Reference

How We Protect Your Personal Data

At bata123 login, your personal data belongs to you — we collect only what is needed to run your account, process deposits through DANA, OVO, GoPay, and QRIS…

Data collected only as neededDANA, OVO, GoPay & QRIS transactions securedAccount data deletion available on requestNo third-party sale of your informationRetention periods clearly defined
bata123 login How We Protect Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data Rights

If you have a question about how we store your data, want to request a copy of your personal information, or need to update details on…

Live Chat Start a live-chat session directly from your account dashboard.
Email Support Send your data-rights request to our dedicated privacy inbox.
WhatsApp Line For urgent account or data concerns, our WhatsApp support line handles privacy queries with…
DATA HANDLING STANDARDS

Six Ways We Keep Your Information Safe

Our approach to data protection is built on specific operational controls rather than broad promises.

Encrypted Storage

All personal data — including your registered phone number, email, and QRIS transaction history — is stored using AES-256 encryption at rest. Access is restricted to authorised personnel with logged audit trails for every query made against your profile.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand how features are used. You can review and withdraw cookie consent at any time through the cookie settings panel available in your account preferences without losing your session data.

Account Security Controls

Two-factor authentication is available on every account and we strongly encourage you to activate it. Login attempts from unrecognised devices trigger an automatic email alert to your registered address so you stay aware of any access outside your usual pattern.

Data Retention Schedule

Account activity logs are held for twelve months, financial transaction records for five years in line with applicable obligations, and marketing-preference data is deleted within thirty days if you withdraw consent. Where local law permits, you may request early deletion of non-mandatory records.

Third-Party Sharing Policy

We share data only with payment processors — DANA, OVO, GoPay, QRIS — and identity-verification providers necessary to run your account. We do not sell, lease, or trade your personal information to advertisers or data brokers under any commercial arrangement.

Your Rights and How to Exercise Them

You have the right to access, correct, export, or request deletion of your personal data at any time. Submit your request through live chat or our privacy email; we verify identity within one business day and complete the action within fourteen calendar days of confirmation.

Your Privacy Questions, Answered Directly

The questions below cover the most common things you might want to know about how bata123 login handles your personal data — from what we collect when you deposit via GoPay, to how long we keep records and how to get your data removed. If your question is not listed here, contact our privacy team directly through live chat between 08:00 and 24:00 WIB.

We collect your name, email, phone number, and the payment identifiers you register — DANA, OVO, GoPay, or QRIS. We also log your device ID and session timestamps for security purposes. We do not collect data we do not need to operate your account.

Payment references such as your DANA wallet ID or OVO account token are stored in encrypted form and used only for transaction matching and dispute resolution. Raw account credentials are never stored in plain text and are never shared with unrelated third parties.

Account activity logs are retained for twelve months from the date of each event. Financial transaction records, including QRIS and GoPay histories, are held for five years. Marketing preferences are deleted within thirty days of consent withdrawal, where local law permits earlier removal.

Yes. Submit a data-access request via live chat or our privacy email with your registered account email. We verify your identity within one business day and send a structured data export within fourteen calendar days of confirmed verification.

Contact our privacy support team through live chat (08:00–24:00 WIB) or email. Once we verify your identity, non-mandatory records are deleted within fourteen calendar days. Records required by financial-reporting obligations are retained for their minimum statutory period.

No. We share your data only with payment processors — DANA, OVO, GoPay, QRIS — and identity-verification services essential to account operations. We do not sell or trade personal information with advertisers, data brokers, or any unrelated commercial organisation.

Non-mandatory personal data is deleted within thirty days of account closure. Financial and transaction records are retained for five years as required by applicable obligations. You will receive a confirmation email once the deletion process is complete for eligible data categories.