Reference

How We Handle Your Legal Rights

We keep our legal position straightforward so you know exactly where you stand. Access to koitoro depends on local law and eligible regions, and we outline every policy detail here so you can make informed decisions about your account and data.

Jurisdiction-Dependent AccessData Handling TransparencyAccount Policy ClarityCookie DisclosureContact Paths Open
koitoro How We Handle Your Legal Rights
DATA AND ACCOUNT SECURITY

How We Protect Your Information

Your data sits behind layered protections and clear internal rules. We handle cookies, account credentials and payment verification with specific practices rather than vague promises — each item below describes exactly what happens with a particular category of your information when you interact with koitoro.

Cookie Categories

We use session cookies for login persistence, analytics cookies to understand page flow, and fraud-detection cookies that flag unusual account behaviour. You can adjust non-essential cookie preferences through the banner shown on first visit.

Payment Data Handling

Transaction details from DANA, OVO or GoPay are encrypted in transit and at rest during processing. Once a deposit or withdrawal completes, raw payment credentials are purged from active storage and only a transaction reference ID is retained.

Account Credential Security

Passwords are hashed using a one-way algorithm before storage. We never store or display your password in plain text. OTP verification adds a second layer when you access your account from a new device or browser.

Data Retention Policy

We retain account data for the duration of your active membership plus a defined wind-down period required by applicable law. After that window closes, personal data is anonymised or deleted from our systems permanently.

Your Data Rights

You can request a full export of the personal data we hold on your account or ask for deletion of non-essential records. Submit either request through live chat or email and we process it within the timeframe stated in our terms.

Who to Contact for Changes

If you want to update personal details, correct inaccurate data or withdraw consent for optional processing, reach out via live chat or email with your account identifier. Changes to core account data require identity verification before we proceed.

POLICY CONTACT PATHS

Reach Us About Legal Matters

When you have a question about how a policy applies to your account or need to exercise a data-related right, we keep channels open. Our support team handles legal queries with the same priority as wallet or access issues, and we route policy requests to the relevant internal desk without bouncing you between agents.

Live Chat Open a live chat session from any page on the site. Legal and policy questions are flagged internally so the agent handling your session has context on data requests, account restrictions or terms clarification before responding.
Email Channel Send your request by email and include your registered account identifier. We respond to legal and data-related emails with a confirmation receipt, then follow up with the substantive answer once the internal review is complete.
Account Dashboard Notice Check notifications inside your account dashboard for policy updates, data request confirmations and terms change alerts. Every action we take on a legal query generates a timestamped record visible in your account history.

Common Legal and Policy Questions

Below are the questions we receive most often about our legal terms, data practices and account policies. Each answer reflects how things actually work on koitoro rather than generic legal language.

Yes. Availability is determined by local law in your region. We do not claim universal access, and if your jurisdiction restricts services like ours, you may not be able to register or use certain features. Check your local regulations before creating an account.

We collect the information you provide at signup — typically your name, email, phone number and payment method details for DANA, OVO or GoPay. We also log device and browser data for security purposes. Nothing beyond what is needed to run your account.

Session cookies keep you logged in. Analytics cookies help us see which pages load slowly or get skipped. Fraud-detection cookies watch for unusual patterns like rapid location changes. You can disable non-essential cookies through the preference banner without losing core functionality.

You can. Send a deletion request through live chat or email with your account identifier attached. We process deletion of non-essential data within the timeframe stated in our terms. Some records may be retained longer where local law requires it.

Payment credentials travel through encrypted channels during every transaction. Once the deposit or withdrawal settles, raw payment data is purged from active systems. Only a reference ID remains on file so you can track transaction history in your dashboard.

We send a notification to your registered email at least seven days before any terms change that affects your rights takes effect. The same update appears in your account dashboard notifications so you have two channels of awareness.

We do not sell or share personal information with unrelated third parties for their own marketing. Data may be shared with payment processors like DANA, OVO or GoPay strictly to complete your transactions and with fraud-prevention services to protect your account.

Open a live chat session or send an email with your account identifier and the correction you need. Changes to core data like your name or linked payment method require identity verification — we walk you through the steps once you make the request.

After a defined inactivity period, your account enters a dormant state. Personal data is retained for the legally required wind-down window, then anonymised or deleted. You can accelerate this by submitting a formal deletion request at any time.

If any provision in our terms conflicts with consumer protection rules or data privacy regulations applicable in your region, the local rule prevails to the extent required. We adjust our obligations accordingly without needing a separate request from you.