Reference

Open grtoto Privacy Policy before account access

grtoto Privacy Policy explains what we collect when you create an account, sign in from a phone or desktop, and use DANA, OVO, GoPay or QRIS.

Account dataWallet recordsCookie choicesPolicy requests
grtoto Open grtoto Privacy Policy before account access
CONTACT ROUTES

Switch to the right privacy contact path

A clear contact route helps you ask about the Privacy Policy without sending account details through an unrelated channel.

Account data request Use the account support path to ask what personal data we hold. Include your account identifier and the requested action, while keeping your password and wallet PIN private.
Wallet record question For a DANA, OVO, GoPay or QRIS record, provide the transaction reference and date shown in your account. We use those details to locate the relevant payment entry.
Cookie preference help If a cookie choice is unclear on your phone or desktop, contact us through the policy support path and tell us which browser and device you used.
HANDLING COMMITMENTS

Browse our data handling commitments

The Privacy Policy is designed around the moments that affect your account most: opening access, moving through the lobby, checking wallet status and asking for help.

Account collection

We collect details needed for account creation and phone verification, plus sign-in and device events that help connect your request to the correct account without asking for your password.

Payment references

DANA, OVO, GoPay, QRIS, bank transfer and virtual account activity may create reference records. We use them to match status checks, not to request your wallet PIN.

Cookie controls

Cookies can support sign-in continuity and remember selected settings. You can adjust browser controls on your phone or desktop, although some account functions may then need another sign-in.

Account protection

Phone verification, sign-in records and device signals help us identify unusual access. Keep your password private and contact support if an account event does not match your activity.

Retention choices

We keep each category only for the period needed for its stated purpose, account records and applicable legal duties. You can ask which retention period applies to your request.

Change requests

You can ask us to correct data, explain its use or remove eligible records through the support route. We verify the account before changing information linked to your access.

Ask grtoto Privacy Policy questions

These Privacy Policy answers focus on the searches Indonesian account holders make before opening access or contacting us. We explain data collection, wallet references, cookies, device records, account requests and the legal wording that applies when access depends on local law.

It covers account creation, phone verification, sign-in events, device details, cookies, support contacts and payment references connected with DANA, OVO, GoPay, QRIS, bank transfer or virtual account use.

We may collect the contact details used for account access, verification records, device and login events, plus activity needed to connect your account with wallet status or support requests.

Yes. The Privacy Policy covers reference data for DANA, OVO, GoPay and QRIS, along with bank transfer and virtual account records needed to check payment status or resolve an account question.

Use the account support path and state whether you want a data copy or correction. Include your account identifier, then complete our identity check before we respond or change eligible records.

Cookies can help maintain sign-in continuity and remember settings on your phone or desktop. You can change browser controls, but disabling some cookies may require another account sign-in.

Retention depends on the purpose of each record, account needs and applicable legal duties. Ask through the policy contact route and we will explain the period relevant to your data.

Yes. Tell us the account identifier, approximate sign-in time and device type. We can use those details to investigate an unfamiliar event, subject to identity checks and local law.