Reference

How orca128 Handles Your Personal Data

At orca128, your personal data is collected only for the purposes we describe here — account creation, payment processing via DANA, OVO, GoPay or QRIS, and customer support.

Data collected only for stated purposesDANA, OVO, GoPay & QRIS transactions securedYou can request data access anytimeNo data sold to third partiesRetention periods clearly defined
orca128 How orca128 Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you have a question about how we store your data, want to correct information on your account, or need to submit a formal data-access request…

Live Chat (In-Account) Open your orca128 account dashboard, tap the chat icon in the bottom-right corner, and…
Privacy Email Send your data-access or correction request to our dedicated privacy address.
Account Settings Path Navigate to Account Settings → Privacy & Data on desktop or mobile.
DATA HANDLING STANDARDS

Six Ways We Protect Your Privacy at orca128

Every layer of our data practice is designed so you stay in control.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to measure page load times.

Account Security

Passwords are hashed using industry-standard algorithms and are never stored in plain text.

Data Retention

Active account data is kept for as long as your account is open.

Payment Data Handling

When you deposit or withdraw via GoPay or QRIS, we receive a tokenised reference — not your full wallet credentials.

Your Right to Access

You can request a copy of the personal data we hold about you at any time via Account Settings or…

Who to Contact for Changes

To correct, update or delete your data, use the in-account form under Privacy & Data or reach our privacy team…

Your Privacy Policy Questions, Answered

The questions below reflect what Indonesian account holders ask us most often about data, cookies, payment records and their rights. If your question is not covered here, reach our support team via live chat or the privacy email address listed in the contact section above.

We collect your name, email address, date of birth, and the payment method reference you use — for example, a DANA or OVO account identifier. Device data such as browser type and IP address is also logged for security purposes.

We share data only with service providers essential to running your account — payment processors like GoPay and QRIS networks, and fraud-detection tools. We do not sell your data to advertisers or unrelated companies.

Transaction references from DANA, OVO, GoPay and QRIS are kept for up to 24 months for dispute resolution and audit purposes. After that window, they are deleted from our active systems where local law permits.

Yes. Go to Account Settings → Privacy & Data and submit a data-access request, or email our privacy inbox with your account ID. We aim to send your data package within seven calendar days of identity verification.

Submit a deletion request through the in-account privacy form or via our privacy email. We will remove your personal data within 90 days of account closure, retaining only financial records we must keep where local law permits.

We use session cookies for login continuity and analytics cookies to improve page performance. You can manage your cookie preferences through the consent banner on first visit or under browser settings at any time.

Reach us first through live chat inside your orca128 account dashboard or through our dedicated privacy email. We acknowledge privacy complaints within one business day and aim to resolve them within five business days.