Terms of Service
Account-conduct rules live there; data-handling rules live here. Where the two touch — like account closure — both pages cite the same retention window.
This is the yatogel bandar privacy policy — the rules we follow once you open an account with us in Indonesia. We've written it in plain en-ID English...
Our privacy practices apply where local law permits and across supported regions in Indonesia. We collect the minimum needed to run your account: identity fields at registration, transaction logs from your DANA, OVO, GoPay or QRIS top-ups, session metadata for fraud checks, and the support tickets you file with us. We process this under contractual necessity and legitimate-interest grounds. Data is stored
on encrypted servers, segmented by purpose, and retained only for the periods set out in this policy. You can request access, correction or erasure of your record by writing to our privacy desk, and we will respond inside the statutory window that applies to your region.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
If a clause in this policy is unclear or you want to exercise a data right, three contact lanes are open. Each one is staffed by a privacy-trained agent — not the...
This policy is reviewed by people, not just templated. Six editorial signals shape every revision we publish.
Our counsel re-reads the policy every quarter against Indonesia's current data protection statute, marking any clause that needs tightening before...
Every edit, however small, is stamped with a version number and date at the foot of this page. Older versions...
A single accountable officer signs off on each release. Their role and contact route are listed in the contact section...
Our storage stack is audited by an external firm yearly. Findings that touch privacy controls — encryption, access logs, retention...
We avoid legalese where we can. If a clause needs technical language, we add a short en-ID gloss underneath so...
Confused by a paragraph? Tell the privacy desk. Recurring questions feed the next rewrite, and we credit the change in...
This privacy policy sits alongside our other legal pages. Here's how we keep them aligned so you don't get conflicting answers depending on which page you land on.
Account-conduct rules live there; data-handling rules live here. Where the two touch — like account closure — both pages cite the same retention window.
Browser-side tracking detail sits in the cookie notice. This page covers server-side records only, and links across when a topic spans both.
Anti-money-laundering checks reference the same identity fields described in section two of this policy, never a separate undisclosed dataset.
Document upload steps mirror the retention periods stated here. If we change one, we change the other in the same release.
Transaction records cited in refund handling are the same DANA, OVO, GoPay and QRIS logs covered by this privacy policy's retention clause.
Opt-in scope on the marketing page matches the consent toggles described here. Withdrawing consent in one place withdraws it everywhere.
Privacy complaints follow the same escalation ladder as service complaints, with the data officer added as a final internal step before regulator referral.
Six structural elements shape how this privacy page is laid out so you can find the clause you need without scrolling the whole document.
Each policy section has a stable URL anchor. Bookmark the retention clause or the contact clause directly and it will still resolve after we publish the next revision.
Terms like controller, processor and legitimate interest are defined in-line the first time they appear, not parked in a glossary you have to hunt for separately.
Where Indonesia rules differ from our default posture, a short callout flags the variance so you know which clause governs your account specifically.
A single table lists every data category, the lawful basis, and the exact retention period. No category is described in prose without also appearing in the table.
Clauses edited in the last ninety days carry a small marker beside the heading so returning account holders can see what's new without re-reading everything.
The page prints cleanly to PDF for your records. Headings, version number and effective date carry across so the saved copy stays self-contained.