Reference

What this legal page covers

We keep your account terms, data use, cookie choices, and request steps in one place so you can see how we handle legal matters from sign-in to support.

Data useCookie choicesAccount checksLocal law

Explore The Lobby Read FAQ

How we handle access and records

castoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

We apply this policy only where local law permits. Your account record may include your name, contact details, device signals, and the reference tied to a DANA, OVO, GoPay, or QRIS transaction when that data is needed to keep the account accurate or to answer a

1
request. We do not ask for more than we need for the task in front of us. When you change an email, phone number, or registered name, we may ask for a one-time code or a matching document before the update lands in our system. If
2
the request comes from a new device, we hold it until the registered contact confirms it. We keep the same rule set for desktop, Android, and mobile browser access, and we archive or remove records under our retention rules after the reason for keeping them ends.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

CONTACT ROUTES

Where to send a legal request

If you need a correction, a data copy, or a question about this page, we point you to the fastest route in the account area.

DATA CARE STEPS

What we keep, and why

We wrote these steps so you can see how legal requests move through the account. Each request starts with your registered contact, then we check the device or document that matches the…

Data handling

We keep only the details needed to manage your account, match payment references, and answer your request. That usually means name, contact method, device logs, and the reference linked to DANA, OVO, GoPay, or QRIS activity.

Cookie settings

Our cookie prompt lets you accept, reject, or narrow analytics cookies before you move on. If you use Chrome, Safari, or an Android browser and clear stored site data, we may ask again later.

Device checks

When a login comes from a new phone or desktop, we may ask for one-time confirmation before the session continues. That step helps us protect your record when account details are being changed.

Retention

We keep support logs, identity checks, and transaction references only as long as we need them for account handling, dispute handling, or local tax records. After that, we archive or remove them under our retention rules.

Change requests

To request a correction, send your registered email or phone, the exact field you want changed, and any matching document we ask for. We process the ticket only after the request matches the account record.

Contact route

For legal questions, start with live chat, WhatsApp, or email from your account area. We match the request to your profile, then pass it to the right person without asking you to repeat the same details.

Questions about access and data

These questions cover the parts people ask us about most: what we store, how we verify a request, and where you should send a correction. We answer from the account record, not from guesswork, so a matching email, phone number, or document matters. If local law changes, we update the wording here and keep the same contact routes open for existing accounts.

We keep the details needed to manage your account, such as name, contact method, device signals, and the reference tied to DANA, OVO, GoPay, or QRIS activity. We do not keep extra data without a reason tied to the request.

Send your registered email or phone, the exact field you want changed, and any document we ask for. We check the match first, then update the record and confirm the result through the same contact route.

Yes, when local law allows it and when we no longer need the record for account handling, dispute handling, or tax checks. Some files may stay archived for a limited time before removal.

We use cookies for sign-in state, language choice, and basic site settings, plus analytics cookies if you accept them. If you clear browser storage on Chrome, Safari, or Android WebView, the prompt may return.

Use live chat, WhatsApp, or email from your account area. We route the request to the person handling legal tasks and keep the ticket linked to your profile so you do not repeat the same facts.

Access depends on local law and is available only where local law permits. If the law in your location does not allow access, we ask you not to continue and to follow local rules.

We ask for device confirmation when a login, update, or change request comes from a new phone or desktop. That extra step helps us protect your account while we process the request.

What this legal page covers

Where to send a legal request

What we keep, and why

Data handling

Cookie settings

Device checks

Retention

Change requests

Contact route

Questions about access and data

01 What data do you store for my account?

02 How do I ask for a data correction?

03 Can I ask you to remove my records?

04 Which cookies do you use on castoto?

05 Who should I contact for a legal question?

06 Can I access the site from anywhere?

07 Why did you ask for device confirmation?

Related Pages