Data Minimisation
We collect only the information needed to verify your identity and process DANA, OVO, GoPay and QRIS deposits. No unnecessary fields or hidden data requests.
We've built pgatoto around your trust. This privacy policy shows exactly how we collect, use and protect your personal data when you open an account, deposit via DANA...
pgatoto collects personal data to verify your identity, process deposits through DANA, OVO, GoPay and QRIS, prevent fraud and improve your experience. We use encryption to protect account credentials and payment details. Your data is stored on secure servers and accessed only by authorised staff. We comply with data protection standards in supported regions and never sell your information to third parties.
You can request access, correction or deletion of your data at any time through our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
All account logins and payment transactions use industry-standard SSL encryption. Your credentials and DANA, OVO, GoPay or QRIS details are protected end-to-end.
We conduct quarterly security reviews to identify and fix vulnerabilities. Third-party auditors verify our data handling practices meet compliance standards.
Your personal information is never sold to advertisers or data brokers. We share data only with payment processors and fraud-prevention partners you've authorised.
We keep detailed records of who accesses your data and when. You can request an audit trail of your account activity through our support team.
When you request account closure, we delete personal data within 30 days. Backup copies are purged within 90 days unless law requires retention.
Our privacy practices align with data protection frameworks in supported regions. We update policies when local regulations change to keep you covered.
We collect only the information needed to verify your identity and process DANA, OVO, GoPay and QRIS deposits. No unnecessary fields or hidden data requests.
We ask permission before using your data for marketing or analytics. You can opt out of promotional emails and adjust communication settings anytime.
Our payment processors follow strict data-handling rules. We share only transaction details needed to complete your deposit; they never see your full account history.
If a security incident occurs, we notify affected users within 48 hours with clear steps to protect your account. We also report to relevant authorities where required.
You can access, correct, port or delete your personal data. Submit requests through account settings or support; we respond within 14 days.
We use cookies only for login persistence, fraud detection and analytics. No tracking cookies follow you across the web; you control cookie preferences in settings.
When we change this policy, we notify you 30 days in advance. Continued use means acceptance; you can close your account if you disagree with changes.
We verify your identity to prevent fraud and meet regulatory requirements. Your personal details are checked once during signup and stored securely for future logins.
Every DANA, OVO, GoPay and QRIS deposit is logged with timestamps and amounts. You can view your full transaction history in your account dashboard anytime.
We monitor account activity for suspicious patterns and use your data to detect unauthorised access. This protects your balance and payment methods from misuse.
Choose how often we contact you about promotions, updates and account activity. Adjust frequency in settings or unsubscribe from specific email types instantly.
We keep active account data for the duration of your membership. After closure, personal information is deleted within 30 days; transaction records retained per local law.
If your data moves across borders for backup or processing, it remains protected by the same encryption and access controls as data stored locally.