maxsimtoto Privacy Policy – How We Protect Your Data
This privacy policy transparently explains how maxsimtoto collects, uses, stores, and protects users' personal information in Indonesia. We are committed to maintaining user trust through strict data security standards.
Last updated: 2025
1. Data We Collect
In order to provide a complete and secure service, maxsimtoto collects several categories of information from users who register and use the platform. Data collection occurs both directly and automatically during active usage sessions.
Account information includes full name, date of birth, email address, phone number, and a copy of the identity document (national ID) provided during the registration and KYC verification process. This data is required to verify user identity and ensure that only individuals aged 18 and above are able to use the service.
Device and browser data is collected automatically each time a user accesses the platform, including device type, operating system, browser version, IP address, and time zone. This information is used to optimize page display and detect unusual activity that could potentially threaten account security.
Payment information related to deposits and withdrawals in Indonesian Rupiah (IDR)—such as account holder name, destination account number, or digital wallet identifier—is recorded for transaction processing and internal financial auditing purposes. maxsimtoto does not store users' PIN numbers or digital wallet passwords.
Usage data such as pages visited, categories opened, session duration, and click patterns are collected anonymously for the purposes of platform performance analysis and overall improvement of the user experience.
2. Purpose of Data Use
Every piece of data collected by maxsimtoto has a specific and proportionate purpose. We do not use user data for purposes beyond those stated in this policy without the explicit consent of the user concerned.
- Processing account registration, identity verification, and user profile management.
- Facilitating deposit and withdrawal transactions in Indonesian Rupiah (IDR) through available local payment methods.
- Sending technical notifications, policy updates, or relevant service information to registered users.
- Detecting, preventing, and responding to potential fraud, account misuse, or other security threats.
- Improving platform performance based on analysis of anonymized aggregate usage data.
- Fulfilling applicable legal and regulatory obligations, including official requests from competent authorities.
3. Cookies and Tracking Technologies
maxsimtoto uses cookies—small text files stored on the user's device—to enhance platform functionality and deliver a more personalized experience. Cookies allow the platform to remember user preferences, keep login sessions active, and analyze navigation patterns anonymously.
There are two categories of cookies in use: essential cookies which are required for the platform to function properly (such as session and security cookies), and analytics cookies which help us understand how users interact with the pages on the platform.
Users can manage their cookie preferences through their browser settings. Disabling essential cookies may significantly affect platform functionality, including the ability to remain logged into an account. Disabling analytics cookies will not affect access to the platform's core services.
The platform does not use third-party cookies for targeted advertising or cross-site tracking purposes. All cookie data is managed internally and is not sold to any party.
4. Data Storage and Security
All user data is stored on server infrastructure protected with 256-bit SSL (Secure Sockets Layer) encryption—the same standard used by banking institutions and leading e-commerce platforms in Indonesia. This encryption ensures that data cannot be read by unauthorized parties, whether it is being transmitted or stored.
Access to the user database is strictly limited and granted only to maxsimtoto team members who require it to carry out legitimate operational duties. All access is recorded in system logs that are monitored regularly to detect anomalies.
User data will be retained for as long as the account remains active or as long as necessary to fulfill applicable legal obligations. Once an account is closed and all obligations have been resolved, data that is no longer required will be permanently deleted from the system within a reasonable timeframe in accordance with internal procedures.
5. Sharing Data with Third Parties
maxsimtoto does not sell, rent, or trade users' personal data to third parties for commercial purposes. User data may only be shared in the limited situations and conditions described below.
Technical service providers: Certain third parties—such as cloud infrastructure providers, local payment gateways (for example, those supporting DANA, GoPay, or bank transfers), and identity verification systems—may receive data necessary to perform their service functions. These parties are bound by confidentiality agreements and are prohibited from using that data for any purpose other than what has been agreed upon.
Legal obligations: maxsimtoto may disclose user data when required by law, court order, or an official request from a competent authority in Indonesia. In such circumstances, the platform will endeavor to notify the user to the extent permitted by applicable regulations.
Outside of the two conditions above, no user data is shared with any third party without the explicit consent of the user concerned.
6. User Rights Over Personal Data
maxsimtoto recognizes and respects users' rights over their personal data. The following are rights that users may exercise at any time by contacting the platform's support team through the official channels available after logging in.
- Right of access: Users have the right to request a copy of the personal data the platform holds about them.
- Right to rectification: Users have the right to request correction of data that is inaccurate or incomplete.
- Right to erasure: Users may request deletion of their personal data, provided there is no legal obligation or active dispute requiring that data to be retained.
- Right to restrict processing: Users may request that the use of their data be restricted under certain conditions, for example while a dispute is in progress.
- Right to data portability: Under certain conditions, users may request their data in a machine-readable format for personal use or transfer to another service.
Every data rights request will be acted upon within a reasonable timeframe. The requester's identity will be verified before data is provided or modified, in order to prevent unauthorized access.
For further questions about privacy or to submit a data-related request, users can also find additional information on the platform's FAQ page.
7. Policy Changes and How to Contact Us
maxsimtoto reserves the right to update this privacy policy at any time to reflect changes in service practices, legal requirements, or platform technology developments. Any material changes will be communicated to users via a notice on the platform or through their registered account.
Users are advised to check this privacy policy page periodically. The date of the most recent update is always shown at the top of this document so users can tell whether anything has changed since their last visit.
Continued use of the platform after an updated policy has been published will be considered acceptance of those changes. If a user does not agree with the changes made, they have the right to stop using the service and request account closure.
To submit questions, personal data requests, or privacy concerns, users may contact the maxsimtoto support team through the official communication channels available within the platform after logging in. Support email address: [email protected] (for reference only, not an active link).
This privacy policy is written in English and applies specifically to users accessing the maxsimtoto platform from Indonesia. This version is the official version in effect.