Reference

How ato108 Handles Your Personal Data

This page explains exactly what data ato108 collects when you open an account, make a deposit via DANA, OVO or GoPay, or contact support — and how we protect it. Availability of our services depends on local law and eligible regions, including Indonesia.

Account data protectionWallet info: DANA, OVO, GoPayNo third-party sellingYour right to access or deleteIndonesia-region scope
ato108 How ato108 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you want to request access to your data, ask us to correct it, or submit a deletion request, you can reach our support team through any of the channels below. For wallet-related data queries — including anything tied to your DANA, OVO or GoPay transaction history — include your registered account email and the wallet type in your message so we can locate your records quickly.

Live Chat Start a live chat session from your account dashboard. Describe your data request clearly and our team will confirm receipt and next steps.
Email Support Send your written data request to our support email address listed in the account help section. Include your account ID and the nature of the request.
In-Account Help Log in, go to Account Settings, and use the Help section to submit a formal data inquiry. Responses are tracked and timestamped inside your account.
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

We handle data across four areas: how it is stored, how cookies work on the platform, how account security is maintained, and how long we keep different data types. Each area has a clear practice — no vague commitments.

Secure Storage

Account data, including wallet references for DANA, OVO and GoPay, is stored on encrypted servers. Access is restricted to authorised staff with a verified need.

Cookies and Session Tracking

We use session cookies to keep you logged in across pages and analytical cookies to understand how the platform is used. You can manage cookie preferences in your browser settings.

Account Security Practices

Login attempts are monitored. If unusual access is detected from an unrecognised device, we may prompt an OTP verification step before allowing entry to your account.

Retention and Deletion

Once you submit a deletion request, we remove non-essential data within the timeframe set by our policy. Transaction records linked to DANA, OVO or GoPay payments may be retained where law requires.

Your Questions About Privacy at ato108

These are the questions we hear most often about data, account privacy and how to exercise your rights. If your question is not answered here, reach out through any support channel listed above.

We collect your name, contact details, and the e-wallet identifiers you link — such as your DANA, OVO or GoPay account reference — along with device and session data generated during your visits.

Yes. Submit a data access request via live chat or the in-account Help section. Include your account ID so we can locate and compile your records accurately and send them to your registered contact.

Send a deletion request through email support or in-account Help. We will remove non-essential data promptly. Some transaction records tied to your wallet history may be retained where applicable law requires it.

We do not sell your data. We share limited details with payment processors — like the e-wallet rails for DANA, OVO or GoPay — only to complete your transaction, and with lawful authorities when legally required.

Retention periods depend on data type. Transaction records are kept for the period required under applicable financial regulations. Session and device logs are cleared on a shorter rolling cycle.

After account closure, non-essential profile data is removed per our deletion process. Records of deposits and withdrawals via DANA, OVO or GoPay may be retained only for the period required by law.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.