Reference

How bustogel Handles Your Personal Data

Your personal information — from account registration details to payment records processed via DANA, OVO, GoPay and QRIS — is handled with specific controls we keep consistent across…

Data encrypted in transit and at restDANA, OVO, GoPay & QRIS transaction records protectedAccount deletion requests processed within 30 daysNo third-party sale of your personal dataJakarta and Surabaya accounts covered equally
bustogel How bustogel Handles Your Personal Data
PRIVACY CONTACT CHANNELS

How to Reach Our Privacy Team

If you have a question about how your data is stored, want to request a copy of your records, or need to update the personal information held on your account, our privacy support team is reachable seven days a week. We aim to respond to all data-related requests within 72 hours of receipt, and account-deletion requests are fully processed within 30 calendar days.

Team online

Live Chat

Reach our privacy support team directly through the live chat window on bustogel — available 07.00 to 23.00 WIB every day for data queries and account update requests.

Email Support

Send detailed data-access or deletion requests to our privacy inbox. We acknowledge every email within 24 hours and deliver a full response within 72 hours on business days.

Account Settings Panel

Navigate to Settings → Privacy on your bustogel account dashboard to update personal details, review stored payment method references, or submit a data-export request directly.

DATA HANDLING PRACTICES

Six Ways We Protect Your Privacy

Privacy at bustogel is not a single toggle — it is a set of operational practices applied at every layer of your account, from the moment you register through every DANA, OVO…

Encryption at Every Layer

All data transmitted between your device and our servers uses TLS 1.3 encryption. Stored records — including your QRIS and GoPay transaction history — are encrypted at rest using AES-256, so raw data is never readable in plain text.

Cookie Controls You Manage

We use session cookies to keep you logged in and analytical cookies to understand page performance. You can adjust cookie preferences at any time through the cookie banner or your browser settings without affecting core account functionality.

Payment Record Retention

Transaction logs for DANA, OVO, GoPay and QRIS deposits and withdrawals are retained for five years to satisfy financial record-keeping requirements. After that period, records are permanently deleted from our live systems.

Third-Party Data Sharing

We share your data only with payment processors required to complete a DANA or OVO transaction, and with identity-verification providers where local law requires it. We do not share your information with advertisers or data brokers.

Account Security Steps

Your bustogel account uses two-factor authentication via SMS OTP at login and at withdrawal confirmation. If we detect a login from an unrecognised device, your session is automatically flagged and you receive an immediate notification.

Your Right to Access and Delete

You may request a full export of data we hold on your account at any time via Settings → Privacy. Deletion requests close your account, anonymise your transaction records and are completed within 30 days of confirmation.

Frequently Asked Questions About Your Privacy

These are the questions we receive most often about data, cookies, account records and your rights as someone who holds an account with bustogel. If your question is not here, reach us via live chat between 07.00 and 23.00 WIB.

We collect your name, email, phone number and, where local law permits, an identity document. We also record your device type, IP address and login timestamps to protect your account from unauthorised access attempts.

We store transaction metadata — amounts, timestamps and method used — but we do not store your full DANA wallet credentials or OVO PIN. Payment authentication is handled directly by the respective payment provider's secure gateway.

Active account data is retained for the life of your account. After a deletion request is confirmed, personal identifiers are removed within 30 days. Transaction records are anonymised and retained for five years for financial compliance purposes.

Yes. Go to Settings → Privacy in your account dashboard and submit a data-export request. We deliver a downloadable file of your stored personal and transactional data within 14 business days of the request.

We do not sell or rent your data to advertisers. Data is shared only with payment processors such as DANA and GoPay to complete transactions, or with identity-verification services where local law requires it. No marketing data brokers receive your information.

Log in, navigate to Settings → Account Details, and edit your name, email or phone number directly. For changes to identity-verification documents, contact our support team via live chat and we will guide you through the re-verification process.

We use session cookies for login persistence and analytics cookies to measure page load performance. You can disable analytics cookies via the cookie preference banner without losing access to your account or payment features like QRIS checkout.