Your Privacy Matters to Us
We built tunaitoto around your trust. This privacy policy explains how we collect, use and protect your personal information when you open an account, deposit via DANA, OVO...
How We Handle Your Information
tunaitoto collects personal information you provide during account registration, including your name, email, phone number and identity verification details. We also collect payment information when you deposit through DANA, OVO, GoPay or QRIS. This data is encrypted and stored securely on servers protected by industry-standard security protocols. We never sell your information to third parties. Where local law permits, we use your
data to improve your experience, prevent fraud and comply with Indonesian regulatory requirements. Your account remains yours to control.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Standards We Follow
Encryption Standard
All personal and payment data transmitted between your device and our servers uses TLS 1.2 encryption, the same standard banks use to protect transactions.
Regular Audits
We conduct quarterly security audits and penetration testing to identify and fix vulnerabilities before they affect your account or payment methods.
Data Minimization
We collect only the information necessary to verify your identity, process deposits via DANA, OVO, GoPay and QRIS, and deliver our service.
Retention Policy
Account data is retained for the duration of your membership plus seven years for regulatory compliance. You can request deletion where permitted by law.
Third-Party Vendors
Payment processors, identity verification partners and hosting providers sign strict data protection agreements and are audited annually for compliance.
Incident Response
If a security incident occurs, we notify affected users within 48 hours and provide guidance on protecting your account and payment information.
What Sets Our Privacy Approach Apart
| No Data Brokerage | We don't sell, rent or share your personal information with advertisers, data brokers or marketing firms. Your profile stays yours. |
|---|---|
| Transparent Logging | Every access to your account is logged and visible to you. You can review login history, payment records and activity from your dashboard. |
| Payment Privacy | DANA, OVO, GoPay and QRIS transaction details are encrypted separately. We never store full payment credentials on our servers. |
| Opt-Out Control | You control marketing emails, SMS notifications and promotional communications. Disable any channel from your account settings instantly. |
| Jurisdiction Clarity | Our privacy practices comply with Indonesian data protection standards and supported regional regulations. We're transparent about legal requests. |
| User Rights | You can request a copy of your data, correct inaccuracies or request deletion where permitted by law. Submit requests via your account or email. |
| Cookie Transparency | We use cookies only for session management, fraud prevention and analytics. No tracking cookies follow you across the web. |