LEGAL REFERENCE

Your Privacy on anitatoto, Plainly Written

This is our privacy policy, written the way we'd explain it to you over chat. We tell you what we collect when you open an account, why we...

Account dataCookiesIndonesiaPlain EnglishUpdated 2025
anitatoto Your Privacy on anitatoto, Plainly Written

Policy Posture and Indonesia Jurisdiction

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy Contact Paths

Privacy Inbox Email our privacy desk directly when you want...
Live Chat The chat widget in the lobby reaches the...
Postal Address For formal notices or regulator-led requests, we accept...
WHY THIS PLATFORM

How We Review This Policy

Editorial Owner

Our in-house compliance lead owns this document. Every edit is signed off before it goes live, so the wording you...

Quarterly Refresh

We re-read the policy every three months against current Indonesian data rules. If a clause drifts out of date, we...

Legal Counsel

External counsel familiar with Southeast-Asian e-commerce reviews substantive changes before publication. That second pair of eyes keeps our wording honest...

Plain-Language Check

We run every section through a plain-language pass so you don't need a law degree to follow it. If a...

Version Pinned

Each release is pinned with a date and a short note describing what moved. You can scroll the change log...

Reader Feedback

When you flag confusing wording through chat, we log it and the next quarterly refresh addresses it. The policy improves...

Consistency Across Our Policy Pages

Terms of Service
The terms page references this policy for any data clause, so definitions stay aligned and you never see two contradictory rules across the same account.
Cookie Notice
Our cookie page expands the brief mention here into category-level detail, listing each tag, its purpose, and the retention window we apply.
AML Statement
Where anti-money-laundering checks pull extra documents from you, the AML page mirrors the lawful-basis wording used in this privacy policy.
Account Closure
The closure flow page links back here for the deletion timetable, so the promise you read on closure matches what this policy commits to.
Complaints Path
Our complaints page uses the same contact addresses listed in the support block above, keeping one inbox per topic across the brand.
Data Requests
The subject-access form reuses the identifiers defined here, so a request you file is processed against the same record set described in this policy.
Change Log
Every policy page on anitatoto carries a dated change log in the same format, so you can audit revisions without learning a new layout each visit.
SERVICE CONTEXT

What This Policy Page Shows You

01
Scope Block The opening block tells you who the policy covers and which Indonesia-facing services sit inside its scope, so you know up front whether your account is in or out.
02
Data Categories A short list breaks down the categories of information we hold — identity, contact, transaction reference, device signals — without burying them in legal sub-clauses.
03
Retention Windows Each data class carries a retention window in months or years. When the clock runs out, the record is deleted or anonymised according to the schedule we publish here.
04
Your Rights Panel A dedicated panel summarises your rights — access, correction, deletion, portability — and points to the exact form or inbox that triggers each one without delay.
05
Third-Party List We name the categories of partners who touch your data, from payment processors to game studios, so you can see the chain instead of guessing at it.
06
Change Log Footer At the foot of the page, the change log records every revision date and a one-line summary, giving you a quick way to spot what's new since your last visit.

Privacy Policy Questions

We take the basics: name, email, phone, date of birth, and the e-wallet reference you'll use for DANA, OVO, GoPay or QRIS. Session and device signals are captured automatically to keep the account secure.

No. We don't sell account data. Marketing partners receive aggregated, non-identifying counts only, and any tool that touches identifiable data does so under a written processing contract with limited, documented purposes.

Retention runs from account closure plus the period local financial and tax rules require, usually five to seven years for transaction logs. Marketing preferences clear sooner once you withdraw consent through your account settings.

Yes. Send the request from your registered email or through live chat. We confirm identity, settle any pending transactions, and complete deletion or anonymisation inside the statutory window applicable to your region.

Essential cookies keep you logged in and route payments. Analytics and preference cookies only fire after you accept the banner. You can change your choice any time from the cookie panel in the footer.

Records sit on servers in jurisdictions that meet the security standards we contractually require. Cross-border transfers, where they happen, rely on standard clauses and are limited to processors named in our third-party list.

Material changes get a banner on the lobby and an email to your registered address. Smaller edits land in the dated change log at the foot of this page so you can review them at leisure.