Reference

Your Privacy Rules at buntoto

We keep your Privacy Policy tied to the steps you actually use: account opening, login checks, support chats, and payment records.

DANA, OVO, GoPay, QRISLogin and device logsLocal-law limits
buntoto Your Privacy Rules at buntoto
CONTACT PATHS

How To Reach Us About Privacy

If you want to ask what we hold, fix a detail, or close a request, we keep three contact paths open: WhatsApp, live chat, and email.

WhatsApp Message us from the number shown in the contact panel and include your account name, mobile number, and the change you want. We use the chat thread to match the request and reply during 08:00-22:00 WIB.
Live Chat Open live chat from desktop or mobile browser when you need a quick privacy check. Tell us which record you want changed, and we will ask for matching details before we make any update.
Email Use email for copy requests, correction requests, or questions that need a written trail. Send the same contact details used on your account, and we will answer from our support inbox within the stated hours.
DATA SAFEGUARDS

How We Protect Your Data

We store only the details needed to run account access, answer your request, and match payment records.

Data collection

We collect the name, contact method, device data, and transaction references needed to verify your account. If you use DANA, OVO, GoPay, or QRIS, we keep only the references needed to match the payment trail.

Cookies

Cookies and local storage help us remember your session, language, and security state when you move between mobile and desktop. You can clear browser data at any time, but you may need to log in again.

Account security

We check sign-in attempts, IP hints, and device changes to spot account sharing or a stolen session. If a login looks unusual, we can ask for a fresh verification step before the account continues.

Retention

We keep records only as long as we need them for support, dispute handling, audit trails, and payment matching. After that window, we delete or anonymise the data unless a legal duty requires longer storage.

Access and change requests

You can ask for a copy, correction, or deletion of account data by contacting us from the email, number, or chat link on file. We verify the request first, then act where local law permits.

Contact and sharing

Only staff who need the data to do their job can see it, and payment partners receive just enough detail to process a DANA, OVO, GoPay, or QRIS request. We do not share beyond that need unless required.

Privacy Questions You May Ask

These are the questions we hear most when you want to know what we collect, how we use it, and how you can ask for changes. Each answer stays tied to your account, your device, and the payment trail from DANA, OVO, GoPay, or QRIS. If the answer depends on local law, we say so clearly, and the service remains available only where local law permits.

We collect the contact details you enter, the device and browser signals needed to secure access, and the payment references that match DANA, OVO, GoPay, or QRIS activity. We do not ask for more than the process needs.

Yes. Send the correction request through your registered WhatsApp, chat, or email path, and we will compare it with the account details on file before updating anything. Some records stay in place when local law requires it.

Yes. Cookies and local storage help keep your session, language, and security state when you switch between Android, iPhone, and desktop browsers. If you clear them, you may need to sign in again.

We keep data only for the time needed to run the account, answer requests, settle payment records, and handle disputes. After that, we remove or anonymise it unless a legal duty says otherwise.

Only trained staff with a job reason can view your record, and payment partners see just enough detail to process the request. We do not pass your data to unrelated parties.

Yes. Access, storage, and service availability depend on local law, and the service is available only where local law permits. If a rule changes, we follow the local requirement for your account.