Reference

How bosklik Handles Your Personal Data

At bosklik, your personal information is collected only for what we genuinely need — account verification, payment processing via DANA, OVO, GoPay and QRIS, and keeping your account…

Data collected only as neededDANA, OVO, GoPay & QRIS payment data securedYour right to request deletionIndonesia data practices apply

Explore Lobby Read FAQ

Explore What This Policy Covers

bosklik Service availability depends on jurisdiction. Users are responsible for checking local law before access.

This policy applies to every account holder who accesses bosklik where local law permits. We collect your name, email address, phone number, and payment identifiers — for example, the QRIS code or OVO wallet linked to your account — solely to process transactions and verify your

1
identity. We do not sell this data to third parties. Data retention depends on local law and our internal compliance schedule, typically held for no longer than five years after your last account activity. If you are based in Denpasar or elsewhere in Indonesia, local data-protection
2
regulations shape how we handle and store your records. You may request a full copy of your stored data by contacting our support team through the channels listed on this page.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

REACH OUR PRIVACY TEAM

Browse Your Privacy Contact Options

If you have a question about how your data is used, want to correct information on your account, or need to submit a formal deletion request…

HOW WE PROTECT YOU

Switch to a Safer Account Experience

Security at bosklik goes beyond a login password. We apply layered data-handling practices across every part of your account — from the moment you deposit via GoPay to the point your withdrawal…

Data Encryption

All personal data, including your payment identifiers for DANA, OVO, GoPay and QRIS, is encrypted using AES-256 at rest and TLS 1.3 in transit. No raw account data is ever stored in plain text on our servers.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how you move through the lobby. You can manage or reject non-essential cookies at any time through your browser settings or our cookie preference panel.

Account Security

Two-step verification is available for every account and we recommend you enable it from your Security Settings. Any unusual login attempt from an unrecognised device triggers an automatic email alert to your registered address.

Data Retention

We hold your account data for as long as your account remains active, then for the legally required period after closure — which depends on local law in Indonesia. After that window, data is permanently deleted from our systems.

Third-Party Sharing

Your data is shared only with payment processors — for example, the QRIS gateway or GoPay API — and identity-verification partners strictly necessary to run your account. We do not share data with advertisers or data brokers.

Your Data Rights

You hold the right to access, correct, or request deletion of your personal data at any time. Submit your request via live chat, email, or the in-account Privacy panel and we will respond within 48 hours of receipt.

Open Answers to Your Privacy Questions

The questions below reflect what we actually hear from account holders in Indonesia about data collection, storage, and rights. If your question is not covered here, reach our privacy team via live chat between 07:00 and 23:00 WIB or submit an email request at any time.

We collect your full name, email address, phone number, date of birth, and the payment identifiers you register — such as your DANA or OVO wallet number. This is the minimum needed to verify your identity and process transactions.

Payment reference numbers are stored for audit and dispute-resolution purposes, encrypted at rest. Raw card or wallet credentials are never stored on our servers — they are handled directly by the payment gateway and cleared after each session.

Yes. Log in, go to Settings, then Privacy, and select Data Request. Alternatively, email our support team with your account email and we will compile and send your full data record within five business days.

Submit a deletion request through the Privacy panel in your account settings or contact us via live chat or email. We will process the request within 30 days, subject to any retention period that depends on local law.

We share data only with the payment processors and identity-verification services necessary to run your account — for example, the QRIS gateway or OVO API. We do not sell or rent your personal data to any third party.

Once you close your account, your data enters a retention period whose length depends on local law in Indonesia, typically up to five years. After that period ends, all identifiable personal data is permanently deleted from our systems.

Open our cookie preference panel from the footer of any page, or adjust your browser settings to block non-essential cookies. Disabling analytics cookies does not affect your ability to log in or use your account normally.

How bosklik Handles Your Personal Data

Browse Your Privacy Contact Options

Switch to a Safer Account Experience

Data Encryption

Cookie Policy

Account Security

Data Retention

Third-Party Sharing

Your Data Rights

Open Answers to Your Privacy Questions

01 What personal data does bosklik collect when I open an account?

02 Is my QRIS or GoPay payment data stored after a transaction?

03 Can I request a copy of all the data bosklik holds about me?

04 How do I ask bosklik to delete my personal data?

05 Does bosklik share my data with other companies?

06 What happens to my data if I close my account?

07 How can I manage or turn off cookies on bosklik?

Related Pages