Reference

How gajahbola Protects Your Personal Data

At gajahbola, your personal data is handled with clear processes — from the moment you open an account to every deposit you make via DANA, OVO, GoPay, or…

Data collected only as neededDANA, OVO, GoPay & QRIS transactions logged securelyAccount data encrypted at restDeletion requests processed within 14 daysContact: [email protected]
gajahbola How gajahbola Protects Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about how your data is stored, want to request a copy of your personal records, or need to report a data…

Privacy Email Send your data access or deletion request to [email protected].
Live Chat Support Our chat window is open daily from 08:00 to 24:00 WIB.
Account Settings Portal Log in, go to Account Settings, then select 'Privacy & Data'.
HOW WE HANDLE DATA

Six Ways We Protect Your Information

Our data handling practices are built around six concrete commitments that cover everything from how cookies work on your device to how long we retain your payment records.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand page flow. You can turn off non-essential cookies in your browser settings at any time without losing access to your account or wallet.

Account Security

Your password is stored as a one-way hash — we cannot read it. Two-factor authentication via OTP SMS adds a second layer every time a login is detected from a new device or IP address outside your normal pattern.

Payment Data Handling

DANA, OVO, GoPay, and QRIS payment identifiers are tokenised on receipt. The raw account numbers you enter during a deposit are never stored in plain text on our servers; only the masked token is retained for reconciliation.

Data Retention Policy

Active account data is retained for the lifetime of your account plus 12 months after closure, in line with Indonesian financial record-keeping requirements. Inactive session logs are purged on a 90-day rolling cycle automatically.

Third-Party Sharing

We share data only with payment processors (DANA, OVO, GoPay, QRIS gateway partners) and infrastructure providers under data-processing agreements. No personal data is shared with advertisers or data brokers under any condition.

Your Right to Erasure

You may request full deletion of your personal data by contacting [email protected] or using the Account Settings portal. We complete verified deletion requests within 14 calendar days and send a written confirmation when done.

Your Privacy Questions, Answered Plainly

These are the questions we hear most often about how your data is used at gajahbola. If your question is not covered here, reach the privacy team at [email protected] or through the live chat channel between 08:00 and 24:00 WIB, and we will respond within one business day.

We collect your name, email, phone number, and a payment identifier for whichever method you choose — DANA, OVO, GoPay, or QRIS. We also record your IP address and device type for security screening during login.

Yes. Payment identifiers from DANA, OVO, GoPay, and QRIS are tokenised immediately on receipt. The raw numbers are never stored in readable form; only an encrypted token is kept for transaction reconciliation purposes.

Log in and go to Account Settings, then select 'Privacy & Data' to download a summary instantly. Alternatively, email [email protected] with the subject 'Data Access Request' and we will respond within two business days.

Yes. Submit a deletion request via the Account Settings portal or email [email protected]. We verify your identity, then complete the deletion within 14 calendar days and send you a written confirmation when finished.

We share data only with payment processing partners — DANA, OVO, GoPay, and QRIS gateway providers — and server infrastructure suppliers under strict data-processing agreements. Your data is never sold or passed to advertisers.

Transaction records are kept for the lifetime of your account plus 12 months after closure, as required under Indonesian financial regulations. Session logs that contain no transaction data are purged automatically on a 90-day cycle.

Open your browser settings and locate the cookie or site-data section; remove cookies for gajahbola.xyz. This disables analytics tracking without affecting your login session, wallet access, or the ability to deposit via GoPay or QRIS.