Reference

How winlator Handles Your Personal Data

Your account on winlator is protected by a clear, specific privacy framework covering everything from how we collect your deposit details — including DANA, OVO, GoPay and QRIS…

Data collected only when you register or depositDANA, OVO, GoPay & QRIS transaction records protectedRetention limits applied per account activityYour deletion request processed within 14 daysContact our privacy team via live chat or email
winlator How winlator Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you need to update, correct or delete personal data held on your winlator account, our privacy support team is available seven days a week from…

Live Chat Start a live chat session directly from your account dashboard.
Email Support Send your data request to our privacy email address found in the account settings…
Account Settings Portal Log in, go to Account → Privacy, and submit a self-service data request.
DATA HANDLING STANDARDS

Six Ways We Protect Your Account Data

Data protection at winlator is operational, not just a policy statement. The six practices below describe the specific technical and procedural controls we apply to every Indonesian account — from the moment…

Encryption at Rest and in Transit

All personal data — including DANA and OVO payment identifiers — is encrypted using AES-256 at rest. Data moving between your device and our servers is protected by TLS 1.3, so no credentials travel in plain text.

Cookie Consent You Control

We use session cookies to keep you logged in and analytics cookies to measure page performance. You can withdraw consent for non-essential cookies at any time through the cookie preferences panel in your account settings.

Payment Data Isolation

GoPay and QRIS transaction references are stored in a separate, access-controlled database partition. Our customer support agents can see transaction status but never your full payment credentials or wallet balance.

Account Security Alerts

Any login from an unrecognised device triggers an immediate email alert to your registered address. You can then confirm or block the session directly from that email without needing to contact support.

Data Retention Limits

We retain active account data for as long as your account remains open. Once you close your account, personal data is anonymised within 30 days, except where we are required to retain transaction records under applicable law.

Third-Party Data Sharing Policy

We do not sell or rent your personal data. We share data with third parties only where it is required to process your DANA, OVO, GoPay or QRIS payment, or where disclosure depends on local law and a valid legal request.

Your Questions About Our Privacy Policy

The questions below cover the data rights and account-level privacy topics we hear most often from Indonesian account holders. If your question is not answered here, reach out via live chat between 08:00 and 23:00 WIB and a privacy agent will respond directly.

We collect your full name, email address, date of birth, and the payment method you register — such as DANA, OVO, GoPay or QRIS. Device identifiers and IP address are also recorded for fraud prevention and account security purposes.

Yes. Log in, navigate to Account → Privacy, and select the data export option. You will receive a downloadable file within 14 calendar days containing all personal data tied to your account, including payment records and login history.

Submit a deletion request through the Account → Privacy portal or via the privacy email listed in settings. We confirm receipt within two business hours and complete anonymisation within 30 days, subject to any retention obligations that depend on local law.

We share payment identifiers only with the payment processor needed to complete your transaction — for example, the DANA or OVO gateway. We do not share this data with advertisers, data brokers or unrelated third parties under any circumstances.

Active account transaction records are kept for 12 months from the date of each transaction. After account closure, records are anonymised within 30 days unless retention for a longer period depends on local law or an active dispute.

We use strictly necessary cookies to maintain your login session, and optional analytics cookies to understand page performance. Open the cookie preferences panel under Account Settings at any time to review and withdraw consent for non-essential cookies.

Contact our privacy team via live chat (08:00–23:00 WIB daily) or the registered privacy email address in Account Settings. We treat data mishandling reports as urgent and assign a dedicated agent rather than routing you through a general queue.