Reference

How kudawin Handles Your Personal Data

At kudawin, your personal data is collected only for the purpose of operating your account, processing transactions through DANA, OVO, GoPay and QRIS, and keeping your information secure.

Data collected only as neededDANA, OVO, GoPay & QRIS transaction records protectedYour right to access or delete dataNo data sold to third partiesIndonesia-focused data handling
kudawin How kudawin Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about how your data is stored, want to correct inaccurate information, or wish to submit a deletion request, our support team is available around the clock.

Live Chat Open the chat widget inside your account dashboard at any hour. Our agents are on duty 24 hours a day, 7 days a week to handle privacy questions, data access requests and account security concerns.
Email Support Send your data request or privacy concern to our dedicated support address. Include your registered account email so we can verify your identity before processing any change or deletion request.
Help Centre Navigate to the Help Centre inside your account settings. The privacy section there walks you through how to download your data export, update your contact details, or flag a data concern directly.
DATA SECURITY PRACTICES

How We Protect and Manage Your Information

kudawin applies layered security measures across every stage of data handling — from the moment you submit a DANA deposit to the point your withdrawal via OVO is confirmed.

Encryption at Rest and in Transit

All personal data stored on our servers is encrypted. Data moving between your device and our platform — including QRIS payment confirmations — travels over TLS-secured connections, preventing interception at every point.

Cookie Usage and Preferences

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can adjust cookie preferences inside your browser settings at any time without losing your account access.

Account Access and Authentication

Your account is protected by password authentication. We recommend changing your password periodically. Any suspicious login attempt triggers an automated alert sent to your registered email address within minutes.

Data Retention Schedule

We keep account data for the period required by Indonesian financial regulations. Once that retention window closes and your account is inactive, personal data is anonymised or deleted according to our internal schedule.

Third-Party Data Sharing Limits

We share your data only with payment processors handling DANA, OVO, GoPay or QRIS transactions, and only the minimum fields required. We do not sell, rent or licence your personal data to marketing companies or data brokers.

Your Right to Request Changes

You may request access to your stored data, ask us to correct inaccuracies, or submit a deletion request at any time via live chat or email. We will confirm receipt and complete the action within 48 hours.

Frequently Asked Questions About Our Privacy Policy

Below are the questions we hear most often from you about how kudawin handles your personal data, your rights, and what happens when you request access or deletion. If your question is not covered here, reach our support team via live chat — available 24 hours a day, every day of the week.

We collect your name, email address, phone number, and the payment identifiers associated with your DANA, OVO, GoPay or QRIS transactions. Device and session data are also logged to secure your account against unauthorised access attempts.

We share data only with payment processors that handle your DANA, OVO, GoPay or QRIS transactions, and strictly limited to the fields needed to complete each transaction. We do not sell or pass your data to advertisers or data brokers under any circumstance.

Open a live chat session or send an email to our support address with your registered account email in the message. We will verify your identity and send a full data export within 48 hours of receiving your request.

Yes. Submit a deletion request through live chat or email. We will remove or anonymise your personal data after confirming your identity, subject to any retention period required by Indonesian financial regulations that applies to your account.

We retain account records and transaction logs for the period prescribed by applicable Indonesian law. After that window and a period of account inactivity, data is anonymised or permanently deleted from our systems on a rolling schedule.

We use session cookies to maintain your login state and analytics cookies to improve page performance. You can disable non-essential cookies through your browser settings at any time; this will not affect your ability to log in or make deposits.

Your access to certain account features depends on local law. We apply Indonesia-specific data handling rules to every account registered from an Indonesian device or IP address, in line with the data protection framework where local law permits.