piontoto Privacy Policy: How We Handle Your Account Data
This page explains exactly how piontoto collects, stores and uses the information tied to your account — including transaction records from DANA and ShopeePay, device access logs, and your contact details. We keep this policy clear so you know what we hold, why we hold it, and how to reach us if anything needs to change.
Account data protection
DANA & ShopeePay transaction records
Your right to review and correct
Direct policy contact available
POLICY POSTURE
What This Policy Covers and How It Works
When you open an account on piontoto, we collect the information needed to run your session and keep your records accurate. This includes your registration details, the payment method you use — such as DANA or ShopeePay — and the transaction history attached to your wallet. We also log device identifiers and browser session data to maintain account continuity across your phone and any other device you use to access the lobby. We do not sell your personal data to third parties. Where we share data — for example, with payment processors handling a DANA or ShopeePay transaction — we share only what that processor needs to complete your request. Any such sharing is governed by the processor's own terms, which we recommend you review. This policy applies to your use of piontoto and is subject to the laws of the jurisdiction where you access the service. Availability depends on local law and eligible regions. If a provision in this policy conflicts with a local legal requirement that applies to you, the local requirement takes precedence. We update this policy when our data practices change; the current version is always the one shown on this page.
DANA transaction records
When you transact via DANA, we retain a record of the amount, timestamp and status. This record is visible in your account dashboard after login and is kept for the period required by our data retention practice.
ShopeePay session data
ShopeePay payment events are logged against your account ID. We do not store your ShopeePay credentials; the payment processor handles authentication on its own platform, separate from your piontoto login.
Device and access logs
Each login generates an access log tied to your device type and session token. We use this to support account recovery and to flag unusual access patterns that may indicate an unauthorised attempt.
Jurisdiction dependency
This policy is valid where access to piontoto is permitted under local law. If you are accessing from a region where the service is not available under local regulation, this policy still governs how we handle any data you have already submitted.
INSIDE AND OUTSIDE
Where This Policy Applies and What It Does Not Cover
Not everything you encounter while using your account falls under this policy. We want to be clear about what we are responsible for and where another party's terms apply instead. This helps you know exactly who to contact when you have a question about your data.
Account access and login data
Any information you submit when creating or accessing your piontoto account — email address, phone number, password hash and device session — is fully within the scope of this policy. You can review and update these details from your account settings page.
Payment transactions via DANA or ShopeePay
Transaction records processed through DANA or ShopeePay appear in your account history and are covered here. However, the payment processor's own privacy terms govern how they handle your wallet credentials and authentication data on their platform.
Site content and game lobby
Game titles and lobby content are delivered by studios including Pragmatic Play, Microgaming and Spadegaming. These studios supply the game content; they do not access your personal account data, and their content terms are separate from this policy.
Third-party links and services
If you follow a link from piontoto to an external site — including a payment gateway or an identity verification service — that site operates under its own privacy policy. We are not responsible for how third-party sites collect or use your data once you leave our domain.
YOUR CHOICES HERE
Practical Actions You Can Take Under This Policy
You have real, actionable choices about the data we hold on your account. Reviewing your records is straightforward: log in to your account and open the account dashboard, where your transaction history — including DANA and ShopeePay entries — is listed with timestamps and status. If a detail looks incorrect, such as a registered phone number or email address, you can request a correction by contacting our support team directly through the contact path shown in your account settings. If you want to ask what data we hold beyond what appears in your dashboard, send a written request to our policy contact address. We will respond with a summary of the relevant records. Where local law grants you the right to request deletion of certain data, you can raise that request through the same contact path; we will confirm what can be deleted and what must be retained under our legal obligations. We aim to acknowledge all data-related requests promptly, though response times depend on the complexity of the request.
Review your transaction records
Open your account dashboard after login. Every DANA and ShopeePay transaction is listed with its amount, date and processing status. No additional request is needed to see these; they are available to you at any time.
Correct your account details
If your registered email or contact number is wrong, go to your account settings and follow the update fields shown there. For changes that require identity verification, the dashboard will prompt you through the required steps.
Ask about data we hold
Send a written request to our policy contact address if you want a summary of data we hold beyond your dashboard view. We will confirm receipt and respond with the relevant information where we are able to do so under applicable law.
Request data deletion
Where your local law permits deletion requests, contact our support team using the policy contact path. We will confirm which data can be removed and which must remain to meet our legal retention obligations.
REACH OUR TEAM
How to Contact Us About This Policy
If this policy raises a question you cannot answer by checking your account dashboard, there are direct contact paths available. Use the channel that suits the nature of your request — routine account questions are handled fastest through live chat, while formal data requests should go through email so we can keep a written record for you.
Live Chat
Open the live chat from your account page for account-level questions about what data is shown in your dashboard or how a specific DANA or ShopeePay record was logged.
Email — Policy Requests
Send formal data review, correction or deletion requests by email to the address shown in your account settings under Privacy Contact. We keep a written record of all formal requests for your reference.
Account Settings Path
Many data questions can be resolved without contacting us. Log in, open account settings, and follow the privacy or data section shown there to find your records, update contact details or download your transaction history.
HOW WE PROTECT DATA
Data Handling, Cookies and Account Security at piontoto
We take a practical approach to data security at piontoto. Account credentials are stored as hashed values — we do not retain your password in readable form. Session tokens are generated per login and expire when you log out or after a period of inactivity. If we detect a login from an unrecognised device, we flag it in your account access log, which you can check at any time from the security section of your account settings. We use cookies on piontoto to maintain your session state and remember your lobby preferences. You can manage cookie preferences through your browser settings; disabling certain cookies may affect how the lobby loads on your phone or desktop. We do not use advertising cookies to track your activity across other websites. Retention periods for your data depend on the type of record: transaction logs are kept for the period required under applicable financial record-keeping rules, while session logs are held for a shorter period as described in your account dashboard.
Password and credential security
Your password is stored as a one-way hash. We never read or transmit it in plain text. If you forget your password, the reset flow sends a verification link to your registered email address — the process is shown step by step on the reset page.
Cookie use on piontoto
We use session cookies to keep you logged in and preference cookies to remember your lobby layout. We do not drop third-party advertising cookies. You can review and adjust your cookie settings through the browser you use to access the site.
Data retention periods
Transaction records — including DANA and ShopeePay entries — are kept for the period required by financial record-keeping obligations in the applicable jurisdiction. Session access logs are held for a shorter period. The current retention schedule is noted in your account dashboard.
Policy updates
When our data practices change, we update this page and note the revision date at the top of the policy. We do not send automatic notifications for minor changes; check this page periodically if you want to stay current.
POLICY QUESTIONS ANSWERED
Common Questions About Our Privacy Policy
If you have a question about how this policy works in practice, the answers below cover the situations we hear about most often. For anything not covered here, use the contact paths listed in the support section above.
What personal data does piontoto collect when I open an account?
We collect your registration details — email address, phone number and the password hash created at signup. Once you transact, we also log payment method events such as DANA or ShopeePay entries, the amount, timestamp and processing status. Device and session identifiers are logged per login for security purposes.
Can I see all the data piontoto holds about me?
Your account dashboard shows your transaction history and account details after login. For a fuller picture of data held beyond the dashboard, send a written request to our policy contact email address shown in your account settings. We will respond with the relevant records where local law and our obligations allow.
How do I request a correction to my account data?
Log in and go to account settings. You can update your contact email or phone number directly from the fields shown there. If a correction requires identity verification, the settings page will prompt you through those steps. For records you cannot edit yourself, contact support by email with your request.
Does piontoto share my data with third parties?
We share data only where necessary to process your request — for example, passing transaction details to the DANA or ShopeePay processor to complete a payment. We do not sell personal data. Third-party processors operate under their own privacy terms; we recommend reviewing those separately.
How long does piontoto keep my transaction records?
Transaction records are retained for the period required under applicable financial record-keeping rules in your jurisdiction. Session and access logs are kept for a shorter period. The current retention schedule is visible in your account dashboard after login; we update it when our practices change.
How do I request deletion of my data?
Send a written deletion request to the policy contact email shown in your account settings. We will confirm which data can be removed and which must be retained under legal obligations. Availability of full deletion depends on local law and the type of record involved. We acknowledge all formal requests in writing.