Reference

Your Rights and Our Legal Commitments

m3toto login operates under a defined legal framework that governs how your account, data, and transactions are handled — all subject to where local law permits.

Jurisdiction-Aware TermsData Retention PolicyDANA & OVO ComplianceAccount Security StandardsGoPay & QRIS Coverage
m3toto login Your Rights and Our Legal Commitments
LEGAL CONTACT PATHS

Reach Our Legal and Compliance Team

Team online

Live Chat — Legal Queries

Our live-chat window handles account-related legal questions daily from 07:00 to 23:00 WIB. Connect directly from your account dashboard; average response time is under three minutes during staffed hours.

Email — Data and Policy Requests

Send formal data-access, correction or deletion requests to our compliance address. We acknowledge every submission within one business day and resolve standard requests within seven calendar days of receipt.

WhatsApp — Account Rights Line

For Indonesian account holders in Bandung or anywhere else in the country, our WhatsApp line is open from 08:00 to 22:00 WIB and handles rights-related account queries without routing you through a general queue.

ACCOUNT SECURITY PRACTICES

How We Protect Your Data and Your Account

Every measure below is applied at the account level — not just at the network edge. We combine technical controls with clear internal policies so that your personal data and payment records…

Encrypted Account Storage

All account credentials and personal data are stored with encryption at rest. We rotate encryption keys on a defined schedule, and no staff member can view raw passwords — only hashed values are accessible for authentication checks.

Cookie and Tracking Policy

We use session cookies strictly for login continuity and fraud detection. Analytics cookies are separated and you may opt out via the cookie preference panel in your account settings without affecting your lobby access.

Data Retention Schedule

Transaction records — including DANA, OVO, GoPay and QRIS deposits — are retained for the period required by applicable Indonesian financial regulation. Records beyond that window are deleted on a rolling basis, not held indefinitely.

Right to Access and Correction

You may request a full export of your account data at any time. Corrections to inaccurate personal information are processed within seven calendar days. Submit requests through live chat or our compliance email, both staffed during business hours.

Third-Party Data Sharing Limits

We do not sell your personal data. Third-party access is limited to payment processors — DANA, OVO, GoPay, QRIS — and identity-verification partners operating under contractual data-protection obligations aligned with our own policy.

Account Security Alerts

Any login from an unrecognised device triggers an immediate alert to your registered contact. You can review active sessions from the security tab in your account and terminate any session that you did not authorise, within seconds.

Legal Terms — Answers to What You Ask Most

The questions below reflect what Indonesian account holders ask us most often about their legal rights, data handling and account conditions. If your question is not covered here, our live-chat team is available daily until 23:00 WIB.

Access depends on local law. We encourage you to check your regional regulations before opening an account. Our terms clearly state which features are available where local law permits, and we update these conditions when regulations change.

Submit a data-access request via live chat between 07:00–23:00 WIB or send an email to our compliance address. We acknowledge within one business day and deliver the export within seven calendar days of verifying your identity.

Transaction records from DANA, OVO, GoPay and QRIS are retained for the period required by applicable Indonesian financial regulation. Once that period ends, records are deleted automatically on our rolling deletion schedule.

When you close your account, we retain only the records required by law — primarily payment and identity data. All other profile information is deleted within 30 days of your confirmed account closure request.

Yes. Contact us via live chat or compliance email with the correction details and a valid identity confirmation. We process standard correction requests within seven calendar days and confirm the change to your registered contact.

We share data only with payment processors — DANA, OVO, GoPay, QRIS — and identity-verification partners. All third parties operate under contracts that require data-protection standards consistent with our own policy. We do not sell your data.

Any material change to our terms is communicated to your registered email or WhatsApp contact before the update takes effect. Minor clarifications that do not affect your rights are noted in the changelog on this legal page.