Reference

How cumi23 Handles Your Personal Information

Your account data — including the details you enter at registration and the e-wallet information tied to DANA, OVO, or GoPay deposits — is handled with a clear set of rules that this policy lays out.

Account data transparencyDANA, OVO, GoPay wallet contextYour right to access and deleteCookie and session controlsData retention limits
cumi23 How cumi23 Handles Your Personal Information
HOW WE PROTECT DATA

Data Handling, Cookies and Account Security

We apply technical and organisational measures to keep your account information secure. That includes encrypted connections during login, hashed storage for sensitive credentials, and session-token expiry that kicks in after a period of inactivity. We also use cookies — here is what that means for you.

Cookie Controls

Session cookies keep you logged in during your visit. Analytics cookies help us improve the account flow. You can adjust non-essential cookie preferences in your browser settings at any time.

Account Security Layer

Login sessions use OTP verification tied to your registered mobile number. If a new device attempts access, we send a confirmation step before granting entry to your account.

Data Retention Rules

We do not keep your data longer than necessary. Financial records linked to DANA, OVO, or GoPay transactions may be retained longer where local compliance rules in Indonesia require it.

Third-Party Sharing Limits

We share your data only with payment processors and verification services needed to run your account. No data is passed to advertisers or unrelated commercial parties.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you need to exercise a data right — whether that is viewing the information we hold, correcting an error, or requesting deletion — our support team handles those requests directly. Reach us through the channels below and include your registered account email so we can locate your record without delay.

Live Chat Start a chat session from the account dashboard. For data requests, state your registered email and the specific action you need — access, correction, or deletion.
Email Support Send a written data request to our support email address listed in the account help section. We aim to acknowledge your request within the timeframe required by applicable local rules.
Account Help Portal The help portal inside your account settings includes a dedicated privacy request form. Fill in the details, submit, and we will follow up through your registered contact.

Common Questions About Your Privacy on cumi23

Below are the questions we get most often about how personal data works on this platform. If your question is not here, reach us through live chat or the account help portal.

We collect your name, email, mobile number, and the e-wallet identifier you use — such as your DANA or OVO account number. Technical session data like IP address is also logged for security purposes.

Payment references are retained only as long as needed to reconcile your transaction or meet applicable local compliance requirements. We do not store full wallet credentials beyond that window.

Yes. Submit a data-access request via live chat or the privacy form in the account help portal. Include your registered email so we can match the request to your record accurately.

Send a deletion request through the account help portal or by email. We will process it in line with applicable rules — some financial records may need to be held longer under local law before deletion.

We share data only with payment processors and identity-verification services required to operate your account. We do not sell your data or pass it to advertisers or unrelated third parties.

Session cookies are essential for keeping you logged in. Analytics cookies are non-essential and can be turned off in your browser. We do not use cookies to track you across unrelated third-party sites.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.