy: What We Collect and Why
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy Rights

If you want to review the personal data we hold, request a correction, or ask us to delete your account data, our privacy support team is reachable through three direct channels. We aim to respond to all data-related requests within 72 hours of receipt, during operating hours of 08:00 to 23:00 WIB every day, including weekends. Have your registered phone number ready so we can verify your identity before actioning any request.

Team online

Live Chat

Open the chat widget in your account dashboard and select 'Privacy Request' from the topic menu. Available 08:00–23:00 WIB daily, including weekends, for identity-verified account holders.

Email Support

Send your data access or deletion request to our privacy inbox. Include your registered phone number and the subject line 'Privacy Request' so our team routes it correctly within 72 hours.

Account Settings

Log into your boytoto account, go to Settings, then 'Data & Privacy' to download a copy of your stored data or submit a deletion request directly without contacting support.

DATA HANDLING PRACTICES

Six Ways We Keep Your Account Data Safe

Data security is not a background function at boytoto — it shapes how we build every account flow, from the moment you complete phone verification at registration through…

Encrypted Storage

All account credentials and payment identifiers — including DANA wallet IDs and bank transfer references — are stored using AES-256…

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand lobby navigation.

Access Restrictions

Internal access to personal data is role-restricted. Only personnel handling account verification or payment disputes can view transaction records from…

Data Retention Schedule

We keep your data only as long as required for the purpose collected.

Third-Party Sharing Policy

We share data with payment processors — such as DANA and QRIS gateways — only to complete your transactions.

Data Correction Requests

If your registered name or phone number is incorrect, submit a correction request via the 'Data & Privacy' path in…

Privacy Policy Questions We Hear Most Often

Below are the questions we receive most from account holders in Jakarta, Surabaya, and across Indonesia about how boytoto handles personal data. If your question is not here, use the Live Chat or 'Data & Privacy' path in your account settings to get a direct answer from our team.

We collect your name, email, phone number, and payment method details at registration. If you deposit via DANA or OVO, we also record the transaction ID linked to your account for withdrawal verification purposes.

We share your data only with payment processors — such as QRIS and GoPay gateways — to complete transactions. We do not sell or share your account profile or activity history with advertisers, data brokers, or unrelated third parties.

Retention periods depend on local law and the transaction type. Once your account is closed and all DANA or bank transfer withdrawals are settled, we anonymise remaining records on a fixed internal schedule.

Log into your account, go to Settings, then 'Data & Privacy', and select 'Download My Data'. You can also submit the request through Live Chat during 08:00–23:00 WIB daily using your registered phone number.

Yes. Submit a deletion request through the 'Data & Privacy' section in Settings or via email with the subject line 'Privacy Request'. We process confirmed deletion requests within 30 days, subject to any legal retention obligations that depend on local law.

QRIS and OVO transaction IDs are stored securely and used only to verify deposits and process withdrawals on your account. These records are not shared with third parties beyond the payment processor completing your transaction.

We use session cookies to maintain your login and analytics cookies to track lobby navigation patterns. You can manage cookie settings in your browser without affecting your account balance or stored payment details.