megasoto Privacy Policy: How We Handle Your Account Data
This policy explains what data megasoto collects when you access our platform, how we use it, and the choices available to you. Every section here covers our actual data practices — from GoPay transaction records to account session logs — so you know exactly what is stored and why.
Account data handled with care
GoPay, QRIS, LinkAja records kept for your reference
Your rights clearly explained
Contact path available any time
POLICY SCOPE NOTICE
What This Policy Covers and How It Applies
When you open an account on megasoto or complete a transaction using GoPay, QRIS, or LinkAja, we collect certain information to operate your account. This includes your login credentials, the device you use to access the platform, your session activity, and the payment references attached to each transaction. We do not sell this data to outside parties. Payment reference numbers — such as your GoPay receipt ID or QRIS scan confirmation — are stored against your account so you can verify any transaction directly from your account history page. We retain this data for as long as your account remains active and for a reasonable period after closure, as required by the operational and dispute-resolution needs of the platform. Data collected is processed only for the purposes set out here: account management, transaction verification, fraud prevention, and platform security. This policy applies to access from Indonesia where local law permits it. If a provision in this policy conflicts with a legal requirement in your jurisdiction, the applicable law governs. We review this policy periodically; the current version is always the one shown on this page.
GoPay receipt reference
QRIS scan confirmation
LinkAja transaction timestamp
Account session log
Login device record
INSIDE VS OUTSIDE
Where This Policy Applies to Your Activity
Not everything you do online falls under this policy. This section draws a clear line between what megasoto controls and what sits outside our scope, so you can make informed decisions about your data at every step.
Account Access
All login events, session durations and device identifiers recorded during your account activity on megasoto are covered by this policy. You can view your recent session log from the account security tab after login.
Transactions
Payment data from GoPay, QRIS and LinkAja transactions processed through our platform is held by us and is visible in your account transaction history. The e-wallet providers also hold their own records under their separate privacy terms.
Site Content
Interaction data — which pages you open, how long you spend in the lobby — is collected to keep the platform working correctly. This is anonymised at the aggregate level and is not shared in identified form.
Third-Party Services
If you navigate to an external link from our platform, the destination site operates under its own privacy policy. We have no control over third-party data practices and this policy does not extend to those destinations.
YOUR ACCOUNT RIGHTS
Practical Steps You Can Take Under This Policy
Your data rights are real actions, not just words on a page. You can review the personal data attached to your account by heading to the profile section after login — your registered contact details, linked payment methods and recent transaction references are all visible there. If something looks wrong, the account details page lets you submit a correction request directly. For anything that cannot be changed through the account interface — such as a dispute over a transaction record or a request to understand what data we hold on you — our support team is the right path. We respond to data queries through the same contact channels we use for account support. Where local law gives you a specific right regarding your data, we aim to honour it within the scope of what our platform can action. Availability of specific rights depends on your jurisdiction and the applicable law.
Review Your Records
Log in and open the profile section. Your contact details, linked payment references — including any GoPay or QRIS receipt IDs — and account history are displayed there for your review.
Correct Account Details
If your registered email, phone number or linked wallet details are incorrect, use the account details page to submit a correction. Some fields require identity verification before the change is applied.
Raise a Data Question
Questions about what specific data we hold, why we hold it, or how long it will be kept can be directed to our support team. State your registered account email so we can locate your records accurately.
Request Support
For escalated data concerns — including requests related to data deletion where applicable law supports it — contact us through the live chat or email path shown in the support section below.
PRIVACY CONTACT PATHS
How to Reach Us About This Policy
If you have a question about your data or want to act on a right described in this policy, the three contact paths below are the ones to use. For urgent account or transaction concerns tied to a GoPay, QRIS or LinkAja record, live chat is usually the fastest path. Email is better for written data requests where you want a record of the exchange.
Live Chat
Open the chat icon from any page on the platform. State that your query is a privacy or data question and our support team will route it to the right person.
Email Support
Send your data question to our support email address shown in the account help section. Include your registered account email and a clear description of your request so we can locate your records.
Account Help Page
The help page in your account dashboard lists current contact options and any posted updates to how we handle data queries. Check there first if you are unsure which path to use.
HOW WE HANDLE DATA
Our Approach to Data, Cookies and Account Security
Data handling at megasoto is built around four practical commitments: we collect only what we need to operate your account, we keep it only as long as we have a legitimate reason to, we do not pass identified data to advertisers, and we give you a visible path to review or question what we hold. Cookies on the platform are used for session management and basic analytics — they help the lobby remember your preferences between visits. You can manage cookie settings through your browser. Account security measures are applied at the session level; if you notice an unrecognised login event in your session log, contact support immediately using the live chat path.
Data Collection
We collect account registration data, session activity and payment reference numbers — including GoPay, QRIS and LinkAja records — only for the purposes described in this policy. No additional data is collected without a clear operational reason.
Cookies and Session Data
Session cookies keep you logged in across page loads in the lobby. Analytics cookies help us understand how the platform is used in aggregate. Both types can be managed through your browser settings; disabling them may affect platform behaviour.
Retention Period
Account data is kept while your account is active. After closure, we retain the minimum data needed for dispute resolution and legal compliance. Payment reference records such as GoPay receipts follow the retention period applicable at the time of the transaction.
Policy Updates
When this policy changes, the updated version replaces the previous one on this page. We do not send automatic notifications for routine updates; check this page periodically to stay current. Your continued use of the platform after a change is posted means you have seen it.
POLICY FAQ
Questions About Your Privacy on megasoto
The questions below cover what real account holders ask us about their data, their rights and how this policy works in practice. If your question is not listed here, use the live chat or email contact path described in the support section above.
What personal data does megasoto actually collect from me?
We collect the information you provide at registration — email address, phone number and preferred contact method — plus session and device data generated when you log in. Payment reference numbers from GoPay, QRIS and LinkAja transactions are also stored against your account for verification purposes.
Can I see all the data held on my account?
Yes. After login, the profile and transaction history sections show your registered details and all payment references on record. For a more complete data summary, submit a request through our support email and we will compile what we hold on your registered account.
How do I correct wrong information in my account?
Open the account details page after login. Most contact details can be updated directly from there. Fields that affect payment processing — such as a linked GoPay or LinkAja number — may require identity verification before the change is applied. Contact support if the field you need is not editable.
Does megasoto share my data with third parties?
We do not sell your data. Data is shared only where strictly necessary to process your transactions — for example, with your e-wallet provider when you initiate a GoPay or QRIS payment — or where required by applicable law. In those cases, only the minimum data needed for the specific purpose is passed on.
How long is my data kept after I close my account?
Once your account is closed, we retain the minimum records needed for dispute resolution and to meet any obligations under applicable law. Payment reference data — including QRIS and GoPay receipts — is retained for the period stipulated by the relevant financial record-keeping requirements in your jurisdiction.
What are my rights if I am in Indonesia?
Your data rights depend on the laws applicable in your jurisdiction. Where local law grants rights such as access, correction or deletion of personal data, we aim to honour them within what our platform can action. Submit your request through the support email path with your registered account email included.