Reference

How rumpitoto Handles Your Personal Data

At rumpitoto, your personal data is collected only for the purposes of running your account, processing payments through DANA, OVO, GoPay and QRIS, and keeping your sessions secure.

Data collected only for account useDANA, OVO, GoPay & QRIS transactions logged securelyYour right to access and delete your dataNo data sold to third partiesContact us 24/7 for privacy requests
rumpitoto How rumpitoto Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

You can submit a data access request, correction request, or deletion request through any of the three channels below.

Live Chat Available 24 hours a day, seven days a week. Start a chat from any page on rumpitoto.xyz and select 'Privacy & Data' from the topic menu to reach the right team immediately.
Email Support Send your request to our privacy inbox with your registered email address and a brief description of your request. We aim to confirm receipt within one hour during business hours.
Account Settings Panel Log into your rumpitoto account, navigate to Settings, then select 'Data & Privacy'. From there you can download your data log or submit a deletion request without contacting support.
DATA HANDLING STANDARDS

Six Ways We Protect Your Privacy

Protecting your personal data is an operational responsibility, not an afterthought. From the moment you submit a DANA or QRIS payment to the moment your session ends, the following practices are active…

Encrypted Storage

All personal data — including payment references from DANA, OVO, GoPay and QRIS — is stored using AES-256 encryption. Decryption keys are rotated on a fixed schedule and are never stored alongside the data they protect.

Cookie Control

We use session cookies to keep you logged in and analytics cookies to understand which pages are visited most. You can disable non-essential cookies at any time through the cookie preference panel at the bottom of every page.

Account Security Alerts

Any login from a new device triggers an automatic email alert to your registered address. If you do not recognise the login, a single click in the alert email freezes your account access until you verify identity through support.

Data Retention Schedule

Transaction logs are retained for 12 months from the date of the transaction. Account registration data is kept for the lifetime of your account plus six months after closure, in line with what local law requires.

No Third-Party Data Sales

We do not sell, rent or exchange your personal data with advertisers or data brokers. Data is shared with payment processors such as DANA and OVO only to the extent required to complete your transaction.

Data Access Requests

You have the right to request a full copy of the data we hold about you. Submit the request through the Settings panel or via email, and we will deliver a structured data file to your registered email address within five business days.

Your Questions About Privacy at rumpitoto

The questions below are the ones we hear most often from people reviewing this policy before opening an account or making their first DANA or OVO deposit. If your question is not here, our live chat team is available around the clock to walk you through it.

We collect your name, email address, phone number and the payment method you choose — such as DANA, OVO, GoPay or QRIS. We also log your device type and IP address at login to monitor for unauthorised access to your account.

Payment references from DANA, OVO, GoPay and QRIS are encrypted at the point of capture using AES-256 and stored separately from your account credentials. We retain these records for 12 months so we can resolve any transaction disputes you raise.

Yes. Log into your account, go to Settings, then 'Data & Privacy', and submit a data access request. We will send a structured file to your registered email address within five business days of receiving the request.

We share data only with payment processors — such as DANA and OVO — strictly to complete your transactions. We do not sell or rent your data to advertisers, data brokers or any unrelated third parties, and we never will.

We keep your registration and transaction data for the lifetime of your account plus six months after closure. This retention period depends on local law. After that window, your data is permanently deleted from our active systems.

You can submit a deletion request through the 'Data & Privacy' section in your account settings, or by emailing our privacy inbox from your registered address. We confirm receipt within one hour and complete the deletion within seven business days.

An automatic security alert is sent to your registered email address. We record only the region, not a precise location. If you do not recognise the login, click the link in the alert email to freeze access immediately and contact live chat.