What This Policy Covers and Why It Applies to You
When you open an account with sbototo wap and connect a payment method — DANA, OVO, GoPay, or QRIS — we collect the minimum data needed to process your transaction and verify your account identity. This includes your name, contact details, device identifiers, and transaction records
-
1
tied to your chosen payment rail. We do not store your full DANA or OVO wallet credentials on our servers; tokenised references are used instead. Data collected through QRIS scan sessions is retained only for the duration required by our transaction audit obligations. Access to stored
-
2
data is role-restricted inside our team, and all records are held on servers with AES-256 encryption at rest. Whether certain data practices apply to you depends on local law in your region of Indonesia.
Service availability depends on jurisdiction. Users are responsible for checking local law before access.