Data minimalism
We ask for only what's needed: name, email, phone, DANA/OVO/GoPay/QRIS ID. No unnecessary fields.
LEGAL REFERENCE
How we protect your data at pintoto
Your account details, payment history and personal information stay secure with us. We're transparent about what we collect, how we use it and who has access. This privacy...
Data encryptionPayment securityAccount privacyTransparent practicesIndonesia compliance
Our privacy commitment
We collect personal information only to run your account, process your DANA, OVO, GoPay and QRIS payments, and keep our platform secure where local law permits. We don't sell your data to third parties. Your email, phone number and transaction history are encrypted and stored on secured servers. We comply with data protection regulations in supported regions and keep your information confidential.
If you request deletion or correction, we respond within the timeframe required by local law. Our privacy team monitors access logs and updates security protocols quarterly.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
TRUST MARKERS
Why you can trust our privacy practices
Encrypted transactions
All DANA, OVO, GoPay and QRIS payments use SSL encryption. Your wallet details never appear in our logs unencrypted.
No third-party sales
We don't monetize your data by selling lists to advertisers or brokers. Your profile stays internal unless you explicitly consent.
Regular audits
Our security team runs quarterly penetration tests and compliance reviews. Results are logged and used to patch vulnerabilities.
Transparent cookies
We disclose all tracking pixels, session cookies and analytics tags in this policy. You can disable non-essential cookies in your...
Local compliance
We align with data protection standards in supported Indonesia regions and respond to regulatory inquiries within legal timeframes.
Account control
You own your data. Pause marketing emails, delete your account, or request a full data export anytime from settings.
SIDE BY SIDE
How our privacy policy compares
Payment transparency
Your transaction receipts show exactly what fee was deducted. No hidden charges in privacy fine print.
Consent-first marketing
We ask before sending promo emails. Unsubscribe links work instantly. No trapped consent boxes.
Accessible deletion
Close your account and request data wipe without calling support. It's one setting away in your dashboard.
Regional jurisdiction
For Indonesia players, disputes go to local arbitration. We don't force international jurisdiction clauses.
Breach notification
If your data is ever compromised, we email you within 24 hours with steps to secure your account and payment methods.
Child safety
We verify age at signup and block accounts from players under 18. Data is never shared with ad networks that target minors.
PLATFORM SNAPSHOT
Key protections we built in
01
Session security
Your account logs you out after 15 minutes of inactivity. This prevents unauthorized access if you leave your phone or computer unattended.
02
Two-factor authentication
Enable SMS or authenticator codes at login. Even if someone has your password, they can't access your account without the second code.
03
Payment method limits
Link only the DANA, OVO, GoPay or QRIS wallets you actively use. Remove payment methods you've stopped using from your account instantly.
04
Activity logs
View every login, payment and withdrawal in your account history. Flag suspicious activity and we'll freeze your account until resolved.
05
Withdrawal verification
When you request a payout, we send a confirmation code to your registered email before processing. You control where your winnings go.
06
Data retention policy
We keep your personal data for 5 years after account closure for legal compliance. After that, we permanently delete it from all systems.
Privacy questions answered
We store your wallet ID and last four digits encrypted. Your full card or account number is never logged by us. Payment processors handle the full transaction. We keep records for 5 years for tax and dispute resolution, then delete them permanently.
No, we don't sell or share your personal data. We work with payment processors and hosting providers who sign confidentiality agreements. Marketing partners never see your name or contact details. We only share data if a court orders it or local law requires it.
Go to account settings and select 'Close Account.' You'll be asked to confirm and choose whether to keep transaction history for tax records. Once confirmed, your profile is deactivated. Request permanent deletion via our privacy form and we'll purge it within 30 days.
Yes, we use session cookies to keep you logged in and analytics pixels to count page views. Essential cookies can't be disabled, but you can block marketing cookies in your browser settings. We list all third-party trackers in our full cookie disclosure.
Email us immediately with your account ID. We freeze your account, review login activity and reset your password. If fraudulent withdrawals happened, we investigate with payment processors. Notify your bank or e-wallet provider directly as well to freeze those accounts.
Yes, we update it when laws change or we add features. If changes affect your rights, we'll email you 30 days before they take effect. Continuing to use pintoto after the update means you accept the new terms.
Our data protection officer reviews all privacy inquiries. Email us with your concern and account ID. For unresolved issues in supported regions, you can escalate to local data protection authorities or arbitration in Indonesia.