Reference

How halojp Handles Your Personal Data

At halojp, your personal data belongs to you — we collect only what is needed to operate your account, process deposits via DANA, OVO, GoPay and QRIS, and…

Data collected only as neededDANA, OVO, GoPay & QRIS transactions coveredAccount deletion on requestIndonesia data handling24/7 privacy contact channel
halojp How halojp Handles Your Personal Data
PRIVACY CONTACT PATHS

Three Ways to Reach Our Privacy Team

If you have a question about your data, want to request a copy of the information we hold, or need to update details linked to your account, our privacy team is reachable every day of the week. We aim to respond to all data requests within 72 hours of receipt. You can also reach out from Bandung or anywhere else in Indonesia using the channels below.

Team online

Live Chat

Our live chat window is available 24 hours a day, seven days a week. Type 'privacy request' to route your message directly to the data team, and we will confirm receipt within minutes.

Email Support

Send your data access or deletion request to our dedicated privacy email address. Include your registered username and the nature of your request so we can locate your records and respond within 72 hours.

Account Portal

Log in to your halojp account, navigate to Settings, then select Privacy and Data. From there you can download a summary of your stored data or submit a formal deletion request without contacting support.

DATA HANDLING PRACTICES

Six Ways We Protect Your Account Data

Protecting your personal information is an operational commitment, not an afterthought. We apply multiple layers of security across data collection, storage, payment processing and account access — so you can deposit via…

Encrypted Transmission

All data sent between your device and our servers — including DANA and OVO payment details — travels over TLS 1.3 encryption. No payment credential is stored in plain text at any point during or after the transaction.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to improve page load times. You can review and withdraw cookie consent at any time through the cookie preference panel in your account settings.

Account Security Layers

Your account is protected by password hashing and optional two-factor authentication via your registered mobile number. We never store your raw password — only a one-way cryptographic hash that cannot be reversed.

Data Retention Schedule

Identity documents are kept for the duration your account is active plus three years. QRIS and GoPay transaction logs are retained for five years. Once retention periods expire, data is securely deleted from all active systems.

Third-Party Sharing Policy

We share data only with payment processors such as DANA and OVO networks, fraud-prevention services and, where local law requires, regulatory bodies. We do not sell your personal data to advertisers or data brokers under any circumstances.

Data Request Handling

Submit a subject access request through live chat or the account portal and we will compile a full data export within 30 days. Deletion requests are processed within 14 days, subject to legal retention obligations that depend on local law.

Your Privacy Policy Questions, Clearly Answered

The questions below cover what we hear most often about how halojp handles personal information — from what data we collect at account opening to how you can request that we erase your records. If your question is not answered here, contact us via live chat or the privacy email channel at any time.

We collect your full name, date of birth, email address, mobile number and a government-issued identity document for verification. Device identifiers and IP address are also logged for security purposes when you first log in.

Payment details processed through DANA, OVO, GoPay and QRIS pass through encrypted gateways. We do not store your full wallet credentials — only a transaction reference number and the amount, retained for financial record-keeping under applicable rules.

Yes. Log in to your account, go to Settings, then Privacy and Data, and select 'Download My Data'. Alternatively, email our privacy team and we will prepare a structured export within 30 days of your verified request.

Submit a deletion request via the account portal or live chat. We will process it within 14 days. Some transaction records must be retained longer where local law requires it, and we will inform you of any data we are legally obliged to keep.

We share data only with payment processors, fraud-prevention partners and, where local law mandates, regulatory bodies. We do not sell or rent personal data to marketing companies, data brokers or any other commercial third parties.

Identity and account records are kept for three years after account closure. Transaction logs linked to DANA, OVO, GoPay and QRIS payments are retained for five years. After those periods, data is securely purged from all systems.

We use strictly necessary cookies for session management, performance cookies to reduce page load time, and optional analytics cookies. Open the cookie preference panel in your account settings at any time to review or update your choices.