Reference

How pptoto Protects Your Personal Data

Your personal data — from account registration details to payment records via DANA, OVO, GoPay, and QRIS — is handled with strict internal controls at pptoto.

Data encrypted in transit and at restDANA, OVO, GoPay & QRIS transaction records securedRetention periods clearly definedYour right to request data deletionContact channel available 24/7
pptoto How pptoto Protects Your Personal Data
HUBUNGI TIM PRIVASI

Reach Our Privacy Team Directly

If you have questions about how your data is stored, want to request a copy of your records, or need to report a concern, our privacy…

Live Chat Start a live chat session directly on pptoto.
Email Support Send your data access or deletion request to [email protected].
Telegram Channel Connect with our privacy-support staff via our official Telegram handle listed in your account…
PRAKTIK PERLINDUNGAN DATA

How We Handle Your Information Responsibly

Every layer of data handling at pptoto — from the moment you log in to the point your withdrawal clears via OVO or DANA — follows a defined internal policy.

Encryption Standards

All data transmitted between your device and pptoto servers is protected using TLS 1.2 or higher. Stored records — including your QRIS and GoPay transaction history — are encrypted at rest using AES-256.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand which pages you visit most. You can manage cookie preferences from your browser settings at any time without losing your account data.

Account Access Controls

Your account is protected by password authentication and optional two-factor verification sent to your registered mobile number. We log every login attempt so you can review access history from your security dashboard.

Data Retention Schedule

Account records are kept for as long as your account remains active plus a compliance period that depends on local law. Payment transaction logs — including DANA and OVO records — follow the minimum retention window required by Indonesian financial regulations.

Third-Party Sharing Limits

We share data only with payment processors (such as QRIS network operators and GoPay settlement services) and identity-verification providers strictly necessary to operate your account. We do not share your data with advertisers.

Your Rights and Requests

You may request a full copy of the personal data we hold, ask us to correct inaccuracies, or submit a deletion request via email or live chat. We process each request within seven business days where local law permits.

Your Privacy Questions, Answered by pptoto

The questions below reflect what our account holders in Indonesia most commonly ask about how their data is collected, used, and protected. If your question is not covered here, reach our privacy team via live chat at any hour.

We collect your name, email address, date of birth, and the payment details linked to your chosen method — DANA, OVO, GoPay, or QRIS. We also record your device type and IP address for security purposes at the point of login.

Transaction tokens from DANA and OVO are stored in encrypted form on our servers and are never written to plain-text logs. Access to these records is restricted to our finance and compliance teams, and retention depends on local law.

Yes. Email [email protected] with the subject line 'Data Access Request' and include your registered account username. We will compile and send your full data record within seven business days where local law permits.

Submit a deletion request via live chat or email to [email protected]. Note that some records — particularly GoPay and QRIS transaction logs — must be retained for a compliance period that depends on local law before full deletion can proceed.

We share data only with payment processors required to settle your DANA, OVO, GoPay, or QRIS transactions, and with identity-verification services. We do not sell your information or pass it to any advertising network under any circumstances.

Open your browser settings and navigate to the cookies or privacy section to manage or block non-essential cookies. Disabling analytics cookies will not affect your ability to log in, deposit, or withdraw from your account.

Contact us immediately via live chat — available 24 hours a day — or email [email protected]. We will lock the account for review within one hour of your report and guide you through identity re-verification to restore secure access.