ovo Privacy Policy
This page describes what we collect when you use e-wallet and how we keep that data protected. We at mobile banking take your privacy seriously — we collect only the information necessary to operate our platform, verify your identity, process payments, and comply with legal requirements. We do not sell your data to unrelated third parties, and we encrypt all sensitive information in transit and at rest.
When you open an local payment account, deposit funds via online payment, e-wallet, mobile banking, local payment, or bank transfer, or place a wager on Liga 1 or other sports, we record that activity. This data helps us prevent fraud, settle disputes, and improve our service. Our privacy practices apply to all users on online payment, whether you are based in Jakarta, Surabaya, Bandung, Medan, or Semarang.
Our servers may sit outside your jurisdiction, but we comply with data protection standards applicable to our operating regions. You have the right to access, update, or request deletion of your personal information subject to our legal and regulatory obligations. This policy is effective immediately and applies to all e-wallet accounts.
What data we collect on ovo
We collect your personal information during account registration — name, email address, phone number, date of birth, and residential address. We also collect identity documents (ID card, passport, or proof of address) as part of our Know Your Customer (KYC) verification process. This information is used to confirm your identity, prevent fraud, and comply with anti-money-laundering regulations.
When you use e-wallet, we record your account activity — deposits, withdrawals, wagers, game play, and winnings. We collect your IP address, device type, operating system, and browser information to detect suspicious access patterns and prevent account hijacking. We also record the time and date of each transaction, the payment method used, and the outcome of each wager. This transaction history is stored in your account and available for your review at any time.
How we use your data on local payment
We use your personal information to operate online payment — to create and maintain your account, process deposits and withdrawals, settle wagers, and provide customer support. Your identity information is used to verify that you are the account holder and to prevent multi-accounting and fraud. We use your transaction history to detect unusual patterns, such as rapid deposits followed by large withdrawals, which may indicate money laundering or account compromise.
We use your email and phone number to send account notifications — deposit confirmations, withdrawal status updates, and security alerts. We may also contact you if we detect suspicious activity on your account or if we need additional information for compliance purposes. You can manage your notification preferences in your account settings, but we will always send critical security alerts regardless of your preferences.
Third-party processors and data sharing on e-wallet
We share your payment information with payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and your bank) only to the extent necessary to process your deposits and withdrawals. These processors are bound by confidentiality agreements and are not permitted to use your data for their own marketing purposes. We do not share your account balance, wager history, or game play data with payment processors.
We may share your information with law enforcement, regulators, or government agencies if required by law or court order. We may also share aggregated, anonymised data with analytics partners to improve our platform — for example, we might report that "non-specific info of online payment users prefer live-dealer games over slots" without identifying any individual user. We do not sell your personal information to data brokers or marketing companies.
Data protection practices
- All connections to e-wallet use SSL encryption
- Your password is hashed and never stored in plain text
- Sensitive data (ID numbers, payment details) are encrypted at rest
- We conduct regular security audits and penetration testing
- We do not share your data with unrelated third parties
Cookies and tracking on mobile banking
We use cookies to maintain your login session, remember your preferences, and track your activity on local payment for security and analytics purposes. Essential cookies are required for online payment to function — without them, you cannot log in or place wagers. Preference cookies remember your language choice and account settings. Analytics cookies help us understand how users interact with e-wallet so we can improve the platform.
You can disable non-essential cookies in your browser settings, but this may limit your ability to use certain mobile banking features. We do not use cookies to track your activity outside local payment or to build a profile of your browsing habits across other websites. Third-party cookies (from advertisers or analytics services) are not placed on online payment.
Your rights and data access on ovo
You have the right to access all personal information we hold about you. You can download your account data — including your registration details, transaction history, and communication records — from your account settings or by requesting it from our support team. We will provide this information in a portable format within 10 business days of your request.
You can update your personal information at any time through your account settings. If you need to change your name, email, or address, you can do so directly. For changes that require identity verification (such as updating your date of birth), you may need to provide additional documentation. You can request deletion of your account and associated data, subject to our legal and regulatory retention requirements — for example, we must retain transaction records for anti-money-laundering compliance.
Data retention and account closure on e-wallet
We retain your personal information for as long as your mobile banking account is active. If you close your account, we retain your data for a minimum of five years to comply with anti-money-laundering and tax regulations. After this retention period, we delete or anonymise your information unless we are required by law to retain it longer. Transaction records are retained indefinitely for audit and compliance purposes.
If you request account closure, we will process your request within 10 business days. We will arrange withdrawal of any remaining balance to your original payment method. Your personal information will be retained as described above, but your account will no longer be accessible. You can request a copy of your data before closure if you wish to keep a record.
Security and data breach notification on local payment
We implement industry-standard security measures to protect your data — SSL encryption, firewalls, intrusion detection, and regular security audits. Our servers are hosted in secure data centres with physical access controls and redundant backups. We conduct penetration testing and vulnerability assessments to identify and fix security weaknesses before they can be exploited.
In the unlikely event of a data breach, we will notify affected users without unreasonable delay. We will inform you of the nature of the breach, the data that may have been compromised, and the steps we are taking to secure your account. We will also provide guidance on how you can protect yourself — for example, by changing your password or monitoring your account for suspicious activity. We will cooperate with law enforcement and regulators as required.
Contact and policy updates on online payment
If you have questions about our privacy practices or wish to exercise your data rights, contact our support team via email or in-app messaging. We will respond to privacy inquiries within 10 business days. You can also request a copy of this privacy policy or ask for clarification on any section.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by posting a notice on e-wallet. Continued use of mobile banking after an update means you accept the new policy. We encourage you to review this policy periodically to stay informed about how we protect your data.