Reference

Your Rights and Our Legal Commitments

rusuntoto operates under a defined legal framework that sets out how your account, data and transactions are handled — access and eligibility depend on local law in your…

Jurisdiction-aware termsDANA, OVO, GoPay, QRIS coveredData retention policyAccount security standardsContact channels for legal requests

Explore the Lobby Read FAQ

How Our Terms Apply to Your Account

rusuntoto Service availability depends on jurisdiction. Users are responsible for checking local law before access.

Our terms of use are governed by the jurisdiction in which rusuntoto holds its operational authorisation. Eligibility to open an account depends on local law, and we rely on you to verify your own standing before proceeding. When you complete a transaction via DANA, OVO, GoPay

1
or QRIS, the transfer is recorded against your account identity and subject to our anti-fraud verification layer. We retain transaction logs for a minimum of two years in line with standard financial compliance expectations. Any dispute arising from account activity is handled through our internal arbitration
2
process first; if unresolved within 14 calendar days, you may escalate in writing to our compliance team. We update these terms when regulatory requirements change and will notify your registered email address at least seven days before any material change takes effect.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

LEGAL CONTACT PATHS

Reach Us for Any Legal or Policy Matter

Our compliance and legal support team is available seven days a week, from 08:00 to 23:00 Western Indonesia Time.

ACCOUNT SECURITY STANDARDS

How rusuntoto Protects Your Data and Account

We apply layered security across every account — from the moment you register through every DANA, OVO, GoPay or QRIS transaction you make.

Data Encryption at Rest

All personal and financial data stored on our servers is encrypted using AES-256. This applies to your account profile, payment records and session history — nothing is held in plain text at any storage layer.

Cookie Policy and Consent

We use functional and analytics cookies to keep your session active and measure page performance. You can withdraw cookie consent at any time from your account settings under Privacy, and we will stop non-essential tracking within 24 hours.

Retention Schedule

Transaction records linked to DANA, OVO, GoPay and QRIS payments are retained for two years. Account identity documents are held for five years following account closure, in line with standard compliance obligations.

Two-Factor Account Access

Your account login supports two-factor authentication via SMS or an authenticator app. We strongly encourage enabling this feature — it prevents unauthorised access even if your password is compromised through a third-party breach.

Right to Access and Correction

You may request a full export of the personal data we hold about you. If any detail is incorrect — name, registered phone, linked payment method — contact the compliance team and we will update the record within seven business days.

Who to Contact for Legal Requests

All formal legal requests — data deletion, account suspension appeals, transaction disputes — must be submitted in writing to our compliance email. Include your account ID, the nature of the request and any supporting documents for the fastest resolution.

Common Questions About Our Legal Terms

These are the questions our compliance team receives most often from people in Indonesia. Each answer references the specific policy or process involved so you can verify the detail in our full terms document linked in your account dashboard.

Eligibility depends on local law in your region. We recommend you confirm your legal standing under applicable Indonesian regulations before opening or continuing to use an account with us.

Send a written deletion request to our compliance email with your account ID and the scope of data you want removed. We process confirmed deletion requests within 14 calendar days and send you a written confirmation when complete.

We do not sell or trade your payment data. DANA and OVO transaction logs are shared only when required by a valid legal order or as part of our anti-fraud verification process — never for marketing or third-party analytics.

Identity documents are retained for five years after closure; transaction records for two years. This is a standard compliance obligation. After the retention period expires, all data is permanently deleted from our systems.

We send a notification to your registered email address at least seven days before any material change to our terms takes effect. Minor clarifications may be updated without notice but are logged in the version history on the terms page.

Submit your dispute through the Legal Channel in live chat or by email, including your account ID and the relevant transaction reference from your QRIS or GoPay record. Our team will open a formal case within one business day.

Yes. Contact our compliance team by email with your account ID and a data access request. We will deliver a structured export of your personal and transaction data within 14 calendar days, where local law permits.

Your Rights and Our Legal Commitments

Reach Us for Any Legal or Policy Matter

How rusuntoto Protects Your Data and Account

Data Encryption at Rest

Cookie Policy and Consent

Retention Schedule

Two-Factor Account Access

Right to Access and Correction

Who to Contact for Legal Requests

Common Questions About Our Legal Terms

01 Does Indonesian law affect my eligibility to hold a rusuntoto account?

02 How do I request deletion of my personal data?

03 Are my DANA and OVO transaction records shared with third parties?

04 What happens to my account data if I close my account?

05 How will I know if the legal terms change?

06 How do I raise a formal dispute about a transaction?

07 Can I request a copy of all data rusuntoto holds about me?

Related Pages