Reference

How koitito Handles Your Personal Information

Your account details, payment records, and browsing activity on koitito are collected for one purpose: to keep your experience running smoothly and securely.

DANA, OVO, GoPay payment dataAccount security & encryptionYour right to access or delete dataIndonesia-region data handlingContact us anytime

Explore the Lobby Read FAQ

DATA SECURITY PRACTICES

How We Protect and Manage Your Information

We apply industry-standard security controls across every layer of your account — from the moment you log in to the point your DANA or OVO transaction clears. Here is how the key areas work in practice.

Encryption at Every Step

All data transmitted between your device and our servers is encrypted via SSL. Your payment credentials for DANA, OVO, and GoPay are never stored in plain text on our systems.

Cookie Controls

You can review and adjust cookie preferences through your browser settings at any time. We use strictly necessary cookies by default; analytics cookies are optional and can be declined.

Account Access Verification

Every login triggers an OTP check sent to your registered contact. If we detect a new device or location, an additional verification step is required before access is granted.

Data Retention and Deletion

Active account data is held for as long as regulations require. Once you request closure, we process deletion of non-mandatory personal records and confirm completion via your registered email.

What We Collect and Why We Hold It

koitito Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

When you open an account, we collect the details you provide during registration — your name, email address, and the e-wallet credentials you link for deposits via DANA, OVO, or GoPay. Transaction records tied to those wallets are stored to process your deposits and withdrawals and

1
to satisfy fraud-prevention requirements. We also collect device and session data — your browser type, IP address, and the pages you visit — to detect unusual access patterns and keep your account protected. Cookies help us remember your session preferences so you do not need to
2
re-enter details every visit. We do not sell your personal data to third parties. Data is retained for as long as your account remains active and for a further period required by applicable financial regulations. If you close your account, you may request deletion of non-mandatory
3
records through our support channel. Availability of services depends on local law and eligible regions in Indonesia.

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

Questions about your personal data, requests to access your records, or concerns about how we process your information can all be directed to our support team. We aim to respond to privacy-related requests within the timeframe set by applicable regulations. Players in Batam and across Indonesia can reach us through any of the channels below.

Live Chat Open the chat widget inside your account dashboard to speak with our support team directly about any privacy concern or data access request.

Email Support Send a detailed request to our dedicated privacy address. Include your registered email and account ID so we can locate your records quickly.

Help Centre Our help centre covers common data questions — how to download your account history, how to update payment details, and how to submit a formal deletion request.

Common Questions About Your Privacy Rights

Here are the questions we hear most often about how we handle personal data. If yours is not covered here, reach out through live chat or email.

We collect your name, email, and contact details at registration. When you link DANA, OVO, or GoPay, we record the transaction reference needed to process your deposits and withdrawals.

Yes. Submit a data access request through live chat or email with your account ID. We will compile your records and send them to your registered email within the regulatory timeframe.

Log in, go to account settings, and edit your contact details directly. For payment wallet updates — swapping your linked OVO or DANA account — contact support to complete identity verification first.

You can request deletion of non-mandatory personal data when you close your account. Mandatory records tied to financial transactions must be retained for the period required by applicable regulations.

We do not sell your data. We share only what is necessary with payment processors like DANA, OVO, and GoPay to complete your transactions, and with fraud-prevention services where required.

Strictly necessary cookies keep your session active. Optional analytics cookies can be declined through your browser settings at any time without affecting your ability to access your account.

Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.

InfoLegal InfoKoitito Banking Appkoitito App

How koitito Handles Your Personal Information

How We Protect and Manage Your Information

Encryption at Every Step

Cookie Controls

Account Access Verification

Data Retention and Deletion

How to Contact Us About Your Data

Common Questions About Your Privacy Rights

01 What personal data does koitito collect when I register?

02 Can I request a copy of my personal data?

03 How do I update or correct information on my account?

04 Can I ask koitito to delete my data?

05 Does koitito share my data with third parties?

06 How are cookies used and can I turn them off?

Privacy Policy

Related pages

Related pages