Reference

How bbo slot Handles Your Personal Data

At bbo slot, your personal data — from account registration details to payment records across DANA, OVO, GoPay and QRIS — is handled with a clear set of…

Data collected only as neededDANA, OVO, GoPay & QRIS transaction records securedYour right to access your own dataRetention periods clearly definedContact path for data requests
bbo slot How bbo slot Handles Your Personal Data
REACH OUR PRIVACY TEAM

Open a Data Request With Our Support Team

If you want to access, correct or delete the personal data we hold about you, our privacy support team is reachable around the clock.

Live Chat Start a live chat directly from your account dashboard — available 24 hours a…
Email Support Send your data access or deletion request to our dedicated privacy email.
In-App Help Centre Navigate to Settings › Help › Privacy Request inside your bbo slot account on…
HOW WE PROTECT YOU

Browse the Six Ways We Manage Your Privacy

Every data-handling practice at bbo slot is designed around one principle: you should always know what we have, why we have it and how to change it.

Data Collection Minimisation

We collect only the data that is strictly necessary to operate your account, process payments through DANA, OVO, GoPay or QRIS, and prevent fraud. We do not collect data beyond what each specific function requires, and we review our data fields annually.

Cookie Management

Session cookies keep you logged in across pages; analytics cookies help us understand which lobby sections load slowly on mobile. You can manage cookie preferences from the privacy banner on your first visit or later via Settings › Privacy on any device.

Account Security Practices

Your account is protected by password hashing, two-factor authentication prompts at login from new devices, and automatic session expiry after 30 minutes of inactivity. We log all login events so you can review them under Settings › Security History.

Data Retention Schedule

Active account data is kept for as long as your account remains open. Following account closure, transaction records — including QRIS and GoPay payment logs — are retained for the period required by applicable financial regulations, then permanently deleted.

Third-Party Data Sharing

We share your data only with payment processors (for DANA, OVO, GoPay and QRIS transfers), identity-verification services and fraud-detection partners. Each third party signs a data processing agreement that limits how they may use your information.

Your Right to Correct or Delete Data

You can request a copy of the personal data we hold, ask us to correct inaccuracies or request deletion of data we no longer need to retain. Submit requests via Live Chat, email or the in-app Help Centre — we respond within 72 hours. Rights apply where local law permits.

Switch Between the Questions You Actually Have

Below are the questions we receive most often about this Privacy Policy — covering your rights, how we handle your payment data, what happens when you close your account and how to reach us if something does not look right. Each answer reflects our actual data practices, not a generic template.

We collect your name, email address, phone number, date of birth and the payment method details you link — such as your DANA or OVO wallet number. Device identifiers are also recorded for fraud-prevention and session-security purposes when you first log in.

Payment data is encrypted in transit using TLS and stored at rest with AES-256 encryption. Your full wallet credentials are never stored on our servers; we retain only the transaction reference, amount and timestamp needed for account and dispute records.

Yes. Submit a Subject Access Request via Live Chat, our privacy email or the in-app Help Centre under Settings › Help › Privacy Request. We will compile and send a structured data export within 30 days of verifying your identity, where local law permits.

After account closure, transactional data — including payment records from QRIS and GoPay — is kept for the period required under applicable financial regulations. Non-transactional profile data is deleted within 90 days of your closure request being confirmed.

No. We do not sell, rent or share your personal data with any third party for marketing purposes. Data is shared only with payment processors, fraud-prevention services and identity verifiers, each bound by a formal data processing agreement with strict-use limitations.

Open the cookie preferences panel from the privacy banner shown on your first visit, or go to Settings › Privacy at any time from within your account. Toggle analytics cookies off — the change takes effect immediately and is saved to your account profile across devices.

Reach our privacy team via 24/7 Live Chat, the privacy email listed in your account's Help Centre, or the in-app Privacy Request form. We acknowledge all complaints within 4 hours and aim to resolve them fully within 14 business days of receiving your submission.