Reference

How api228 Handles Your Personal Data

At api228, we are transparent about every piece of data we collect from your account — from the moment you register to the transactions you make via DANA…

Data collected only as neededDANA, OVO, GoPay & QRIS payment data encryptedYou can request account data deletionNo third-party sale of your information24/7 privacy support channel
api228 How api228 Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Our Privacy Team

If you have a question about how your data is stored, want to correct information on your account, or wish to submit a formal deletion request, our privacy support team is available around the clock. Responses to data-access requests are sent within 72 hours. You can reach us through any of the three channels below.

Team online

Live Chat

Open the chat widget inside your account dashboard any time — our privacy team handles data-access and correction requests 24 hours a day, seven days a week, with a response within minutes during peak hours.

Email Privacy Request

Send a written data-access or deletion request to our dedicated privacy address. Include your registered phone number or DANA/OVO identifier so we can locate your account. Replies arrive within 72 hours.

In-App Settings

Navigate to Settings › Privacy inside your account to download a copy of your stored data, update your contact details, or submit a deletion request directly — no email or chat step required.

DATA HANDLING STANDARDS

Six Ways We Protect Your Privacy

Our privacy practices are built on six concrete operational commitments. Each one reflects a real process inside our platform — from how cookies expire on your device to…

End-to-End Encryption

All data you submit — including your DANA wallet ID, OVO number and account password — travels over TLS 1.

Cookie Control

We use session cookies to keep you logged in and analytics cookies to see which lobby pages load slowly.

Account Security Alerts

Any login from a new device triggers an automatic SMS or email alert to your registered contact.

Data Retention Schedule

Personal profile data is kept for the lifetime of your account plus five years for financial compliance.

Third-Party Data Rules

We integrate with DANA, OVO, GoPay and QRIS only to process your transactions.

Data Correction Requests

To update an incorrect name, phone number or email on your account, submit a correction via Live Chat or Settings…

Your Privacy Questions Answered

Below are the questions we receive most often about how api228 manages your personal data. If your question is not covered here, open a Live Chat session or email our privacy team directly — we aim to respond to all data enquiries within 72 hours.

We collect your name, email address, phone number and the payment identifier linked to whichever method you choose — DANA, OVO, GoPay or QRIS. We also log device type and session data to keep your account secure and verify access where local law permits.

Yes. Go to Settings › Privacy inside your account and select 'Download My Data'. We compile your profile data, transaction history and session logs into a downloadable file and deliver it to your registered email within 24 hours of the request.

Your DANA wallet ID and OVO number are tokenised — we store a reference, not your raw credentials. All data moves over TLS 1.3 encryption, and stored records use AES-256 encryption. Our security team audits these controls every quarter.

No. We do not sell, rent or trade your personal data to advertising networks or unaffiliated companies. Payment providers like DANA, OVO, GoPay and QRIS receive only the transaction data required to process your deposit or withdrawal — nothing more.

Financial transaction records are kept for five years to meet regulatory obligations. Non-financial data — preferences, device tokens, analytics cookies — is deleted within 30 days of your account closure confirmation being processed by our team.

Submit a deletion request through Settings › Privacy or contact our privacy team via Live Chat or email. We verify your identity against your registered payment method, then process the deletion within 30 days and send confirmation to your registered email address.

We use session cookies to maintain your login and analytics cookies to monitor page performance. Analytics cookies are optional — you can disable them in Settings › Privacy without affecting your account access, payment history or lobby experience.