Definitions
The terms we use here — account, session, processor, supported region — mean the same thing on our terms page and our cookie page. We don't redefine them mid-document.
This is the plntogel privacy policy page. We wrote it so you can see, in plain language, what we collect when you open an account, how long we...
We collect what we need to run your account: contact details you give us at sign-up, device and session signals while you're in the lobby, and payment references when you top up through DANA, OVO, GoPay or QRIS. We don't sell your data. We share it only with processors who help us deliver the service, and only where local law permits. You
can ask us for a copy of your record, request a correction, or close your account — and we'll action it within the windows our supported regions require. Retention is tied to your account lifecycle plus the minimum window our compliance team is obliged to keep.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Email our privacy desk for access, correction or deletion requests tied to your plntogel account. We acknowledge within one working day and resolve inside the window our supported regions require.
Open the chat bubble inside your lobby session and ask for the privacy team directly. The agent routes your ticket without you needing to repeat your full account history each time.
For formal complaints or regulator-facing matters, our data protection contact is reachable through the same channel — flag the message as a privacy escalation and it lands on the right desk.
We re-read this policy every quarter against Indonesian data rules and our processor list. If something material shifts, the version date at the foot of the page moves and we flag it inside your account.
The policy has internal owners on our compliance and engineering teams. It isn't a template we pasted in — each clause maps to a real control somewhere in how plntogel actually runs.
We keep a current register of who processes data on our behalf, what they touch, and where they sit. You can request the relevant entries by writing to our privacy inbox.
We ask for the smallest data set that lets your account work — identity, contact, device session, payment reference. Anything beyond that is opt-in and clearly labelled when we ask.
Your session and payment references move over encrypted channels between your device, our lobby and the DANA, OVO, GoPay and QRIS rails you choose at top-up.
Internal access to your account record is logged. Our team can show, on request, who looked at what and why, which keeps the privacy promise we make here accountable.
The terms we use here — account, session, processor, supported region — mean the same thing on our terms page and our cookie page. We don't redefine them mid-document.
Retention numbers stated here match the figures in our terms. If one page changes, both move together in the same release.
The privacy inbox listed here is the same address printed on our cookie notice and our complaints page, so you never chase the right desk.
Every legal page on plntogel carries a footer version date. When we publish, all sibling pages update in lockstep so you can trust the timestamp.
We use the same phrasing — supported regions, where local law permits — across this policy, our terms and our account-closure flow. No mixed signals.
Access, correction, deletion and portability rights are described in identical wording wherever they appear, so the meaning doesn't drift between pages.
Our processor register is referenced from this policy and from the cookie page using the same identifier, so a single request fetches the full picture.