Reference

How jeptoto Protects Your Personal Data

Your personal data — from account registration details to payment records via DANA, OVO, GoPay and QRIS — is handled under a clear, documented privacy framework that we…

Encrypted account storageDANA, OVO, GoPay & QRIS transaction privacyData access on requestNo third-party data salesJakarta & Surabaya region coverage

Explore the Lobby Read FAQ

What This Privacy Policy Covers

jeptoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

This policy applies to every piece of information you share when you open an account on jeptoto.xyz, make a deposit or withdrawal, or contact our support team. We record transaction metadata — such as the payment rail you used (DANA, OVO, GoPay or QRIS), the timestamp

1
and the amount — solely to verify and reconcile your account activity. We do not store your full payment credentials on our servers; tokenised references are held instead. Access to and use of this platform depends on local law. Data we collect falls into three categories:
2
identity data you provide at registration, transactional data generated by account activity and technical data such as device type and session logs. We retain each category only as long as operationally or legally required.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

PRIVACY CONTACT

Reach Us About Your Privacy Rights

If you want to access, correct or delete data we hold about you, our privacy team is reachable through three direct channels.

DATA HANDLING STANDARDS

Six Ways We Safeguard Your Information

We have structured our data practices around six concrete commitments that cover everything from how cookies work on jeptoto.xyz to how long we keep payment logs.

Encryption at Rest and in Transit

All account data and payment records — including DANA and OVO transaction references — are encrypted using AES-256 at rest and TLS 1.3 in transit. No plaintext personal data is written to any unencrypted storage layer.

Cookie Controls You Own

The cookie banner on jeptoto.xyz lets you accept only functional cookies and reject analytics or marketing cookies entirely. Your choice is saved to your session and respected on every return visit without re-prompting unnecessarily.

Payment Data Tokenisation

When you transact via GoPay or QRIS, we store only a tokenised reference, never the full account number or wallet credential. Our payment processor handles authentication; we receive only a confirmation token tied to your jeptoto account ID.

Retention Schedules by Data Type

Identity data is held for the life of your account plus a post-closure window required by applicable rules. Transaction logs are kept for the period mandated by financial record-keeping requirements, after which they are permanently deleted on a scheduled basis.

Third-Party Data Sharing Limits

We share data only with service providers directly required to operate your account — payment processors, fraud-detection services and our hosting infrastructure. We do not sell, rent or trade your personal data to advertisers or data brokers under any circumstance.

Your Right to Request Account Data

You can request a full export of the data we hold on you at any time through Account › Privacy or by emailing our privacy team. Exports are delivered within 14 business days in a structured, machine-readable format.

Answers to Common Privacy Questions

The questions below reflect what people in Indonesia most commonly ask us about their data rights, how we handle payment information and what happens when they close an account. If your question is not covered here, our live chat team — available around the clock — can give you a direct answer tied to your specific account situation.

At registration we collect your name, date of birth, email address and the payment method you link first — such as DANA or OVO. We do not collect more than we need to verify your identity and process transactions accurately.

No. When you connect a DANA or GoPay wallet, authentication happens on the provider's own interface. We receive only a tokenised reference, so your wallet login details are never held on our servers at any point.

We retain transaction logs — including QRIS and OVO payment records — for the period required by applicable financial record-keeping rules. Once that period ends, records are deleted on a scheduled cycle and cannot be recovered.

Yes. Log in and go to Account › Privacy to submit a data-export request, or email our privacy team directly. We deliver a structured data file within 14 business days of confirming your identity.

Submit a deletion request through Account › Privacy or via email. We process it within 14 business days. Some transaction records may be retained for the period mandated by applicable rules even after deletion of your account profile.

We do not sell or share your data with advertisers or data brokers. Data is shared only with the payment processors, fraud-detection services and infrastructure providers that are necessary to run your account and process payments.

Contact us immediately through live chat on jeptoto.xyz — available 24 hours a day — and request an account lock. Our team will investigate, reset access credentials and confirm with you before restoring normal account activity.

How jeptoto Protects Your Personal Data

Reach Us About Your Privacy Rights

Six Ways We Safeguard Your Information

Encryption at Rest and in Transit

Cookie Controls You Own

Payment Data Tokenisation

Retention Schedules by Data Type

Third-Party Data Sharing Limits

Your Right to Request Account Data

Answers to Common Privacy Questions

01 What personal data does jeptoto collect when I register?

02 Does jeptoto store my DANA or GoPay wallet credentials?

03 How long does jeptoto keep my transaction history?

04 Can I request a copy of all data jeptoto holds about me?

05 How do I ask jeptoto to delete my account data?

06 Does jeptoto share my data with advertisers or third parties?

07 What should I do if I think someone has accessed my account without permission?

Related Pages