What Data We Collect and Why
When you open an account, we collect your name, email address, phone number and the payment identifiers linked to your chosen method — whether that is a DANA wallet ID, an OVO number, a GoPay-registered phone or a QRIS scan token. We also log device type,
-
1
IP address and session timestamps to protect your account from unauthorised access. All data processing depends on local law and applies where local law permits. We do not collect payment card numbers directly; all transaction data passes through the payment processor's own encrypted channel. Retention periods
-
2
differ by data category: session logs are held for 90 days, transaction records for five years as required by Indonesian financial regulation, and profile data for as long as your account remains active.
Service availability depends on jurisdiction. Users are responsible for checking local law before access.