Reference

How We Handle Your Personal Data

At barcatoto login, your personal data is collected only for specific, stated purposes — account creation, transaction processing via DANA, OVO, GoPay or QRIS, and customer support.

Data encryption at rest and in transitNo third-party data salesDANA, OVO, GoPay & QRIS transaction privacyAccount data access on requestRetention limits on inactive accounts
barcatoto login How We Handle Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to request a copy of your data, ask us to correct an error, or raise a concern about how your information is handled…

Live Chat Start a live chat session directly from your account dashboard.
Email Support Send your privacy request to our dedicated support address.
Help Centre Ticket Submit a structured ticket via the Help Centre tab in your account settings.
HOW WE PROTECT DATA

Our Data Handling and Security Practices

We apply layered security controls across every system that touches your personal information, from the moment you submit a DANA top-up to the moment a withdrawal is confirmed.

End-to-End Encryption

All data transmitted between your device and our servers — including QRIS scan tokens and OVO payment references — is encrypted using TLS 1.3. No readable data crosses the network in plain text at any stage.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand page performance. You can review and withdraw cookie consent at any time through the Cookie Settings panel in your account preferences.

Account Security Controls

Two-step verification is available for every account. We strongly suggest you enable it via the Security tab; it prevents unauthorised access even if your password is compromised on another platform you use.

Data Retention Policy

Active account data is retained while your account remains open. If your account is closed, transaction records are kept for the minimum period required by Indonesian financial regulations, then deleted on a scheduled cycle.

Third-Party Processors

Payment processors handling GoPay and DANA transactions operate under data-processing agreements with us. They may process your payment identifier but have no access to your full account profile or browsing history on our platform.

Data Correction Requests

If you notice incorrect personal information on your account — a misspelled name or an outdated phone number — submit a correction request via live chat or a Help Centre ticket and we will update the record within 48 hours.

Your Privacy Questions, Answered Directly

Below are the questions we receive most often about data privacy at barcatoto login. Each answer reflects how our systems actually work, so you can make an informed decision about sharing your information with us when you explore the account registration process.

We collect your full name, email address, phone number and the payment identifier linked to your deposit method — DANA, OVO, GoPay or QRIS. We also log your device type and IP address for security verification purposes only.

Your DANA or OVO identifier is shared only with the payment processor that completes your transaction. That processor operates under a data agreement with us and cannot use your identifier for any purpose beyond completing your deposit or withdrawal.

After account closure, transaction records are retained for the period required under Indonesian financial regulations. All other personal profile data — name, email, phone — is scheduled for deletion once that mandatory retention period expires.

Yes. Submit a data-access request via the Help Centre ticket system or live chat. Include your registered phone number so we can locate your record. We aim to deliver the data export within five business days of receiving your request.

We use session cookies for login continuity and analytics cookies to measure page performance. You can withdraw consent for non-essential cookies at any time through Cookie Settings in your account preferences without affecting core platform functionality.

Disclosure of your personal data to Indonesian authorities depends on local law. We comply with valid legal orders but do not proactively share data beyond what those orders require, and we apply the minimum-disclosure principle in every case.

Contact our privacy team via live chat (08:00–22:00 WIB) or email support. Provide your account phone number and a description of the concern. We log every report and aim to send an initial response within four business hours on weekdays.