Reference

How tot21 Handles Your Personal Information

Your account data, payment details and device activity are handled with a clear set of rules — not vague promises.

Account data protectionDANA, OVO, GoPay wallet privacyCookie and device transparencyYour right to access or delete data
tot21 How tot21 Handles Your Personal Information
PRIVACY CONTACT

Reach Us About Your Data

If you want to review, update or remove personal information tied to your account, our support team handles privacy requests directly. You can reach us through live chat, email or the in-account help form — all three paths route to the same privacy queue so your request is not lost in a general inbox.

Live Chat Open the chat icon from your account dashboard. State that your message is a privacy request and a support agent will pick it up from the dedicated queue.
Email Support Send your data access or deletion request to our support email. Include your registered account name so we can locate and verify your record without delay.
In-Account Help Form Log in, go to the Help section, and submit a form under the Privacy category. This method automatically attaches your account ID, which speeds up verification.
DATA PRACTICES

How We Keep Your Account Data Safe

Security is built into how we store and process account data, not added as an afterthought. Encryption covers data in transit and at rest, wallet references from DANA, OVO and GoPay are stored as tokenised identifiers rather than raw numbers, and access to your account records is restricted to verified staff roles only. You can review the specific practices below.

Encryption in Transit All data moving between your device and our servers travels over SSL. This covers login, wallet linking for DANA, OVO and GoPay, and every account action you take mid-session.
Cookie Controls We use session cookies for login continuity and analytics cookies to track page performance. You can manage cookie preferences from your browser settings at any time without losing your account.
Data Retention Rules Account data is kept while your account is active and for the period required by applicable financial rules. Once a deletion request is verified and processed, non-mandatory data is removed from live systems.
Requesting Changes Submit a request through live chat, email or the in-account form. We verify your identity first — usually by confirming details on your registered account — then act on the request within the period stated in our response.

Common Questions About Your Privacy

These are the questions we hear most often about account data, cookies and privacy rights. If your question is not here, the support channels above connect you directly to our privacy queue.

We collect your name, contact details, login credentials and any wallet reference you use — DANA, OVO or GoPay — when linking a payment method. Device and session data is also logged for security.

Wallet identifiers are stored as tokenised references, not raw account numbers. They are retained for the period required by applicable financial-service rules and are not shared with advertisers.

Submit a data access request via live chat, email or the in-account Help form under the Privacy category. We verify your identity first, then provide the information within the timeframe stated in our reply.

Yes. Send a deletion request through any of our support channels. We remove non-mandatory data from live systems after verifying your identity; some records are kept as required by financial regulations.

We use session cookies for login continuity and analytics cookies to measure page performance. You can adjust or block cookies through your browser settings without affecting your account login.

We do not sell your data or share it with advertisers. Data may be passed to payment processors like DANA, OVO and GoPay only as needed to complete your transaction, and to service providers under confidentiality agreements.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.