Reference

What This Privacy Policy Covers

This Privacy Policy explains what we collect when you open an account, confirm a payment with DANA, OVO, GoPay, or QRIS, and use the site from an Android…

Account data onlyPayment referencesCookie controlLocal-law checks

Explore Lobby Read FAQ

How We Handle Your Data

estoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

When you use estoto, we collect only the details that let us verify your account, keep your session stable, and match wallet activity to the right record. That can include your name, contact number or email, device signals, browser cookies, login times, and the reference data

1
attached to DANA, OVO, GoPay, or QRIS. We do not need your full wallet history to do that job. If we must keep a record longer because local law, tax rules, dispute handling, or fraud checks require it, we keep it only for that reason. Where
2
the law allows a correction, access request, or deletion request, we check it after confirming that you control the account. Any request that falls outside local law or the country where the service can be used will be declined politely.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

CONTACT ROUTES

Where To Reach Our Team

A clear contact path matters when you want a privacy change, not a sales reply.

DATA CONTROLS

Controls We Use For Data Care

We keep privacy work tied to the account itself, so each request has a clear owner and a clear reason.

Data minimisation

We collect the smallest set that still lets us verify your account, match DANA, OVO, GoPay, or QRIS entries, and keep your session stable. Extra details stay out unless you send them in a support request.

Cookies

Browser cookies help us remember language choice, login state, and device type. If you clear them, you may need to sign in again, but your privacy request history still stays linked to the account record.

Account security

Password protection and account-matching checks keep your data from being edited by the wrong person. If we add extra verification for a request, we ask for it before any sensitive change is processed.

Retention

We keep account records while your profile is active and for a limited period after that when local law, dispute handling, or fraud prevention requires it. After that, the relevant data is removed or anonymised.

Change requests

If your name, contact detail, or payment reference needs correction, send the request from the registered email or through chat. We compare it with your file first, then update only the fields that need changing.

Access and deletion

You can ask what we hold or request removal where local law allows it. We may refuse a request that conflicts with a legal duty or an active dispute, and we will explain why.

Questions About Privacy And Data

These answers focus on how your account data is handled day to day. If you change devices, use a new wallet route, or ask for a correction, we look at the same record first and then follow the local rule that applies. When a request touches deletion or access, the legal limit matters as much as the data itself.

We usually keep your contact detail, login record, device signals, and any payment reference needed to match the account. If a field is not needed for verification or support, we do not ask for it.

We keep the reference data needed to reconcile the wallet action with your account, such as status and time. We do not need your full wallet history, and we do not store more than the job requires.

Cookies help us remember that you are signed in, what language or device mode you used last, and whether the session is still active. Clearing them is fine, but you may need to sign in again.

Send the request from the registered email, live chat, or the account form, then tell us exactly which field is wrong. We verify ownership first, so the change lands on the correct record.

We keep active-account data while your profile is open and retain only what is required after that for legal, dispute, or fraud reasons. Once the retention period ends, we remove or anonymise the relevant record.

Yes, where local law allows it. After we confirm the account, we can tell you what we hold and check a deletion request, unless another legal duty or an active dispute requires us to keep it.

Use live chat or email us from the address linked to your account. We will point you to the latest version, explain what changed, and tell you whether the new terms affect your record.

What This Privacy Policy Covers

Where To Reach Our Team

Controls We Use For Data Care

Data minimisation

Cookies

Account security

Retention

Change requests

Access and deletion

Questions About Privacy And Data

01 What data do you collect when I open an account?

02 Do you store my DANA, OVO, GoPay, or QRIS details?

03 Why do you use cookies on my device?

04 How can I ask for a correction?

05 How long do you keep my records?

06 Can I ask to see or delete my data?

07 Who do I contact if this policy changes?

Related Pages