Reference

How tomattoto Handles Your Personal Information

This Privacy Policy explains what data we collect when you use tomattoto, how we use it, and what rights you hold over it.

Account data protectionWallet info kept privateDANA, OVO, GoPay data handled securelyYour right to access or delete dataNo data sold to third parties
tomattoto How tomattoto Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to review, correct, or remove your personal data, our support team handles privacy requests directly. You can reach us through live chat inside your account dashboard, by email, or through the help centre. We aim to respond to all data-related requests within a reasonable period and will confirm receipt when your query arrives.

Live Chat Open your account dashboard and tap the chat icon to send a privacy request directly to our support team. Available for account-linked queries.
Email Support Send your data access or deletion request by email with your registered account address in the subject line so we can locate your records quickly.
Help Centre Our help centre includes a dedicated privacy section where you can submit a formal data query and track its progress through your account portal.
HOW WE PROTECT YOU

Data Handling, Cookies, Security and Retention

We apply several layers of account protection to keep your data safe and make sure only you can access your profile. Here is how each layer works in practice.

Account Security and Login

Every login triggers an OTP verification step sent to your registered number. This means an unrecognised device cannot access your account even with your password.

Cookie Use on Our Platform

We use session cookies to keep you logged in and preference cookies to remember your chosen language and payment method. You can clear these through your browser settings at any time.

Wallet Data Handling

DANA, OVO, and GoPay transaction references are stored only to match your deposits and withdrawals. We never store your wallet PIN or full account credentials on our servers.

Data Retention and Deletion

Active account data is held while your account remains open. On closure, we delete personal records beyond what applicable law requires us to retain for compliance purposes.

Privacy Policy Questions Answered

These are the questions we hear most often about how we manage your data, what your rights are, and how to act on them. If something here does not cover your situation, contact our support team directly.

We collect your name, email address, phone number, and the account details you submit. Payment metadata from DANA, OVO, or GoPay is also logged to process transactions against your account.

Yes. Submit a data access request through live chat or email using your registered account address. We will compile and send your data record within a reasonable timeframe after verifying your identity.

Contact our support team via live chat or email with a deletion request. Once your account is closed, we remove personal data beyond what local law requires us to hold for compliance purposes.

We do not sell or trade your data. We share it only with payment processors like DANA, OVO, and GoPay to complete transactions, and with any authority where local law requires disclosure.

No. Your wallet PIN and full login credentials stay inside your wallet app. We only store the transaction reference numbers needed to match payments to your account.

We use cookies to keep you logged in and remember your preferences. You can disable non-essential cookies through your browser settings; doing so may affect some account features.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.