Reference

How We Protect Your Personal Data

megabandar login collects only the account and transaction data needed to keep your sessions secure and your withdrawals moving — nothing more.

Data collected only when neededDANA, OVO, GoPay & QRIS transaction data handled securelyYou may request data access at any timeRetention periods clearly statedContact us 24/7 via live chat or email
megabandar login How We Protect Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Our Data Team

You can submit a data access request, correction request or deletion request through any of the channels below. Our privacy team responds within 48 hours on business days, and our live chat agents are available around the clock — 24 hours a day, 7 days a week — to triage your query and route it to the right team member without delay.

Team online

Live Chat

Reach a privacy-support agent through the live chat window inside your account dashboard, available 24/7. Agents will log your request and issue a reference number within minutes of your message.

Email Support

Send your data request to our dedicated privacy email address. Include your registered account username and the specific action you are requesting — access, correction or deletion — for a faster response.

Account Settings

Navigate to Settings → Privacy inside your account on desktop or mobile to download a copy of your stored profile data or submit a formal correction request without contacting support directly.

DATA HANDLING STANDARDS

Six Ways We Keep Your Data Safe

Our data practices are built around your account security and transparency. From the moment you deposit via GoPay to the moment a withdrawal clears to your DANA wallet, every data point is…

Encrypted Storage

All personal data — including your OVO and DANA account identifiers — is stored using AES-256 encryption at rest. Database access requires two-factor authentication from our infrastructure team and is audited monthly.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to measure page load times. You can adjust cookie preferences from the footer of any page; disabling analytics cookies does not affect your account access.

Retention Schedule

Account data is retained for as long as your account remains active. After you close your account, we hold transaction records for 24 months for regulatory reconciliation purposes, then permanently delete them from our servers.

Payment Data Handling

When you transact via QRIS or GoPay, the full payment credential is never stored on our servers — only the masked reference returned by the payment gateway is logged against your account for dispute tracking.

Third-Party Sharing

We share your data only with payment processors such as DANA and OVO, and with identity-verification services where local law requires it. We do not share your data with advertisers or data brokers under any circumstances.

Your Correction Rights

You may request a correction to any stored field — name, email, phone number — by contacting support via live chat or the Settings → Privacy path. Corrections are applied within 5 business days and confirmed by email.

Privacy Policy Questions We Hear Most

The questions below reflect what our account holders in Indonesia ask most often about how their data is handled. If your question is not covered here, our live chat team can pull up the relevant section of this policy and walk you through it in real time.

We collect your name, email address, phone number and the payment method identifier you register — such as your DANA or OVO number. We also record your IP address and device type at login for security verification purposes.

No. When you pay via QRIS or GoPay, only the masked transaction reference returned by the payment gateway is stored in your account record. The full credential stays with the payment provider and never reaches our database.

Transaction records are kept for 24 months after account closure for reconciliation and any disputes that may arise. Once that period ends, all personal data is permanently deleted from our systems.

Yes. Go to Settings → Privacy in your account dashboard and select 'Download my data'. Alternatively, contact our live chat or email support team with your username and we will prepare a data export within 48 business hours.

Access to personal data is role-restricted. Only payment-reconciliation staff and the security team can view transaction identifiers, and only when investigating a dispute or flagged login. All access events are logged and reviewed regularly.

The policy applies uniformly across Indonesia — whether you are in Surabaya, Bandung or anywhere else. However, specific data-processing obligations depend on local law, and we adjust our processes accordingly where local law requires it.

You can submit a deletion or correction request through live chat (available 24/7), by email to our privacy team, or directly via Settings → Privacy. Corrections are completed within 5 business days; deletions follow the retention schedule.