Reference

castoto Privacy Policy for Your Account

We set out how your account data, cookie markers, and DANA, OVO, GoPay, and QRIS records are handled for Indonesia accounts when you open an account or ask…

Account DataCookie MarkersDANA, OVO, GoPay, QRISHelp Requests
castoto castoto Privacy Policy for Your Account
HELP CHANNELS

How to reach castoto about privacy

When you want a privacy answer, we keep the route short: live chat, email, or the Help tab after sign-in.

Live chat Send a privacy question in live chat when you need a quick check on…
Email Use email if you want a written trail for a request about data access…
Help tab Open the Help tab after sign-in to send the request from inside your account.
DATA CONTROLS

How we handle data and cookies

Our policy is built around the data we actually touch: sign-in details, device markers, cookie IDs, and transaction references from DANA, OVO, GoPay, and QRIS.

Data minimisation

We only ask for the details needed to open your account, process wallet activity, and answer support messages. That usually means contact data, login history, device markers, and DANA, OVO, GoPay, or QRIS references.

Cookie settings

Cookies remember your session, language, and device settings so you do not repeat the same steps every visit. You can change them in Chrome on Android or Safari on iPhone through browser settings.

Access checks

We flag new-device logins, password changes, and repeated failed sign-ins. If something looks unusual, we may ask you to confirm your email or phone number before we restore access.

Retention

We keep transaction logs and support history only as long as we need them for disputes, record keeping, and legal duties. After that period, we delete or archive the files on our internal schedule.

Change requests

Use the Help form in your account to ask for correction, access, or deletion where local law allows it. Include the email on the account and the wallet reference so we can verify the request.

Who sees it

Only staff and service partners who need the data to run the site, process messages, or confirm payments can see it. We do not share it for unrelated use, and we review requests case by case.

Questions about this privacy policy

These are the questions we hear most when you want to check data use, cookie settings, and the right contact path. We keep the answers direct so you can find the account step, device setting, or support channel without reading every clause. If access or eligibility is discussed, it depends on local law and is available only where local law permits.

We collect the details needed to create and protect your account: contact data, login history, device markers, and payment references if you use DANA, OVO, GoPay, or QRIS. We do not ask for extra details without a clear service reason.

We keep payment references long enough to match deposits, support checks, and record keeping. Full wallet credentials are not stored in plain text, and our team only sees the parts needed to verify the transaction.

Yes. Send the request through live chat or the Help tab in your account, and we will verify it against your registered email and recent account activity. We can act where local law allows it.

We keep records only for the time needed to run the service, settle disputes, and meet legal or audit duties. After that period, we delete or archive them according to our internal schedule.

Cookies remember your session, device settings, and language choice so you do not repeat the same steps on every visit. You can change them in Chrome on Android or Safari on iPhone through browser settings.

Our privacy team handles requests sent through live chat, email, or the Help tab after sign-in. We route each case with your account ID, so the right staff can check it without delay.

Yes. Access, sharing, and retention can change by jurisdiction, and any service we provide depends on local law and is available only where local law permits. We will tell you what we can do for your account.