Reference

How coboyslot Handles Your Personal Data

At coboyslot, your personal data belongs to you — we collect only what we need to operate your account, process deposits via DANA, OVO, GoPay and QRIS, and…

Data collected only for account operationDANA, OVO, GoPay & QRIS transaction records protectedYou may request data access or deletionNo data sold to third partiesGoverned by applicable Indonesia privacy law
coboyslot How coboyslot Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about how we process your information, want to correct a detail on your account, or wish to submit a data-deletion request, our privacy support team is available…

Live Chat Open your account dashboard and tap the chat icon — our privacy support agents are available 24/7, including public holidays, and will acknowledge your data request within two hours during WIB hours.
Email Support Send your data access or deletion request to our privacy inbox. Include your registered email and the last payment method you used — DANA, OVO, GoPay or QRIS — so we can verify your identity before processing.
WhatsApp For urgent privacy concerns, message our WhatsApp line directly. We handle data-correction requests within one business day and send a written confirmation once the change has been applied to your account.
DATA HANDLING STANDARDS

Six Ways We Protect Your Account Data

Our approach to data security is built around the specific ways Indonesian accounts operate — from mobile-first QRIS scans in Jakarta to desktop sessions in Yogyakarta.

Encryption at Rest

All personal records — including your registered DANA or OVO wallet number — are stored with AES-256 encryption. Decryption keys are held separately from the data store and rotated every 90 days to reduce exposure risk.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand which account features you use most. You can disable non-essential cookies from your browser settings without losing access to your account.

Data Retention Schedule

Account activity logs are kept for 12 months then deleted unless a dispute is open. Payment transaction records linked to GoPay or QRIS are retained for 36 months to meet financial reporting obligations under applicable Indonesia regulation.

Third-Party Sharing Rules

We do not sell your personal data. We share only the minimum necessary with payment processors like DANA and OVO to settle transactions, and with fraud-detection partners — and only where local law permits such sharing for security purposes.

Account Security Alerts

Any login from a new device or IP address triggers an automatic email alert to your registered address. If you did not initiate the login, you can freeze your account immediately from the security settings page without contacting support.

Your Right to Access and Correct

You may request a full copy of the personal data we hold about you at any time. Correction requests are processed within three business days; verified deletion requests are completed within seven business days and confirmed by email.

Frequently Asked Questions About Our Privacy Policy

Below are the questions we receive most often about how your personal data is handled at coboyslot. If your question is not answered here, reach our privacy team via live chat or WhatsApp at any time — we typically respond to privacy queries within two hours.

We collect your name, email address, phone number, date of birth and the payment method you register — such as DANA, OVO, GoPay or QRIS. We also log device identifiers and session timestamps for security purposes. We do not collect more than is needed to operate your account.

Yes. Your registered wallet number — whether DANA, OVO, GoPay or QRIS — is encrypted with AES-256 before storage. It is never logged in plain text, and our payment processors access only a tokenised reference, not the raw wallet identifier.

You can submit a data-access request at any time via live chat or email. Include your registered email and the payment method linked to your account so we can verify your identity. We will deliver your data summary within three business days of verification.

Send a deletion request through live chat, email or WhatsApp. Once we verify your identity, we will remove your personal records within seven business days and send a written confirmation. Note that transaction records may be retained where local law requires financial reporting.

We share data only with payment processors — such as DANA and OVO — to settle transactions, and with fraud-detection partners where local law permits. We never sell your personal data to advertisers or data brokers under any circumstances.

Account activity logs are deleted after 12 months unless a dispute is open. Payment records linked to GoPay, QRIS or bank transfers are kept for 36 months to satisfy applicable Indonesia financial reporting obligations. After those periods, data is permanently deleted.

Go to your account security settings page immediately and use the freeze-account option — no support contact needed. Then message our privacy team via WhatsApp or live chat so we can investigate the session log and, if needed, purge the unauthorised device record.