Reference

How We Handle Your Account Information

When you open an account at pohon toto and deposit through DANA, OVO, GoPay or QRIS, we collect personal details to verify your identity and process withdrawals.

Account verification detailsPayment transaction recordsDevice and login activity
pohon toto How We Handle Your Account Information
REACH US DIRECTLY

Privacy Questions and Data Requests

Team online

Email Support

Send privacy concerns or data-access requests to our support team at [email protected]. Requests are reviewed within 48 hours during weekdays. Include your account username and the specific data you want to review.

Live Chat

Chat with our support staff Monday to Friday, 8am–10pm Jakarta time, via the help widget on your account dashboard. Use this channel for urgent privacy or account-access questions.

Account Settings

Update your personal information, phone number and email directly in your account settings under Profile. Changes take effect immediately and are logged for security.

HOW WE SECURE YOU

Data Security and Account Protection

Encryption

All communication between your device and pohon toto runs over TLS encryption.

Login Security

We track unusual login attempts from new devices or locations.

Withdrawal Verification

When you request a payout, we match your account details against our records and require the withdrawal destination to match…

Cookie and Tracking

We use first-party cookies to maintain your session and remember your preferences.

Data Retention

Active account data (username, email, preferences) stays as long as your account exists.

Access and Correction

You can request a full copy of your personal data by emailing [email protected] with your account username.

Privacy Policy Frequently Asked

We record your payment method, the amount transferred, the transaction ID from the payment provider, and the timestamp. Your bank account number is not stored — the payment provider handles that directly. We keep these records for seven years for regulatory compliance.

You can close your account anytime through your settings. We soft-delete your profile data after 90 days and remove it permanently after that period. Transaction records are retained for seven years per financial law, but your identity is de-linked from them.

We do not sell or share your personal information for marketing. We share payment details only with the payment provider (DANA, OVO, GoPay or QRIS operator) to process your transaction. Where local law requires, we may comply with law enforcement requests.

Login timestamps and device IDs are logged for 90 days for security audits. This helps us detect unauthorised access. After 90 days, logs are archived and purged. You can view recent login activity in your account security settings.

Inactive accounts remain open unless you close them yourself. Your data is not deleted due to inactivity. If you wish to delete your account, submit a request via [email protected] with your username, and we will begin the 90-day soft-delete process.

DANA, OVO, GoPay and QRIS transfers are processed by those providers' secure systems — we do not store full payment details. All data in transit is encrypted. We do not request passwords, PINs or OTP codes via email or chat.

Yes. Email [email protected] with your account username and ask for a data export. Include the date range if you want specific transaction records. We will send an encrypted file within 48 business hours.