Reference

How kursitoto Handles Your Personal Data

Q: Can I request a copy of all the data kursitoto holds about me?

Yes. Email privacy@kursitoto.xyz with your registered email and account ID in the subject line. We will compile and send a full data export within 72 hours of receiving your verified request, delivered to your registered email address.

Q: How do I ask kursitoto to delete my personal data?

Send a deletion request to privacy@kursitoto.xyz or use the live chat 'Privacy & Data' topic. We process deletion requests within 14 business days. Note that some financial transaction records must be kept for the legally required retention period, depending on local law.

At kursitoto, your personal data belongs to you — we collect only what we need to operate your account, process withdrawals through DANA, OVO, GoPay, and QRIS, and…

Data collected at account creationDANA, OVO, GoPay & QRIS transaction recordsCookie & device session dataRetention periods clearly statedYour right to request deletion

Explore Lobby Read FAQ

What Data We Collect and Why

kursitoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

When you open an account with us, we record your name, email address, and the payment method you choose — whether that is DANA, OVO, GoPay, or QRIS. Transaction metadata, such as deposit timestamps and withdrawal reference numbers, is stored so we can resolve any payment

1
queries you raise with our support team. We also collect browser and device identifiers during your session to detect unusual login activity and protect your account from unauthorised access. Your data is stored on servers located within the Asia-Pacific region, and access is restricted to staff
2
who need it to fulfil your request. All data handling depends on local law and applies where local law permits.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

PRIVACY CONTACT CHANNELS

How to Reach Our Privacy Team

If you have a question about your data, want to correct an entry, or need to request removal of your account records, our privacy support team is available around the clock — 24 hours a day, 7 days a week. You can reach us through live chat on the kursitoto website, by email at [email protected], or via WhatsApp for faster responses during peak hours in Semarang and other Indonesian cities.

Team online

Live Chat

Open the chat window on kursitoto.xyz and select 'Privacy & Data' from the topic menu. A dedicated agent will respond within two minutes during normal hours and within five minutes at peak times.

Email Support

Send your data request to [email protected] with your registered email and account ID in the subject line. We aim to acknowledge all privacy emails within 24 hours and resolve within 72 hours.

Message our privacy line via WhatsApp for step-by-step help correcting account details or submitting a deletion request. Available 08:00–24:00 WIB daily, including public holidays.

DATA HANDLING PRACTICES

Six Ways We Protect Your Privacy

Privacy protection at kursitoto is built into every stage of your account lifecycle — from the moment you register through to the point you request your data be removed.

Encrypted Data Storage

All account data — including your payment identifiers for DANA, OVO, GoPay, and QRIS — is stored using AES-256 encryption at rest. Only authorised systems and staff with a verified business need can access the raw records.

Cookie Policy Transparency

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage or revoke cookie consent at any time through the preference centre linked in the footer.

Account Security Steps

Two-factor authentication is available on your account settings page. We strongly recommend enabling it, especially if you regularly withdraw funds via OVO or GoPay, as it adds a second verification layer against unauthorised access.

Data Retention Schedule

Active account data is retained for as long as your account remains open. After account closure, transaction records are held for a maximum of five years as required by applicable financial regulations, then permanently deleted.

Third-Party Data Sharing

We share minimal data with payment processors — only what is necessary to complete your QRIS or DANA transaction. We do not sell personal data to advertisers or third-party marketing platforms under any circumstances.

Your Right to Access and Correct

You can request a full copy of the personal data we hold about you at any time by contacting [email protected]. Correction requests are processed within 72 hours; deletion requests within 14 business days, where local law permits.

Your Privacy Questions, Answered

The questions below cover the situations our account holders ask about most when it comes to personal data — from what we collect at sign-up to how long we keep your QRIS and DANA transaction logs. If your question is not covered here, reach out via live chat or email and we will respond within 24 hours.

We collect your name, email address, date of birth, and the payment method you register — such as DANA, OVO, GoPay, or QRIS. We also log your IP address and device type at the time of registration for security verification purposes.

Payment transaction data — including DANA deposit confirmations and OVO withdrawal reference numbers — is stored in an encrypted database with access restricted to our finance and compliance teams. We never store full wallet credentials, only the transaction identifiers returned by the payment processor.

We share only the minimum data necessary with payment processors to complete transactions via DANA, OVO, GoPay, and QRIS. We do not share, sell, or rent your personal data to marketing companies, data brokers, or unrelated third parties.

After you close your account, we retain transaction records for up to five years as required by applicable financial regulations. All other personal data — including contact details and device logs — is deleted within 90 days of account closure, where local law permits.

Yes. Email [email protected] with your registered email and account ID in the subject line. We will compile and send a full data export within 72 hours of receiving your verified request, delivered to your registered email address.

Send a deletion request to [email protected] or use the live chat 'Privacy & Data' topic. We process deletion requests within 14 business days. Note that some financial transaction records must be kept for the legally required retention period, depending on local law.

We use essential session cookies to keep your account active, plus analytics cookies to see how the site is used. You can review and update your cookie preferences at any time in the preference centre linked in the site footer — no account login is required to manage cookie settings.

How kursitoto Handles Your Personal Data

How to Reach Our Privacy Team

Live Chat

Email Support

WhatsApp

Six Ways We Protect Your Privacy

Encrypted Data Storage

Cookie Policy Transparency

Account Security Steps

Data Retention Schedule

Third-Party Data Sharing

Your Right to Access and Correct

Your Privacy Questions, Answered

01 What personal data does kursitoto collect when I create an account?

02 How are my DANA and OVO transaction records stored?

03 Does kursitoto share my data with third parties?

04 How long does kursitoto keep my account data after I close my account?

05 Can I request a copy of all the data kursitoto holds about me?

06 How do I ask kursitoto to delete my personal data?

07 What cookies does kursitoto use and how can I control them?

Related Pages