Reference

How nestoto Handles Your Personal Information

When you open an account or fund your wallet via DANA, OVO, or GoPay, nestoto collects only what it needs to run your account securely.

Account data kept secureDANA, OVO, GoPay transaction recordsNo data sold to third partiesYour right to request deletionIndonesia-region policy scope
nestoto How nestoto Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Have a question about what we hold on your account, or want to update something? Our support team handles privacy requests through the channels below. For account-related data queries, include your registered email and the wallet type you use — DANA, OVO, or GoPay — so we can locate your record quickly and respond without unnecessary back-and-forth.

Live Chat Support Reach the support team directly through the live chat widget in your account dashboard. Privacy and data requests are handled by the same team, no separate queue needed.
Email Privacy Desk Send your data access or correction request to our dedicated privacy email. Include your registered mobile number and wallet type so we can pull the right account record.
Account Help Centre The Help Centre covers step-by-step instructions for submitting a data request, updating contact details, or asking about how your GoPay or OVO transaction history is stored.
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

Your account security is not a checkbox item for us. We apply encryption at the point your data is submitted — whether that's a login event, a DANA deposit confirmation, or a support message — and we limit internal access to your personal record based on role. Here is how each area of data handling works in practice.

Encryption and Access Control All data transmitted between your device and our servers is encrypted. Internal staff access to personal account records is role-restricted and logged — not open to the whole team.
Cookie and Session Data We use session cookies to keep you logged in and functional cookies to remember your preferred language and wallet. No advertising cookies are placed without your acknowledgement.
Retention and Deletion Account data is held while your account is active and for a period after closure as required by applicable rules. You can request deletion once no outstanding transactions or obligations remain.
How to Request Changes Submit a correction or deletion request via live chat or our privacy email. We aim to confirm receipt promptly and complete straightforward requests within the timeframe our policy allows.

Common Questions About Your Privacy Rights

These are the questions our account holders ask most often about how their data is handled. If your question is not here, the support team can answer it through live chat or the privacy email desk.

We collect your name, email, mobile number, and the e-wallet you register — DANA, OVO, or GoPay. Device and session data is also logged for security monitoring.

We do not sell your data. Payment processors and fraud-detection services receive only what they need to do their job, and they operate under strict confidentiality agreements with us.

Yes. Submit a data access request via live chat or our privacy email. Include your registered email and wallet type so we can locate your record and respond accurately.

We keep your record for a retention period after closure as required under applicable rules in eligible regions. Once that period ends and no obligations remain, deletion can be completed.

No full wallet credentials are stored on our servers. We keep only the transaction reference generated at the point of deposit — enough to reconcile your account, nothing more.

Contact us through live chat in your account dashboard or via the privacy email desk. We confirm receipt and handle straightforward corrections within the timeframe set out in this policy.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.