Reference

How We Handle Your Data

Open your account and we will show exactly what we collect, why we keep it, and how you can ask for changes when you need them.

DANA / OVO / GoPay / QRISAccount recordsCookie settingsLocal law
piubet How We Handle Your Data
CONTACT ROUTES

Where to Send Privacy Requests

The fastest path is the chat inside your account, because it keeps the request tied to your profile and cuts down on back-and-forth.

In-account chat Use the chat panel after login when you want to ask about access, correction, or deletion. We can match the request to your account faster when you send the registered email and the last payment reference if needed.
Email request Send a privacy request by email if you want a written trail. Include your username, registered email, and a short description of the change, and we will reply through the same address on our file.
Account form Open the request form in your account when you need to change cookie settings, update profile details, or ask about retention. The form helps us route the request to the right team without extra back-and-forth.
HANDLING STANDARDS

How We Protect Account Details

When you log in from Android, iPhone, or desktop, we keep the session tied to that browser or app until you sign out or clear it.

Account data

We keep the details you enter during registration, the contact path you choose, and any profile edits you send later. If you use DANA, OVO, GoPay, or QRIS, we store the reference tied to that request only.

Cookie use

Cookies remember your session, language setting, and the last page you opened so you do not have to start over on mobile. You can clear them in your browser or device settings whenever you want.

Device security

If a sign-in looks unusual, we may ask for a fresh login and a small account check before we change anything. That helps us stop someone else from reading your private details.

Retention

We keep records only as long as we need them for account handling, dispute checks, fraud checks, or legal duties. After that period, we remove or anonymise the record according to the rule that applies.

Correction requests

You can ask us to correct your name, email, or other profile details from the registered address. We will update what we can and explain any field we must keep because local law or audit duty requires it.

Contact route

For any privacy question, use in-account chat or the contact email shown in your account area. We verify identity before we release records or make changes, so the right person controls the request.

Common Questions About Privacy

These are the questions we hear most when you want to know what we collect, how long we keep it, and how you can change it. The short answer is that we keep only the details needed for your account, payment checks, device security, and legal duties, and we act on requests from the registered email or account chat. If access depends on local law, we say so clearly before we change a record.

We collect the details you enter on the form, plus basic device and session logs so we can keep the login flow working. If you use DANA, OVO, GoPay, or QRIS, we also keep the payment reference tied to that request.

Yes. Send the request from your registered email or in-account chat, and tell us which field should change. We can update what we hold when local law allows it, and we will explain any field we must keep.

We keep records only for the time needed for account handling, dispute checks, fraud checks, and legal duties. After that, we delete or anonymise them where the rule in force lets us do so.

No. Cookies remember session state, language choice, and the last page you opened. Payment references stay in the account record, not in the browser cookie, so clearing cookies does not erase the transaction log.

Use in-account chat after login or send the form from your account area. Include your registered email and a short description of the change so we can match the request quickly and keep the thread on file.

Access depends on local law and is available only where local law permits. If we can share the record, we do it through the account channel after identity checks, so the right person receives it.