Reference

How We Handle Your Personal Data

At sgp warna, your personal data is collected only for the purposes we describe in this policy — account verification, transaction processing through DANA, OVO, GoPay and QRIS…

No third-party data salesDANA, OVO, GoPay & QRIS transaction privacyAccount data encrypted at restRetention limits enforcedContact us anytime to request changes

Explore Lobby Read FAQ

What This Privacy Policy Covers

sgp warna Service availability depends on jurisdiction. Users are responsible for checking local law before access.

This policy applies to all data we collect when you open an account with sgp warna, browse the lobby, or complete a payment transaction. The scope includes registration details, device identifiers, IP addresses, and payment references generated through DANA, OVO, GoPay and QRIS. Because data regulation

1
depends on local law, certain rights and obligations described here may vary for you depending on the region from which you access our platform. We process data on servers that apply industry-standard encryption, and we review our retention schedules every calendar quarter to ensure we are
2
not holding information longer than necessary for the purpose it was collected.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

PRIVACY CONTACT CHANNELS

Reach Us About Your Data Rights

If you want to request a copy of your data, ask us to correct inaccurate records, or have specific data deleted from our systems, our privacy…

DATA HANDLING PRACTICES

How sgp warna Protects Your Information

Our data-handling practices are built around six measurable commitments — each tied to a specific operational step rather than a general statement.

Encryption at Rest and in Transit

All data we store — including payment references from DANA, OVO, GoPay and QRIS — is encrypted using AES-256. Data moving between your browser and our servers travels over TLS 1.3, verified by certificate pinning on our mobile experience.

Cookie Usage

We use session cookies to keep you logged in and analytical cookies to understand which lobby sections you visit most. You can manage cookie preferences from the banner that appears on your first visit or from Settings › Privacy at any time.

Account Security Practices

Your account password is hashed with bcrypt before storage — we never see it in plain text. We also log every login attempt with a timestamp and device fingerprint, so unusual access triggers an automatic email alert to your registered address.

Data Retention Schedule

Transaction logs are retained for 24 months to satisfy financial record-keeping obligations, then permanently deleted. Profile data is removed within 30 days of a verified account closure request submitted through the Settings › Privacy portal.

Third-Party Sharing Limits

We share your data only with payment processors (DANA, OVO, GoPay, QRIS) and identity-verification partners who are contractually bound to our data-protection standards. No marketing company or data broker receives your information.

Your Right to Request Changes

You may request correction, export or deletion of your data at any time via live chat (08:00–23:00 WIB) or email. We confirm receipt within one business day and complete the action within three, subject to verification of your identity.

Common Questions About Your Data at sgp warna

The questions below reflect what our account holders in Indonesia actually ask about how we collect, store and use their personal information. If your specific question is not here, open a live-chat session between 08:00 and 23:00 WIB and our team will walk you through the answer using your account record directly.

We collect your name, email address, phone number, date of birth and the payment identifiers linked to your DANA, OVO, GoPay or QRIS account. Device data such as IP address and browser type is also logged at registration and each subsequent login.

We share data only with payment processors — DANA, OVO, GoPay and QRIS — and identity-verification partners. All third parties are bound by written data-protection agreements. We do not sell your data to advertisers or data brokers under any circumstances.

Transaction logs, including QRIS and GoPay payment references, are retained for 24 months for financial record-keeping purposes. After that period, they are permanently deleted from our systems and cannot be recovered.

Yes. Log in, go to Settings › Privacy, and download your data summary directly. Alternatively, send an email request and we will deliver a full export within three business days after verifying your identity through your registered account email.

Submit a deletion request through Settings › Privacy or contact us via live chat (08:00–23:00 WIB). We verify your identity first, then permanently remove your profile data within 30 days. Transaction logs subject to legal retention periods follow the 24-month schedule.

We use session cookies for login continuity and analytical cookies to understand lobby traffic patterns. You can accept, reject or customise cookie categories from the consent banner on your first visit, or change your preferences anytime in Settings › Privacy.

Yes — the specific rights available to you depend on local law. Indonesian data-protection obligations govern most accounts opened from Indonesia, but the exact scope of your rights depends on local law at the time of your request.

How We Handle Your Personal Data

Reach Us About Your Data Rights

How sgp warna Protects Your Information

Encryption at Rest and in Transit

Cookie Usage

Account Security Practices

Data Retention Schedule

Third-Party Sharing Limits

Your Right to Request Changes

Common Questions About Your Data at sgp warna

01 What personal data does sgp warna collect when I open an account?

02 Does sgp warna share my data with other companies?

03 How long does sgp warna keep my transaction history?

04 Can I request a copy of all the data you hold about me?

05 How do I get my account data deleted?

06 What cookies does sgp warna use and how do I control them?

07 Does my right to access or delete data depend on where I am located?

Related Pages