Your Privacy Comes First at totomacaupools
We've built this policy to show exactly how we handle your account data, payment information and personal details. Every transaction you make through DANA, OVO, GoPay or QRIS...
How We Protect Your Information
totomacaupools collects personal information—your name, email, phone number and payment details—only to operate your account and process transactions in supported Indonesian regions where local law permits. We use encryption to secure all data in transit and at rest. Your payment method details (DANA, OVO, GoPay, QRIS credentials) are never stored on our servers; we route them directly through authorised payment processors. We
do not sell or share your information with third parties outside our payment and compliance partners. You can request access to your data or ask for deletion by contacting our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Questions About Your Privacy?
Why You Can Trust Our Privacy Standards
Encryption Standard
All account and payment data uses industry-standard TLS 1.2+ encryption, protecting information from interception during transit and storage.
Payment Processor Compliance
DANA, OVO, GoPay and QRIS transactions route through certified payment gateways that meet Indonesian financial authority requirements.
No Data Resale
We never sell, rent or share your personal information with marketing companies, brokers or unaffiliated third parties for profit.
Regular Security Audits
Our infrastructure undergoes quarterly penetration testing and vulnerability assessments to identify and patch security risks.
Transparent Logging
All access to your account—logins, withdrawals, profile changes—is logged and visible in your Account Activity timeline.
Local Compliance
We comply with data protection requirements for supported Indonesian regions and work with local authorities when legally required.
Our Policy Across the Platform
What We Share About Your Privacy
Transparent Consent
When you open an account, you see exactly what data we collect and how we use it—no hidden clauses, no surprise sharing.
Your Account Controls
Edit your profile, change privacy settings and manage email preferences from your dashboard without needing to contact support.
No Cookies for Tracking
We use essential cookies for session management only—no retargeting pixels, no cross-site tracking, no profile building.
Data Retention Clarity
Your account data stays on file as long as your account is active. Closed accounts are anonymised within 90 days unless required by law.
Breach Notification
If any security incident affects your personal information, we notify you within 48 hours and provide steps to protect your account.
Policy Updates
Changes to this privacy policy are announced in-app 30 days before they take effect. You can always review previous versions.