Reference

How mosatoto Handles Your Personal Data

Your account data stays with us — not sold, not shared without your knowledge. This policy explains exactly what we collect when you use mosatoto, how we store it, and what you can ask us to do with it.

No data sold to third partiesDANA, OVO, GoPay wallet data protectedAccount access secured with OTPData deletion requests acceptedIndonesia member support available
mosatoto How mosatoto Handles Your Personal Data
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

We apply SSL encryption to all data in transit between your device and our servers. Account login uses OTP verification tied to your registered mobile number, so even if someone has your password, they cannot access your account without the one-time code sent to your phone. We do not share your data with advertisers. Third-party integrations — such as the payment processors behind DANA, OVO, and GoPay — receive only the data necessary to complete a transaction, and those providers operate under their own data security standards.

SSL Encryption All data sent between your device and mosatoto travels over SSL. This covers login, deposit initiation and account updates — no plain-text transmission at any point.
OTP Account Access Every login session requires OTP confirmation to your registered mobile number. This single step blocks most unauthorised access attempts before they reach your account balance.
Retention and Deletion We keep your data while your account is active and for a period after closure as required by applicable rules. Once that window passes, your data is removed from live systems.
No Advertising Data Sales Your account details and activity logs are never passed to advertising networks or data brokers. We use your data to run your account — nothing more.
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to review, correct or delete your personal data, our member support team handles those requests directly. You do not need a legal letter — a clear message via live chat or email is enough to start the process. We aim to acknowledge data requests within a reasonable timeframe and will update you on progress.

Team online

Live Chat

Open the chat widget from your account page to submit a data access or deletion request. Our team will log it and reply with next steps.

Email Support

Send your request to our support address from the email registered on your account. Include your full name and account ID so we can locate your data quickly.

Account Settings

Some data preferences — like marketing communication opt-out — can be adjusted directly inside your account settings without contacting support.

Your Questions About Privacy Answered

These are the questions we hear most often about how mosatoto handles personal data. If your question is not covered here, reach us via live chat or email and we will respond with a direct answer.

We collect your name, email, mobile number and the e-wallet details you use for DANA, OVO or GoPay transactions. We do not collect more than what is needed to verify and run your account.

Yes. Send a request via live chat or email from your registered address. We will confirm your identity and provide a summary of the data linked to your account within a reasonable timeframe.

Contact our support team through live chat or email with your account ID and a clear deletion request. We process this after identity confirmation and inform you when it is complete.

We share only the minimum data needed with payment processors like DANA, OVO and GoPay to complete transactions. We do not sell your data or pass it to advertising networks.

We retain your data for a set period after account closure to meet applicable legal and operational requirements. Once that period ends, your data is removed from active systems.

You can update your communication preferences inside account settings, or ask our support team to remove you from marketing lists. The change takes effect on the next send cycle.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.