Reference

How kapakhoki Handles Your Personal Data

Your personal data — from the moment you open an account to every deposit you make via DANA, OVO, GoPay or QRIS — is collected, stored and used…

Data collected only as neededDANA, OVO, GoPay & QRIS transaction records protectedNo data sold to third partiesAccount deletion available on requestPolicy applies to all Indonesia regions
kapakhoki How kapakhoki Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Live Chat Support Our live chat team is available 24 hours a day, 7 days a week. Send your data request or privacy question directly through the chat window inside your account dashboard — responses arrive within 15 minutes during peak hours.
Email Privacy Request For formal data access, correction or deletion requests, email our privacy team at the address listed in your account settings. We acknowledge every request within 24 hours and complete straightforward requests within 7 working days.
Account Settings Panel Minor data corrections — such as updating your phone number linked to OVO or GoPay — can be handled directly inside your account settings panel without contacting support, so changes take effect on your next login.
DATA HANDLING STANDARDS

Six Ways We Protect Your Privacy

Every data-handling practice at kapakhoki is designed around one principle: your information is yours, and we only use it to run your account, process your payments and keep your session secure.

Payment Data Encryption

Every transaction made through DANA, OVO, GoPay or QRIS is encrypted in transit and at rest. Your payment credentials are never stored in plain text on our servers, and payment data is tokenised before logging.

Cookie Usage Policy

We use session cookies to keep you logged in and functional cookies to remember your preferred lobby view. Analytics cookies are anonymised — they cannot be traced back to your individual account or payment history.

Account Security Layers

Your account is protected by password hashing and optional two-factor authentication. Login attempts from unrecognised devices trigger an automatic verification step before access is granted, reducing the risk of unauthorised entry.

Data Retention Schedule

We retain active account data for as long as your account is open. After account closure, transaction records are kept only as long as required — the exact period depends on local law — then permanently deleted from our systems.

Third-Party Data Sharing

We share data with payment processors like DANA and OVO only to complete your transactions. We do not sell, rent or exchange your personal data with advertisers or unaffiliated commercial partners under any circumstances.

Your Right to Request Changes

You can request a copy of the data we hold, ask us to correct inaccuracies or ask us to delete your account data entirely. Submit requests via live chat or the privacy email — we confirm receipt within one business day.

Your Privacy Policy Questions, Addressed

The questions below cover what real account-holders ask most often about how kapakhoki collects, uses and protects personal data. If your question is not here, our 24/7 live chat team can answer it directly.

We collect your name, email address, phone number and your chosen payment method — DANA, OVO, GoPay or QRIS. We also log device identifiers and session activity to keep your account secure from the moment you first log in.

No. Payment credentials are tokenised immediately and never stored as raw data. Transaction records — amounts, timestamps, method used — are retained only as long as your account is active or as required by local law.

Yes. Submit a data access request through live chat or the privacy email listed in your account settings. We will compile and send your data summary within 7 working days of confirming your identity.

Contact our support team via 24/7 live chat or email a deletion request. We process account closures within 5 working days. Residual transaction records are removed after the retention period required by local law has passed.

We do not sell or share your data with advertisers. Data is shared only with payment processors — such as DANA, GoPay or QRIS networks — strictly to complete your transactions. No commercial data exchange with unaffiliated third parties occurs.

We use session cookies for login continuity and anonymised analytics cookies to understand page performance. You can manage cookie preferences through your browser settings; disabling analytics cookies does not affect your account or payment functions.

A new device triggers an automatic verification step — you will be asked to confirm your identity before access is granted. This check applies regardless of whether you are on desktop or mobile and works across all account regions where local law permits.