Reference

How bolabareng Handles Your Personal Data

Your account data, payment details, and activity on bolabareng are handled with a clear set of rules — what we collect, why we collect it, and how long we keep it.

Data collected only for account and wallet purposesDANA, OVO, GoPay payment data kept secureYou can request data access or deletionNo data sold to third partiesCookie use explained clearly
bolabareng How bolabareng Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you have a question about your personal data — what we hold, how it is used, or how to request changes — our support team handles privacy requests directly. You can reach us through live chat inside your account, by email, or via the help form on the contact page. For account data deletion requests or objections to how your data is processed, written contact through email or the help form is the clearest path, as it creates a record we can act on.

Live Chat Open your account and use the live chat icon to connect with our support team. Available around the clock, this is the fastest path for general privacy questions, including questions about what data we hold on your account.
Email Support For formal data requests — access, correction, or deletion — send us an email with your registered account details. We will confirm receipt and work through your request in line with applicable local requirements.
Help Form The contact form on our help page lets you describe your privacy concern in detail. Select the data privacy category when submitting so your request reaches the right team without unnecessary back-and-forth.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Data security is built into how bolabareng operates, not added as an afterthought. From the moment you register an account and link your DANA, OVO, or GoPay wallet, the data flowing through our platform is handled with access restrictions, encrypted connections, and internal controls that limit who can see what. The sections below cover the six core areas of our data handling practice — what we do, why, and what it means for your account.

Encrypted Connections

Every connection between your device and our platform uses SSL encryption. This covers your login, your account settings, and any transaction data sent when you deposit or withdraw via DANA, OVO, or GoPay. Data in transit is not readable by third parties on the same network.

Cookie Use

We use cookies to keep your session active, remember your login state, and understand which parts of the account flow work well. We do not use cookies to build advertising profiles. You can manage cookie preferences through your browser settings, though some account functions require session cookies to work properly.

Account Security

Login attempts are monitored for unusual patterns — multiple failed attempts, logins from unfamiliar devices, or access from regions inconsistent with your account history. If something looks off, we may send an OTP verification to your registered contact before allowing access to continue.

Data Retention

We keep your account data while your account is active. Transaction records — including DANA, OVO, and GoPay payment history — are retained as long as required under applicable local law. When your account is closed and the retention period ends, data is deleted or anonymised according to our standard process.

Your Access Rights

You can request a copy of the personal data we hold on your account. You can also request corrections if something is inaccurate, or ask us to delete data where we have no legal obligation to retain it. These rights apply where local law and eligible regions permit, and we respond to requests through our email support channel.

Third-Party Sharing

We share data with payment processors like DANA, OVO, and GoPay only to the extent needed to process your transaction. We do not share your data with advertisers, data brokers, or unrelated commercial partners. Where a legal requirement compels disclosure, we will notify you where permitted by law.

Common Questions About Your Privacy on bolabareng

The questions below cover what Indonesia account holders most often ask about how their data is handled, what rights they have, and how to act on those rights. If your question is not here, the live chat and email channels are the right next step.

We collect your name, contact details, date of birth, and the payment method you register — such as your DANA, OVO, or GoPay account number. We also log your device type and session data when you access the platform, which helps us identify and block unauthorised access attempts.

Payment data is shared only with the relevant payment processor to complete your deposit or withdrawal. DANA, OVO, and GoPay receive only the reference information needed to confirm the transaction. We do not share your wallet details with advertisers, data brokers, or any unrelated third party.

Active account data is held while your account remains open. Transaction records, including payment history via DANA, OVO, and GoPay, are kept for as long as required under applicable local law. Once your account is closed and the required retention window passes, data is deleted or anonymised.

Yes. Send a data access request to our email support channel with your registered account details. We will confirm receipt and provide you with a summary of the personal data held on your account, subject to applicable local law and the requirements of eligible regions.

Submit a deletion request through our email support or the help form, selecting the data privacy category. We will process the request where we have no legal obligation to retain the data — for example, where transaction records must be kept under local law, those specific records may be excluded from deletion.

We use session cookies to keep you logged in and functional cookies to remember your account preferences. We do not use cookies to build advertising profiles. You can manage or disable cookies through your browser settings, though disabling session cookies may affect how your account functions during a visit.

When you close your account, we begin the retention period process. Data no longer needed for legal or regulatory purposes is deleted or anonymised. Transaction records required under applicable local law are kept for the minimum required period, then removed from our active systems.

Login activity is monitored continuously. If an unusual pattern is detected — such as an access attempt from an unfamiliar device or location — an OTP verification step is triggered before access is granted. All connections between your device and our platform are protected by SSL encryption.

Contact our support team via live chat inside your account, or send a written request by email for formal matters. For data correction or objection requests, email is preferable as it creates a documented record. We treat data-handling complaints as priority support tickets.

This policy applies to your use of bolabareng where local law and eligible regions permit access. Availability depends on local law in your region. If you are unsure whether access is permitted where you are — including in cities like Batam or Bandar Lampung — we recommend checking the applicable local regulations before opening an account.