kotatoge Privacy Policy: How We Handle Your Account Data
This policy explains what data kotatoge collects when you open and use your account, how that data is stored, and what choices you have over it. Availability of this service depends on local law and is accessible where local law permits.
Account data handled with care
GoPay, ShopeePay, Bank Transfer session context
Your rights explained clearly
Contact route always open
DATA WE COLLECT
What kotatoge Collects and Why It Matters
When you create an account on kotatoge, we collect the registration details you submit — your name, email address, and the contact credentials you provide. When you carry out a transaction using GoPay, ShopeePay, or Bank Transfer, we record the transaction reference, the amount, the method selected, and the timestamp. We do not store your full e-wallet credentials or banking PIN; those stay within your own payment provider. We also collect standard session data — the device type, browser session identifiers, and IP address — so that your account loads correctly and so we can detect irregular access patterns. Cookie data is collected for session continuity; you can review and adjust cookie preferences through the settings shown in your browser. We keep account data for as long as your account remains active or as long as required under the applicable laws of the region where you access this service. If you close your account, we retain only the records required by applicable legal obligations. Any data shared with payment processors — such as the reference identifiers passed when you use Bank Transfer — is governed by that processor's own policy as well as ours.
GoPay
Transaction reference and session context only — no wallet credentials stored on our side.
ShopeePay
Payment reference captured at the point of transaction; your ShopeePay credentials remain with ShopeePay.
Bank Transfer
Transfer reference number and account alias recorded for transaction matching; full account numbers are not retained.
POLICY SCOPE
Where This Policy Applies and What It Covers
Not every part of your account experience falls under exactly the same data rules. Some areas are entirely within our control; others involve third-party services that operate under their own separate policies. Understanding that boundary helps you know where to direct any question about your data.
Account Access
Your login session, account profile, and wallet history are fully within scope. We control how this data is stored, who can access it internally, and how long it is retained. You can request a review of this data at any time through the support route listed on this page.
Transaction Records
Records of deposits and withdrawals processed through GoPay, ShopeePay, and Bank Transfer are within scope. We hold transaction references and timestamps. The payment processor itself holds the deeper financial record, which is governed by its own policy.
Site Content and Cookies
Cookie data collected for session continuity and site performance is within scope. You can manage cookie settings in your browser. Analytical data that identifies individual users is not shared externally without a legal obligation to do so.
Third-Party Services
Links to external sites or third-party payment gateways fall outside the scope of this policy once you leave our domain. We do not control how those parties handle your data. Check the privacy policy of each third-party service you engage with separately.
YOUR DATA RIGHTS
Practical Steps to Manage Your Account Data
Your account on kotatoge gives you several concrete actions over the data we hold. You can review the personal details attached to your profile by opening the account settings page after login — the fields shown there reflect what we currently hold. If any detail is incorrect, you can submit a correction request directly through our support channel; our team will verify and update the record. For questions about what specific data we hold on you, a written request sent to our support email prompts a formal response. Where local law in your eligible region grants a right to deletion, you may request that we remove personal data no longer required for account operation or legal compliance. We aim to respond to all data-related requests within the period required under applicable law. Your right to raise a concern also extends to the data processor level — if you believe a payment reference has been mishandled, the support path below is the right starting point.
Review Your Records
Log in and open the account settings page. The personal data fields displayed there show exactly what is stored against your account at that moment.
Correct Account Details
Submit a correction request via the support channel with the field name and the correct value. Our team verifies and applies the change after confirmation.
Request Data Information
Send a written request to our support email asking what data we hold. We respond formally within the period required by applicable law in your region.
Raise a Concern or Deletion Request
Where local law permits, you may request deletion of data no longer needed for legal or account purposes. Start the process through the support contact listed in the section below.
CONTACT US
How to Reach Us About This Policy
If you have a question about this privacy policy, want to submit a data request, or need to flag a concern about how your account data has been handled, the routes below are open. Each channel is monitored by the same team that handles account and payment support, so your inquiry reaches the right person without needing to re-explain your situation.
Support Email
Send a written data inquiry or correction request to our support email. Include your account username and the specific data point you are asking about so we can locate your record quickly.
Live Chat
Open the live chat window from any page on the site. For privacy-related questions, state 'data request' at the start of the chat so the agent can route it to the correct handling step.
Account Settings
Some changes — such as updating your registered email or reviewing stored profile fields — can be started directly from the account settings page after login without contacting support first.
HOW WE OPERATE
Data Handling Practices You Can Check
The way kotatoge manages your data is built around account accountability rather than broad claims. Each practice below maps to a step you can verify or initiate yourself without needing special access.
Cookie Controls
Session cookies are used to keep your account active across page loads. Preference cookies remember display settings. You can clear or block cookies through your browser settings at any time; doing so may require you to log in again on your next visit.
Account Security Practice
We do not store payment credentials for GoPay, ShopeePay, or Bank Transfer on our servers. Transaction references are kept for record-matching only. If you notice an unrecognised session in your account activity, contact support through the live chat route.
Data Retention
Active account data is retained while your account remains open. Once you request closure, we keep only the records required by applicable legal obligations in the region where you access the service. The retention period is not extended beyond that requirement.
Policy Updates
When this policy changes in a way that affects your rights or how your data is used, the updated version is published at this URL. The current policy is always the version shown here. We do not notify by push alone — the page is the authoritative record.
POLICY QUESTIONS
Frequently Asked Questions About This Privacy Policy
These questions reflect what account holders in Indonesia ask most often about how their data is handled on kotatoge. If your question is not listed here, use the support email or live chat route described in the contact section above.
What personal data does kotatoge collect when I open an account?
We collect the registration details you submit — name, email, and contact credentials. Session data such as device type, browser session identifiers, and IP address is also recorded for account security. We do not collect payment credentials; those stay with your payment provider.
Does kotatoge store my GoPay or ShopeePay account details?
No. When you transact using GoPay or ShopeePay, we record only the transaction reference, amount, and timestamp. Your e-wallet login details and PIN remain entirely within GoPay or ShopeePay and are not accessible to us at any point.
How long does kotatoge keep my account data after I close my account?
After account closure, we retain only the records required by applicable law in the region where you accessed the service. Data no longer required by those obligations is removed. You can request confirmation of what is being retained by contacting our support team.
How do I request a correction to the personal details stored on my account?
Log in and check the account settings page first — some fields can be edited directly. For fields that require verification before a change, submit a correction request via the support email or live chat, naming the field and the correct value you want applied.
Can I request that kotatoge delete my personal data?
Where local law in your eligible region grants a right to deletion, you may submit a request through our support channel. We process deletion requests by removing personal data no longer needed for account operation or legal compliance. Response timing follows applicable legal requirements.
How will I know if this privacy policy changes?
The current version of this policy is always published at this URL. When material changes are made — particularly changes that affect your rights or data handling — the updated page replaces the previous version here. Check this page periodically if you want to track changes.