App / Live
Your information stays within wafitoto's systems — from the moment you log in to every transaction you make through DANA, OVO, or GoPay. This policy explains what we collect, how we use it, and the choices available to you.
When you create an account with wafitoto, we collect the information needed to operate your wallet and keep your session intact across devices. This includes your registration details, login activity, and the transaction records tied to your DANA, OVO, or GoPay payments. We store this data to process your requests accurately and to maintain your account history so it is available the next time you open the app or browser. We do not sell your personal information to third parties. Data shared with payment processors — including DANA, OVO, and GoPay — is limited to what each provider needs to complete a transaction. Those providers operate under their own privacy terms, which we encourage you to review directly. Where local law in Indonesia requires us to retain certain records, we keep them for the period that law specifies, then remove them. For account holders who have not been active, retention follows our standard schedule, which is described in the data retention section of this page. Availability of all services depends on local law and eligible regions.
Transaction data shared with DANA is limited to what is needed to process your deposit or withdrawal.
OVO payment records are processed directly through OVO's infrastructure; we hold only the transaction confirmation in your account history.
GoPay transfers follow the same pattern — we store the outcome in your wallet ledger, not the full payment credentials.
This policy covers what happens inside wafitoto's own systems. Some parts of your experience — payment networks, third-party content studios, linked services — operate under separate terms. Here is how the boundary works.
Login credentials, session tokens, and device continuity data are covered. We handle these within our own infrastructure and they do not leave our systems except as described in this policy.
Deposits and withdrawals processed through DANA, OVO, or GoPay involve those providers' own data handling. We cover our side of the ledger; their side is governed by their own terms.
Game content from studios such as PG Soft, Pragmatic Play, and Habanero is delivered through their platforms. We cover your account interaction with that content; the studios' own data practices are separate.
Links or integrations that take you outside wafitoto's domain are outside this policy's scope. Check the privacy notice of each external service before sharing information with it.
You have practical options for reviewing and managing the data we hold on your account. Your transaction history and profile details are visible in your account dashboard after login — no request needed for day-to-day access. If something looks incorrect, you can update most fields directly from the account settings page. For changes that require our review — such as correcting a name tied to a verified payment method — use the support contact path listed on this page. We will respond within the period required under applicable local law. If you want to know exactly what data we hold, or if you want to request deletion of your account, raise a formal request through our support channel and reference your registered account. Deletion requests are processed subject to any retention obligations under Indonesian law.
Your full transaction log and account details are available in the dashboard immediately after login. No separate request is needed.
Update your contact information directly in account settings. Payment-linked details that need verification go through our support team.
Use the support contact below for any question about how your data is handled. Reference your account when you write in.
Submit a deletion request through support. We process it subject to retention periods required under applicable local Indonesian law.
For any question about your data, use the contact paths below. Include your registered account details so we can locate your records quickly.
Open the chat widget from any page while logged in. Select the account or privacy topic to route your message correctly.
Write to our support address with your account registered email in the subject line. We respond within the period set by applicable local law.
Most record reviews and minor corrections can be done directly from your account settings — no need to contact support for standard updates.
Account security and data integrity sit at the centre of how wafitoto operates. Session data is kept separate from payment credentials, and access to account records is restricted to the processes that need it to function. Cookies on this site are used for session continuity — keeping you logged in as you move between the lobby and your wallet — and for basic site analytics. You can manage cookie preferences through your browser settings; disabling session cookies will affect your ability to stay logged in.
Account and transaction data is stored within controlled systems. Access is limited by function — support staff see what they need to resolve your query, no more.
Session cookies keep your account active as you navigate. Analytics cookies help us understand which parts of the lobby see the most use. Both are manageable from your browser.
Active account data is retained while your account is open. Inactive accounts follow a scheduled review. Transaction records tied to DANA, OVO, or GoPay are retained as required by applicable local law.
When this policy changes, we post the updated version here with a revised date at the top. Continued use of your account after a change means you have seen the updated terms. Contact support if you have questions about a specific revision.
Answers to the questions we hear most often about how this policy applies to your account.
We collect the registration details you provide — email, name, and the information needed to verify your account — plus your login activity and transaction records. Payment data shared during DANA, OVO, or GoPay transactions is limited to what those processors need to complete the transfer.
We do not sell your data. We share transaction details with DANA, OVO, or GoPay only as needed to process your payment. Game content studios such as PG Soft or Pragmatic Play receive only what is needed to load your session, not your payment credentials or full profile.
Log in and open your account dashboard — your transaction history and profile details are shown there directly. For a full data export or a formal record request, contact our support team and reference your registered account email.
Most contact details can be updated directly in account settings. If a field is linked to a verified payment method such as OVO or GoPay and cannot be edited in-app, raise a correction request through support with your account details and the change you need.
Active account data is retained while your account remains open. Transaction records tied to DANA, OVO, or GoPay are kept for as long as applicable Indonesian law requires. When those periods end, we remove the data from active systems. Contact support if you want to know the specific schedule for your account type.
Submit a deletion request through our support channel. We will process it and remove your profile from active systems, except where Indonesian law requires us to retain specific transaction or identity records for a defined period. We will confirm what was removed and what was retained and why.