ontogel Platform Privacy Notice

When you open an ontogel account, verify your identity with a national ID and selfie, and deposit via DANA or a e-wallet virtual account, we collect information about you. This page describes what we collect when you use ontogel and how we keep that data protected. We do not sell your data to advertisers or brokers; we retain it only to operate our service, comply with local financial regulations, and resolve disputes.

Our privacy practice is straightforward: we collect only what we need, we store it securely, and we give you clear rights to access and delete it. We are transparent about who can see your data and when. If you have questions about how ontogel handles your information, this notice answers them. If something is unclear, our support team can explain further.

What we collect and how we use it

We collect your email address, password hash, name, date of birth, national ID number, and a live selfie photograph during account registration. We use your email to send account updates and withdrawal confirmations. Your password is hashed immediately and never stored in plain text. Your national ID and selfie are used only for identity verification; we do not share them with third parties unless required by law. If you update your payment method—switching from DANA to e-wallet, for example—we record that change in your account history. We retain this record for seven years to satisfy Indonesian financial compliance requirements.

We collect transaction data every time you deposit or withdraw. If you fund your ontogel account via mobile banking, we see the amount, the timestamp, and your local payment wallet identifier. If you use online payment, e-wallet, mobile banking, local payment, or a online payment, e-wallet, mobile banking, or local payment virtual account, we record the same details. We do not charge fees on these transactions, but we do log them. Our payment processors—the third-party companies that handle online payment transfers, e-wallet routing, and virtual-account settlements—may retain their own copies of these records according to their privacy policies. ontogel is not responsible for their retention practices. We keep transaction logs for as long as your account is active, plus two years after closure for dispute resolution.

Third-party processors and data location

Our servers sit in Southeast Asia, but some services we rely on are hosted internationally. If you deposit via mobile banking or a local payment wallet, your transaction passes through payment gateways physically located outside Indonesia. These processors are bound by data-processing agreements; they cannot sell your data or use it for their own purposes. We conduct security reviews of all processors before we route payments through them.

Our account databases—containing your email, hashed password, and identity verification status—are encrypted at rest and in transit. We perform daily automated backups. If a data breach occurs, we will notify you and Indonesian regulators within 72 hours as required by law. We carry cyber-liability insurance. ontogel undertakes to respond to any unauthorized access claims and restore affected accounts. We do not use your data to build marketing profiles. We do not sell anonymized data sets. Your information is used only to serve your account and comply with legal obligations.

Your rights and our commitments

You have the right to access all data ontogel holds about you, download it in machine-readable form, correct inaccuracies, and request deletion. To exercise these rights, log into your account and use the "Data & Privacy" menu. Most requests are processed within 14 days. If your account is closed—whether you closed it or we closed it due to jurisdiction restrictions—you have 30 days to request a data download. After 30 days, we delete your personal information, though transaction logs are retained for seven years for regulatory compliance. If you request deletion before that window closes, we anonymize your data instead, removing identifiers so the log cannot be traced back to you.

We do not process payments ourselves; we route them through licensed payment processors in Jakarta, Surabaya, Bandung, and other major Indonesian cities. Each processor has its own privacy statement. When you deposit on a holiday like Idul Fitri or Idul Adha, the payment may be delayed by your bank, not by ontogel. Similarly, if you withdraw via BNI around Nyepi, e-wallet's systems may be offline; ontogel's role is to send the withdrawal request to mobile banking, not to control local payment's processing schedule. We are transparent about what we control and what our payment partners control.

This notice was last updated in 2025. We will update it if our practices change. We will notify you of material changes via email. ontogel's commitment is simple: we handle your data as if it were our own, we keep it secure, and we respect your right to know what we hold and how we use it.