ilmototo Privacy Policy: How We Handle Your Account Data
This page explains what data ilmototo collects when you use our platform, how we store it, and what choices you have over your own records. Our approach is straightforward — we collect only what we need to run your account, process transactions through OVO, QRIS, and Bank Transfer, and keep your sessions secure across devices. Availability of our services depends on local law and eligible regions in Indonesia.
Account Data Protected
OVO, QRIS, Bank Transfer Context
Your Rights Explained
Indonesia Region Coverage
POLICY POSTURE EXPLAINED
What Data We Collect and Why
When you open an account with us, we collect the registration details you provide — email address, chosen username, and the contact information needed to verify your identity and process withdrawals. Each time you log in, we record session data including your device type, IP address, and browser environment; this helps us detect unusual access patterns and keep your account secure. Transaction records tied to OVO top-ups, QRIS scan deposits, and Bank Transfer movements are stored for as long as your account remains active and for a further period required by applicable financial record-keeping standards. We do not sell your personal data to third parties. We may share limited data with payment processors — specifically the rails you use: OVO, QRIS, and Bank Transfer — solely to complete the transaction you initiated. Any such sharing is governed by those processors' own privacy terms, which we encourage you to review. Cookie data and usage logs help us improve how the account dashboard and deposit flow perform on your device; you can adjust cookie preferences through your browser settings. The precise retention period for each data category depends on the regulatory requirements applicable in your eligible region. If you have questions about a specific category, reach our support team through the contact paths listed on this page.
OVO
When you top up via OVO, transaction identifiers and amounts are logged to your account history. We share only what OVO needs to complete the transfer — no other personal fields are passed beyond the transaction reference.
QRIS
QRIS scan deposits generate a transaction record in your account dashboard. The QR session data is processed by the QRIS network; we retain the confirmed deposit amount and timestamp on our side for your transaction history.
Bank Transfer
Bank Transfer movements require us to log your declared bank details for reconciliation. These are encrypted at rest and accessed only when a withdrawal or deposit query needs to be resolved by our accounts team.
Account Sessions
Login sessions record device type and IP to flag suspicious access. You can review active sessions in your account security panel and end any session you do not recognise from there.
POLICY SCOPE DEFINED
Where This Policy Applies
This policy covers the data ilmototo collects and processes directly. It does not extend to third-party services you reach through our platform, whose own policies govern their data practices. Understanding the boundary helps you know exactly what falls under our commitments.
Account Access
Covers all data generated when you register, log in, or update your account profile on ilmototo. This includes credentials, session tokens, and any identity verification records we hold on our own systems.
Transactions
Covers deposit and withdrawal records processed through OVO, QRIS, and Bank Transfer as initiated from your ilmototo account dashboard. The processing networks have their own policies for data on their side of the transaction.
Site Content and Cookies
Covers usage data, cookies, and logs generated by your interaction with our pages and lobby. Cookie preferences can be managed from your browser; some functional cookies are required for your account session to remain active.
Third-Party Services
Does not cover external sites, payment processors beyond the transaction handoff, or any linked service outside the ilmototo domain. Once you leave our platform, the relevant third party's policy applies.
YOUR ACCOUNT RIGHTS
Practical Actions Available to You Under This Policy
You have the right to know what personal data we hold, to correct inaccurate details, and to ask questions about how your information is used. Reviewing your data starts in the account dashboard — your transaction history, session log, and registered contact details are all visible there after login. If something is wrong, you can update most contact and profile fields directly through account settings. For records you cannot edit yourself, such as historical transaction entries or identity verification documents, you can raise a request through our support channel and our team will respond. Data deletion requests are handled in line with the retention requirements applicable in your eligible region; we will confirm what can be removed and what must be kept for compliance purposes. If you believe your data has been mishandled, you have the right to raise that concern with us directly before escalating to any applicable local authority.
Review Your Records
Log in and open the account dashboard to see your full transaction history, active sessions, and registered profile details. Everything we hold that relates to your day-to-day account activity is visible there.
Correct Account Details
Most profile fields — email, contact number, preferred language — can be updated directly in account settings. Changes take effect on your next login session.
Raise a Data Question
If you want to know more about a specific data category we hold, submit a query through our support channel. Include your registered account identifier so our team can locate the relevant records quickly.
Request Support on Deletions
Deletion requests are assessed against retention rules for your region. Contact support with your request and we will confirm within a reasonable period what data can be removed and what must be retained.
CONTACT US DIRECTLY
How to Reach Us About This Policy
Questions about this policy can be sent through the channels below. When contacting us about a data matter, include your registered account email so our team can pull the right records without delay.
Live Chat
Open the live chat panel from any page while logged in to reach our support team. For policy questions, describe your request clearly and include the relevant account email.
Account Help Centre
Navigate to the Help section inside your account dashboard for self-service answers on data access, session management, and transaction records before raising a support ticket.
Support Ticket
For formal data requests — corrections, deletion queries, or detailed access requests — submit a ticket through the support section in your account. Our team will respond with confirmation and next steps.
HOW WE PROTECT DATA
Data Handling, Cookies, and Account Security
We take a practical approach to protecting the data connected to your account. Passwords are hashed and never stored in plain text; session tokens expire automatically after a period of inactivity so that a left-open browser does not leave your account exposed. Transaction data for OVO, QRIS, and Bank Transfer flows is encrypted in transit using standard HTTPS protocols. Cookies used on our platform fall into two categories: strictly necessary cookies that keep your session alive and functional, and analytics cookies that help us understand how the deposit flow and lobby perform on different devices. You can decline analytics cookies through your browser without affecting core account functionality. Retention periods for personal data are set according to the record-keeping requirements applicable in your eligible region — we do not hold data beyond what those requirements demand. To request a change to your stored details or ask about a specific retention period, use the support contact paths shown on this page.
Data Encryption
All data exchanged between your device and our platform travels over HTTPS. Transaction records for OVO, QRIS, and Bank Transfer deposits are encrypted at rest in our database and accessed only when needed to resolve a query.
Cookie Controls
We use strictly necessary cookies for session management and optional analytics cookies to improve platform performance. You can manage your cookie preferences through standard browser settings at any time.
Account Security Panel
Your account security section shows active login sessions and lets you end any session you do not recognise. We recommend reviewing this panel after logging in from a new device.
Data Retention Policy
We retain your data for as long as your account is active and for any further period required by financial or regulatory standards in your eligible region. Contact support to ask about the specific retention period for a data category.
COMMON POLICY QUESTIONS
Frequently Asked Questions About Your Privacy
Below are the questions we hear most often about how ilmototo handles personal data. If your question is not covered here, reach us through the support channels listed above.
What personal data does ilmototo collect when I open an account?
We collect your registration details — email address, username, and contact information — plus session data such as your device type and IP address. Transaction records for deposits and withdrawals through OVO, QRIS, and Bank Transfer are also stored in your account history.
How long does ilmototo keep my personal data?
We retain your data for as long as your account is active and for any additional period required by financial record-keeping standards applicable in your eligible region. If you close your account, we will confirm what can be deleted and what must be kept for compliance purposes.
Can I see and correct the data ilmototo holds about me?
Yes. Log in and open the account dashboard to review your transaction history, session log, and profile details. Most contact fields can be updated directly in account settings. For records you cannot edit yourself, submit a request through our support channel.
Does ilmototo share my data with third parties?
We share limited data only with the payment processors needed to complete your transactions — OVO, QRIS, and Bank Transfer. We do not sell personal data. Each processor handles their portion of the data under their own privacy terms.
How do I request that my data be deleted?
Submit a deletion request through the support ticket channel in your account. Our team will assess it against the retention requirements for your region and confirm within a reasonable period what can be removed and what must be retained for regulatory reasons.
What should I do if I think my account data has been mishandled?
Contact us directly through live chat or a support ticket, including your registered account email and a clear description of the concern. We will investigate and respond. You also have the right to raise the matter with a relevant local authority if you remain unsatisfied after contacting us.
App / Live