Reference

Your Rights and Our Legal Commitments

wlatoto operates under a clear legal framework that outlines your rights, our obligations, and how account access is governed where local law permits.

Jurisdiction-Aware PolicyData Protection StandardsDANA, OVO, GoPay, QRIS CoveredAccount Security Commitment24/7 Compliance Support
wlatoto Your Rights and Our Legal Commitments
LEGAL CONTACT PATHS

Reach Us on Legal and Policy Matters

If you have a question about your rights under our terms, a data request, or a dispute with how a policy was applied to your account, our compliance team is reachable through three direct channels. We aim to respond to formal legal queries within 2 business days, and account-level disputes within 24 hours on business days.

Team online

Live Chat (Legal Queue)

Open the chat widget and select 'Legal & Policy' from the department menu. Available 07:00–23:00 WIB daily. Our compliance agents handle data requests, terms disputes, and account-access queries directly in this queue.

Email Compliance

Send formal legal correspondence to our compliance address listed in your account dashboard under Settings > Legal Contact. Include your account ID and the specific clause or policy section you are referencing for a faster response.

Account Ticket System

Log into your account, navigate to Help > Submit a Ticket, and choose the 'Legal / Policy' category. Tickets receive a case reference number and a written reply within 2 business days, giving you a traceable audit trail.

ACCOUNT PROTECTION DETAIL

How wlatoto Handles Your Data and Security

We apply layered security practices across every account on the platform — from login to withdrawal.

Data Handling

Personal data you submit at registration — name, contact details, payment method preference — is stored on encrypted servers. We do not sell or share your data with third-party marketers under any circumstance. Sharing occurs only under lawful compulsion.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to measure which lobby sections you visit most. You can manage or reject non-essential cookies via the cookie banner displayed on your first visit or inside Account Settings.

Account Security

Every account is protected by two-factor authentication via SMS or authenticator app. Withdrawal requests trigger an additional identity check — typically a one-time PIN sent to your registered number — before funds are released to DANA, OVO, GoPay, or QRIS.

Data Retention

We hold your account records, transaction logs, and communication history for a minimum of 12 months from your last active session. After that period, inactive account data is archived for a further 24 months before permanent deletion is scheduled.

Rights Request Process

You have the right to request a copy of all data we hold about you, or to request correction of inaccurate records. Submit a data subject request via the Account Ticket System under the 'Legal / Policy' category and we will respond within 5 business days.

Deletion Requests

If you wish to close your account and have your personal data removed, contact our compliance team by email. We will confirm the request, process any pending balance to your nominated QRIS or OVO wallet, and complete deletion within 14 business days.

Legal Questions We Hear Most Often

These are the questions we receive most frequently from people reading this policy page. If your question is not covered here, use the Account Ticket System under 'Legal / Policy' and our compliance team will reply with a written answer tied to your case reference.

Access to certain account features depends on local law. We apply jurisdiction-sensitive rules at the account level. If a feature is unavailable in your region, you will see a clear notice when you attempt to access it rather than an unexplained error.

We collect your name, email address, phone number, and preferred payment method — for example DANA or GoPay — at registration. Additional identity documents may be requested during withdrawal verification. We store this data on encrypted servers and do not sell it.

Log in, go to Help > Submit a Ticket, and select 'Legal / Policy' then 'Data Subject Request'. Include your account ID. We will compile and deliver your data file within 5 business days and send it to your registered email address.

Yes. Email our compliance address listed in Account Settings under Legal Contact. We will verify your identity, process any remaining balance to your nominated OVO or QRIS wallet, and complete the deletion within 14 business days, sending a written confirmation.

Transaction logs and account communications are retained for a minimum of 12 months from your last active session. After that, data moves to a secure archive for a further 24 months before a scheduled permanent deletion, in line with our operational policy.

Yes. Every deposit or withdrawal processed through DANA, OVO, GoPay, or QRIS is subject to the same terms of service that govern all account activity. Payment-method-specific conditions, such as processing windows, are documented in the Payments section of your account dashboard.

Where a clause in our terms conflicts with a regulation applicable in your jurisdiction, the local regulation takes precedence. We review our policy periodically to align with current Indonesian legal requirements and publish the updated version on this page with a revision date.