Reference

How hkb77 Handles Your Personal Data

Your account data — including the payment details you use with DANA, OVO, or GoPay — is collected only for the purpose of running your account and processing your transactions.

Account data protectionDANA, OVO, GoPay wallet handlingClear data retention policyYour right to access and correctIndonesia-region scope
hkb77 How hkb77 Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Live Chat Our live chat channel is the fastest way to ask a data question or raise a privacy concern. Reach the team directly from your account dashboard — available around the clock, so you are never waiting for office hours to…
Email Support For formal data requests — such as asking to see what we hold on your account, requesting a correction, or asking us to delete data that is no longer needed — send an email through the contact address listed in…
Account Settings Some data changes you can handle yourself, without contacting support at all. Your registered mobile number, linked e-wallet (DANA, OVO, GoPay), and notification preferences can all be updated directly from the account settings page after you log in.
DATA HANDLING PRACTICES

How We Protect and Manage Your Data

These six areas cover the core of how we handle your account data — from the moment you register through to how long we keep your transaction history and what controls you have along the way.

Encryption in Transit

All data sent between your device and our servers — including your login credentials, OTP codes, and wallet transaction details for DANA, OVO, or GoPay — travels over an SSL-encrypted connection. This applies whether you are on mobile data or a Wi-Fi connection.

Cookie Use

We use session cookies to keep you logged in during your visit and analytics cookies to understand which pages load well on mobile. We do not use cookies to track you across third-party sites. You can manage cookie preferences through your browser settings at any time.

Account Security Steps

If our system detects a login from an unfamiliar device or location, it will prompt for OTP verification before granting access. You can also request a password reset at any point from the login screen — no support contact needed for that step.

Data Retention

We keep your account registration data and transaction records for as long as your account is active, plus the period required by applicable financial record obligations. When an account is closed, personal data that is no longer operationally needed is removed from our active systems on a rolling schedule.

Third-Party Sharing

We do not sell your data. We share account data with third parties only where it is necessary to process your transaction — for example, routing a GoPay or OVO withdrawal requires passing the wallet reference to the relevant payment processor. That data is used only for that transaction.

Your Access Rights

You have the right to ask us what data we hold about your account, to correct inaccurate details, and to request deletion of data that is no longer needed for your account to function. Reach us via live chat or email — contact details are in your account settings.

Common Questions About Your Data and Privacy Rights

If something about how we handle your account data is unclear, these questions cover the situations we hear about most. For anything not listed here, live chat is the fastest route to an answer.

We collect your name, email address, mobile number, and the wallet details you link for deposits and withdrawals — for example, your DANA or OVO account reference. We also log your device type and session timestamps to support account security checks.

No. We store only the wallet identifier — the reference number or account tag — that is needed to route your transactions. Your full wallet login credentials stay within your own e-wallet app and are never passed to or stored by us.

We keep transaction records for the period required by applicable financial record obligations after your account closes. Personal data that is no longer needed to fulfil those obligations — such as marketing preferences or device logs — is removed from our active systems on a rolling schedule once the retention period ends.

Yes. You can send a data access request via email through the address in your account settings, or raise it directly through live chat. We will pull together the account data we hold and provide it to you within a reasonable timeframe after verifying your identity.

For some details — like your linked e-wallet or notification settings — you can update them yourself inside account settings after logging in. For registered name or ID details, contact support via live chat or email so we can verify the change before updating the record.

No. We do not sell your data or share it with third parties for marketing purposes. Data is passed to payment processors — such as GoPay or OVO channels — only to the extent needed to complete your specific transaction, and for that purpose only.

We use session cookies to keep you logged in during your visit and analytics cookies to see how pages perform on mobile. We do not use tracking cookies across external sites. You can adjust or clear cookies at any time through your mobile browser or desktop browser settings.

Our system flags logins from new devices or locations. If it detects an unfamiliar access attempt, it will prompt for OTP verification before the account is opened. If you receive an OTP you did not request, contact support immediately through live chat so we can review recent login activity.

Yes. All data between your mobile device and our servers — including login details, OTP codes, and wallet transaction data — travels over an SSL-encrypted connection. This applies on mobile data or Wi-Fi. Your session is tied to your device until you log out or the session expires.

Send a deletion request via the email address in your account settings or raise it through live chat. We will confirm your identity first, then remove personal data that is no longer needed once any applicable retention obligations have been met. We will confirm when the deletion is complete.