What We Collect and Why It Matters
When you open an account with gelastoto, we collect the information needed to run your wallet, process your DANA, OVO, or GoPay transactions, and keep your login secure. This includes your registered email, mobile number, preferred payment method, and records of deposits and withdrawals linked to
-
1
your account. We also log device and session data — the type of mobile you use, your browser session token, and connection timestamps — so our system can detect unusual activity and protect your account from unauthorised access. We do not sell your personal information to
-
2
third parties. Data shared with payment processors like DANA, OVO, and GoPay is limited strictly to what those rails need to complete your transaction. Our data practices apply where local law and eligible regions permit, and availability of certain features depends on applicable local regulations in
-
3
Indonesia. If you access the platform from Tangerang, Depok, or anywhere else in Indonesia, the same data rules apply to your account. Retention periods vary by data type: transaction records are held for the period required under applicable regulations, while session logs are cleared on a
-
4
rolling schedule. You can ask us to review what we hold at any time via our support channels.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.