Your Privacy Matters to Us
We've built polototo around your trust. This privacy policy shows exactly how we handle your account details, payment information and personal data across every part of our platform...
How We Protect Your Information
polototo operates under the laws and regulations that apply in supported regions where we offer our platform. We collect personal information — your name, email, phone number and account preferences — only to set up your account, process your DANA, OVO, GoPay and QRIS transactions, and keep your lobby experience secure. We use encryption and industry-standard security protocols to protect your data
from unauthorised access. We never sell your personal information to third parties. Your payment details are handled by certified payment processors, and we retain transaction records only as long as local law requires.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Questions About Your Privacy
Email Support
Reach our privacy team at [email protected] with any questions about how we handle your data, account security or personal information requests.
Live Chat
Chat with our support agents directly from your account dashboard. They can walk you through our privacy practices and help with data access requests.
Account Settings
Manage your privacy preferences, communication choices and data visibility directly in your account settings. Update or delete information anytime.
Why Your Data Is Safe With Us
Encryption Standard
All data transmitted between your device and our servers uses SSL/TLS encryption, the same standard banks use to protect financial...
Payment Processor Certified
Your DANA, OVO, GoPay and QRIS transactions flow through PCI-DSS certified payment gateways that meet international security benchmarks.
Regular Security Audits
We conduct third-party security assessments annually to identify and fix vulnerabilities before they affect your account or payment data.
Limited Data Access
Only authorised staff members with a legitimate business need can access your personal information. All access is logged and monitored.
Data Retention Policy
We keep your account data only as long as necessary to provide our service and comply with local regulations in...
Breach Response Plan
If a security incident occurs, we notify affected users and relevant authorities within the timeframe required by local law.