Reference

How We Protect Your Personal Information

At haha788 login, your personal data — from account registration details to transaction records via DANA, OVO, GoPay and QRIS — is handled with clear rules about what…

Data collected only as neededDANA, OVO, GoPay & QRIS transaction records protectedAccount data held under strict retention limitsYou may request data deletion at any timeIndonesia-specific privacy handling
haha788 login How We Protect Your Personal Information
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about your personal data, want to request a copy of what we hold, or need to correct inaccurate information on your…

Live Chat Available daily from 08:00 to 23:00 WIB. Raise a data-access or data-correction request directly…
Email Privacy Request Send a formal written request to our privacy address for data deletion, data portability…
Account Settings Panel From your account dashboard, navigate to Settings then Privacy to update your communication preferences…
HOW WE HANDLE YOUR DATA

Six Practices That Shape Our Privacy Approach

We built our data-handling practices around what an account holder in Indonesia actually needs to know: what is stored, who can see it, and how you stay in control.

Data Minimisation

We collect only what is necessary to operate your account and process payments via DANA, OVO, GoPay and QRIS. Fields we do not need for account or transaction purposes are not requested during registration or verification.

Cookie Controls

When you first access the platform, a consent banner lets you accept, reject or customise non-essential cookies. Essential session cookies that keep your account logged in cannot be disabled, but analytics and marketing cookies are off by default until you choose otherwise.

Account Security Measures

Passwords are stored as salted hashes — we cannot read them, only verify them. Sensitive account actions such as withdrawal destination changes trigger a secondary verification step sent to your registered email or phone number.

Retention Schedule

Transaction records, including GoPay and QRIS receipts, are retained for a maximum of five years to meet financial record-keeping obligations. Account profile data is deleted within 30 days of a confirmed account closure request.

Third-Party Sharing Limits

Your data is shared only with our payment processor partners handling DANA, OVO, GoPay and QRIS settlements, and with the identity-verification provider used at registration. No advertising networks receive your personal data.

Your Right to Access and Correct

You may request a full export of the data we hold on your account at any time via email. If any stored detail is inaccurate — a phone number, bank label or address — you may update it directly in account settings or by contacting our privacy team.

Common Questions About Your Data and This Policy

The questions below reflect what account holders in Indonesia ask us most often about how their personal information is managed. If your question is not covered here, our privacy support email and live chat (08:00–23:00 WIB) can address it directly with reference to your specific account.

We collect your name, date of birth, email address, phone number and country of residence during registration. Once you add a payment method such as DANA or OVO, we also store the account label associated with that method — not the full credentials.

Yes. Payment transaction records are stored in encrypted form and are accessible only to authorised finance and compliance staff. We retain these records for up to five years to meet applicable financial reporting requirements, then delete them on a scheduled basis.

You can. Send a data-access request to our privacy email and we will compile and deliver a structured copy of your account data within five business days. The export covers profile fields, transaction summaries and communication logs.

For consent-based processing such as marketing emails, you can withdraw consent at any time through your account's Privacy settings panel or by emailing our privacy team. Withdrawal does not affect data processing that is necessary to run your active account.

We update this policy when operational or legal changes require it. We notify you of material changes via the email address on your account at least 14 days before the new terms take effect, giving you time to review them before they apply to your data.

Contact our privacy team directly via our dedicated email or through live chat between 08:00 and 23:00 WIB. We investigate all data-handling concerns formally and respond within five business days with a documented outcome.

Some processing — such as identity verification — is handled by partners whose servers are located outside Indonesia. These transfers depend on local law and are covered by contractual data-protection agreements that require the receiving party to apply equivalent safeguards to your information.