Reference

How tupiahtoto Handles Your Personal Data

This page covers what data we collect when you open an account, how we use it, and what rights you hold over it. Everything here applies to your account activity on tupiahtoto, including wallet interactions via DANA, OVO, and GoPay, where access is permitted…

Account data protectionDANA, OVO, GoPay transaction privacyYour right to access your dataClear data retention rulesDirect contact for data requests
tupiahtoto How tupiahtoto Handles Your Personal Data
REACH OUR TEAM

Contact Us About Your Privacy

If you want to review, update, or request deletion of your personal data, our support team handles these requests directly. Reach us through any of the channels below and include your registered account email so we can locate your record without delay.

Team online

Live Chat

Open the chat widget from your account dashboard at any time. Identify yourself with your registered email and describe your data request clearly.

Email Support

Send your data access or deletion request to our support address listed in your account settings. We aim to respond within the timeframe required by applicable law.

Account Help Centre

Log in to your account and navigate to Help to find the data request form. It guides you through the steps to submit a formal privacy inquiry.

HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We apply layered security across your account. Data is encrypted in transit and at rest, and access to personal records is restricted to staff who need it to operate your account or resolve a support request. Your wallet data — whether linked to DANA, OVO, or GoPay — is handled through tokenised references only.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to understand how pages load on your device. You can adjust cookie preferences through your browser settings at any time.

Data Retention

We keep your account data for as long as your account is active and for a period after closure as required by applicable law. After that period, personal data is deleted or anonymised.

Account Security Practices

Every login triggers a verification step. If we detect an unusual device or location, we send a one-time code to your registered contact before granting access to your account.

Requesting Changes

You can request a correction to any inaccurate data we hold. Submit the request via live chat or email with your account ID and we will update your record after verification.

Common Questions About Your Privacy Rights

These are the questions we hear most often about how your data is managed on tupiahtoto. If your question is not here, reach our support team through live chat or your account help centre.

We collect your name, contact details, and the payment method you register — such as DANA, OVO, or GoPay. We also log device and session data to secure your account and prevent unauthorised access.

No. We store only transaction references used to match payments to your account. Your wallet PIN and full account credentials are never held on our side.

Yes. Submit a data access request through live chat or the account help centre. Include your registered email so we can locate your record and respond within the timeframe required by applicable law.

We retain account data for a defined period after closure as required under applicable law. Once that period ends, your personal data is deleted or anonymised from our systems.

We share data only with payment processors and identity verification partners, and only for the specific purpose authorised. Those partners are bound by confidentiality agreements and may not use your data for other purposes.

Send a correction or deletion request via live chat or email support, both accessible from your account. We will verify your identity first, then update or remove the relevant data as applicable under local law.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.