Reference

Your Rights and Our Legal Commitments

bpjstoto operates under a clear legal framework designed to protect your account, your data, and your transactions — whether you deposit via DANA, OVO, GoPay, or QRIS.

Jurisdiction-aware termsDANA, OVO, GoPay, QRIS coveredAccount data protection24/7 legal contact pathIndonesia-specific policy
Explore Lobby Read FAQ
bpjstoto Your Rights and Our Legal Commitments
LEGAL CONTACT PATHS

Reach Our Legal and Compliance Team

If you have a question about your rights, need to request account data, or want to escalate a legal matter, our compliance team is reachable through three direct channels. Response times for legal requests are within 48 business hours, and all communications are logged for your records.

Team online

Live Chat (Legal Queries)

Our live chat is available 24 hours a day, seven days a week. Select the 'Legal / Compliance' category when you open the chat window so your message routes directly to the correct team without delay.

Email Compliance Desk

Send written legal requests, data access inquiries, or formal complaints to our compliance email. We acknowledge receipt within four business hours and provide a full written response within 48 business hours.

Account Settings Panel

Log in to your bpjstoto account, navigate to Settings › Legal & Privacy, and submit a data request or policy objection directly. Your submission is time-stamped and tracked through our internal case system.

ACCOUNT SECURITY STANDARDS

How We Protect Your Data and Account

Every policy we apply is designed to be verifiable and actionable — not abstract.

Cookie Policy

We use session cookies for login security and optional analytics cookies to measure page performance. You can review and adjust cookie preferences at any time from the footer of any page on bpjstoto.xyz.

Data Retention Schedule

Account data is retained for a period of five years from the date of last activity, in line with standard financial record-keeping practice. After this period, personal data is deleted unless a legal hold is active.

Account Security Layers

Your account is protected by two-factor authentication via SMS or an authenticator app. Login attempts from unrecognised devices trigger an automatic email alert to your registered address within seconds.

Payment Data Handling

We do not store DANA, OVO, GoPay, or QRIS credentials on our infrastructure. All payment flows are processed end-to-end by each provider's secure API, with only a transaction reference retained on our side.

Right to Access and Erasure

You have the right to request a full export of the data we hold about your account, or to ask for erasure where local law permits. Requests are handled within 30 days and confirmed in writing via email.

Legal Contact Person

Our designated data and compliance contact can be reached via the compliance email channel. Include your account ID and the subject line 'Data Request' so your case is prioritised and routed correctly from the first message.

Common Questions About Our Legal Terms

These are the questions we receive most often about account rights, data handling, and the terms that govern your use of bpjstoto. Each answer is written to be direct and actionable so you know exactly what step to take.

Yes. Our terms apply to all accounts registered from Indonesia. Whether you are accessing via desktop or mobile in Bandung or anywhere else in the country, the same legal framework governs your account and your transactions.

Access to our services depends on local law. We recommend that you verify the regulations in your specific region before opening an account. Our terms page is updated when jurisdictional conditions change that affect Indonesian users.

Log in to your account and navigate to Settings › Legal & Privacy, then submit a 'Data Export' request. Alternatively, email our compliance desk with your account ID. We process data export requests within 30 calendar days and deliver them securely.

When you close your account, your personal data is flagged for deletion after a five-year retention period required for financial record-keeping. You will receive written confirmation of the scheduled deletion date when your closure request is processed.

No. Payment credentials for DANA, OVO, GoPay, and QRIS are processed entirely by each provider's secure API. We retain only the transaction reference number needed to match a deposit or withdrawal to your account.

Start by contacting our 24/7 live chat and selecting the 'Legal / Compliance' category. If the internal process does not resolve your concern, escalate via written email to the compliance desk. All dispute communications are logged and time-stamped.

We send a notification to your registered email address at least seven days before any major change to our terms takes effect. Minor clarifications may be made without prior notice but are always dated in the change log at the bottom of this page.

Related Pages

bpjstoto Indonesia About Us Register FAQ bpjstoto Login