Reference

How top1to Handles Your Personal Data

When you open an account with us, we collect only what we need to run your account, process payments through DANA, OVO, or GoPay, and keep your session secure.

Account data onlyDANA, OVO, GoPay payment contextNo third-party data sellingYou can request access or deletionIndonesia-applicable where local law permits
top1to How top1to Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you want to access, correct, or delete personal data we hold about you, our account support team is the right place to start. You can reach us through live chat from inside your account, by email, or through the in-app help menu on mobile. We aim to acknowledge data requests and respond with a clear next step within the timeframe required under applicable rules.

Team online

Live Chat

Open your account dashboard and tap the chat icon to speak with our support team directly about any privacy or data query.

Email Support

Send your data access or deletion request by email. Include your registered account name so we can locate your record quickly.

In-App Help Menu

On mobile, go to your account settings, tap Help, and select Privacy Request to submit a structured query without leaving the app.

HOW WE PROTECT IT

Data Handling, Cookies and Account Security

Your account data sits behind encrypted connections and is accessible only through authenticated sessions. We do not share your personal information with advertisers. Below is a breakdown of the four areas where we actively manage your privacy.

Payment Data Handling Transaction references for DANA, OVO and GoPay deposits are stored in encrypted logs. We never hold full wallet credentials — payment steps go through each provider's own secure channel.
Cookie Use We use session cookies to keep you logged in and analytics cookies to measure page performance. You can adjust cookie preferences in your browser settings at any time.
Account Security Each login triggers an OTP verification step sent to your registered contact. Unusual access attempts — new device, unfamiliar IP region — are flagged and may prompt an additional check.
Retention and Deletion We keep your data while your account is active and for the period required by applicable local rules. Submit a deletion request via live chat or email; we will confirm the steps and timeline.

Common Questions About Your Privacy Rights

Here are the questions we hear most often about how your data is handled at top1to. Each answer is specific to how our account and payment systems work for Indonesia, where access depends on local law and eligible regions.

We collect your name, email, date of birth and your chosen payment method — DANA, OVO or GoPay. We also log session and device data for account security checks.

We do not sell your data. We may share transaction references with your payment provider — DANA, OVO or GoPay — solely to process and verify your deposit or withdrawal.

Log in, open the Help menu, and select Privacy Request. You can also send a request by email with your registered account name so we can locate and prepare your data record.

Yes. Submit a deletion request via live chat or email. We will confirm the retention period required by applicable local rules and outline the exact steps we take after that.

We begin the removal process once your account closes, retaining only what applicable local regulations require for the mandatory period. We will confirm the timeline when you submit your request.

No full credentials are stored on our servers. Payment authentication for DANA, OVO and GoPay happens through each provider's own secure flow; we only log the transaction reference tied to your account.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.