Reference

How mpoyou Handles Your Personal Data

Your personal data — from account registration details to transaction records processed through DANA, OVO, GoPay and QRIS — is handled under a clear, documented privacy framework that…

Data encrypted at rest and in transitDANA, OVO, GoPay & QRIS transaction privacyNo sale of personal data to third partiesAccount deletion available on requestIndonesia-specific data handling
mpoyou How mpoyou Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct, or remove your personal data held by mpoyou, our privacy support team is reachable around the clock — seven days a week — through the channels below. We aim to respond to all data-related requests within 72 hours. Queries from Denpasar and across the rest of Indonesia are handled in the same queue with no regional delay.

Team online

Live Chat

Our live chat window is open 24 hours a day, seven days a week. Type 'data request' at the start of your message so our team routes your query directly to the privacy desk without delay.

Email Support

Send your data access or deletion request to our registered support email. Include your account username and the specific data category you are asking about so we can locate your records without unnecessary back-and-forth.

Account Settings Panel

Log in, navigate to Settings, and select 'Privacy & Data'. From there you can download a copy of your stored profile data or submit a deletion request directly without contacting support first.

DATA SECURITY PRACTICES

How We Protect and Manage Your Information

mpoyou applies layered security measures at every stage of data handling — from the moment you submit a DANA or OVO deposit to the point your withdrawal is confirmed.

Encrypted Storage

All account records, including payment method preferences for DANA, OVO, GoPay and QRIS, are stored using AES-256 encryption. Decryption keys are rotated quarterly and held separately from the data they protect.

Cookie Policy

We use session cookies to keep you logged in and functional cookies to remember your preferred language and payment method. Analytics cookies are opt-out; you can manage them from the cookie preferences panel in your account footer.

Account Security

Two-step verification is available for all accounts. We send an OTP to your registered phone number each time a login is detected from a new device or IP address — an automatic safeguard that runs without you needing to enable anything manually.

Data Retention

Active account data is retained while your account remains open. Once you request closure, we anonymise your personal identifiers within 30 days and retain only the transaction log required by applicable financial regulation, as depends on local law.

Third-Party Sharing

We share your data only with payment processors — DANA, OVO, GoPay, QRIS — and identity verification partners who are contractually bound to use your data solely for the service they provide us. We do not sell your data to advertisers.

Your Right to Access

You can request a full export of the personal data we hold on your account at any time via Settings or our support email. We will prepare and deliver the export within 72 hours of verifying your identity through the account's registered contact.

Your Privacy Rights on mpoyou Explained

These are the data and privacy questions we receive most often from account holders across Indonesia. If your question is not covered here, our live chat team is available around the clock to walk you through any specific data concern you have about your account.

We collect your full name, email address, phone number, and date of birth during registration. Once you add a payment method — DANA, OVO, GoPay or QRIS — we also store the associated account identifier to process deposits and withdrawals accurately.

We share data only with payment processors such as DANA and OVO, and with identity verification partners. Every third party we work with is bound by a data processing agreement that limits them to using your data strictly for the service they provide to us.

Log in and go to Settings, then select 'Privacy & Data' and click 'Request Data Export'. Alternatively, email our support team with your username. We will deliver a structured data file to your registered email within 72 hours of verifying your identity.

Yes. Submit a deletion request through the Settings panel or via our support email. We anonymise your personal identifiers within 30 days. Transaction logs required by financial regulation are retained only as long as depends on local law in your jurisdiction.

Payment details are transmitted over TLS 1.3 and never stored on our servers in raw form. When you pay via QRIS or GoPay, the transaction is handled entirely within the payment provider's secure environment; we only receive a confirmation token and the transaction amount.

We use essential session cookies, functional cookies for language and payment preferences, and optional analytics cookies. You can review and adjust your cookie choices at any time from the cookie preferences panel found at the bottom of every page when you are logged in.

Personal identifiers are anonymised within 30 days of account closure. Financial transaction records are kept only for the duration required by applicable regulation, which depends on local law. After that period, those records are also permanently deleted from our systems.