Reference

How oyo88 Protects Your Personal Data

Your account data, payment details, and browsing activity on oyo88 are handled under a clear privacy framework designed for Indonesia — covering every transaction you make via DANA…

Data Encryption ActiveQRIS & DANA Transactions CoveredAccount Deletion on RequestIndonesia-Region PolicyCookies Disclosed
oyo88 How oyo88 Protects Your Personal Data
PRIVACY CONTACT PATHS

Switch to the Right Channel for Privacy Requests

If you want to review, correct or remove any personal data we hold, our privacy support team is reachable around the clock.

Live Chat Access live chat directly from your oyo88 account dashboard, available 24 hours a day. A privacy support agent will acknowledge your data request within one business hour during active sessions.
Email Support Send your written data-access or data-deletion request to our privacy inbox. We respond within 24 hours and aim to resolve straightforward requests fully within seven business days, confirming every step by email.
Account Settings Panel Many privacy actions — downloading your data, updating your contact details, or reviewing stored payment methods like OVO or GoPay — can be completed without contacting support at all, directly inside your account settings.
DATA HANDLING PRACTICES

Browse How We Handle Your Account Security

Every layer of our data practice — from the moment you enter your OVO wallet number to the moment a withdrawal clears — follows the same principle: collect only what is necessary…

Encryption at Rest and in Transit

All personal data stored on oyo88 servers is encrypted using AES-256 at rest. Data moving between your browser or app and our servers is protected by TLS 1.3, so your QRIS transaction details and login credentials stay private.

Cookie Use and Your Choices

We use session cookies to keep you logged in, analytics cookies to understand which pages load slowly, and preference cookies to remember your language setting. You can review and withdraw cookie consent at any time through the cookie settings link in the page footer.

Payment Data Handling

We never store your full DANA or GoPay credentials on our own servers. Payment tokens are held by the respective payment processor under their own security standards; oyo88 receives only a masked reference confirming the transaction cleared.

Data Retention Timeline

Active account data is retained for the duration of your account. If you close your account, we delete or anonymise personal data within 90 days, except where a longer retention period is required under applicable Indonesian financial regulation.

Who Can Access Your Data

Inside oyo88, data access is role-restricted. Only fraud-prevention, payments, and compliance staff can view account-level data, and only when a specific operational reason exists. We do not permit marketing teams to access raw personal records.

Requesting Changes or Deletion

You have the right to request a copy of all data we hold about you, correct inaccuracies, or ask for full deletion. Submit the request via live chat or email; we will verify your identity before processing. Availability of certain deletion rights depends on local law.

Open Answers to What You Actually Ask

These are the questions our account holders ask most often about privacy, data storage and their rights on oyo88. If your question is not covered here, live chat or email support can give you a specific answer about your account within 24 hours.

We collect your name, email address, date of birth, and the payment method you register — DANA, OVO, GoPay or QRIS. We also log your IP address and device identifier to protect your account from unauthorised access attempts.

We share data only with the payment processors needed to complete your transactions — for example, the QRIS or DANA networks. We do not sell personal data to advertisers or marketing companies under any circumstance.

Log into your account, go to Account Settings, and select the Data & Privacy panel. From there you can request a full data export. We deliver the file to your registered email address within seven business days.

Contact us via live chat or email with your account username and a deletion request. We verify your identity first, then process the deletion within 90 days. Full deletion availability depends on local law and any outstanding regulatory retention obligations.

After account closure, we anonymise or delete personal data within 90 days. Transaction records may be retained longer where Indonesian financial regulation requires it; those records are held in a restricted-access archive and not used for marketing.

No. We never store full wallet credentials. When you pay via OVO or GoPay, the processor returns a masked token confirming the payment; that reference is what we record. Your actual wallet details stay within the payment processor's environment.

Go to Account Settings and select Contact Details. You will be asked to verify ownership of the new email or number before the change saves. If you run into any issue, live chat support is available 24 hours a day to assist.