Reference

How lapak99 link Handles Your Personal Data

At lapak99 link, your personal data belongs to you — we collect only what is necessary to run your account, process deposits via DANA, OVO, GoPay and QRIS…

Data collected only for account purposesDANA, OVO, GoPay & QRIS payment data encryptedNo data sold to third partiesAccess requests answered within 7 business daysGoverned by applicable Indonesian data regulations
lapak99 link How lapak99 link Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team When You Need Clarity

If you have a question about your personal data, want to request a copy of the information we hold, or need to correct a detail on your account, our privacy support team…

Live Chat — Privacy Channel Open the chat widget inside your account dashboard, select 'Privacy Request' from the topic menu, and a dedicated agent will respond within 2 hours during operating hours, 08:00–23:00 WIB daily.
Email Support Send your written data request to our privacy inbox. Include your registered account email and the nature of your request — access, correction or deletion — and we will confirm receipt within one business day and resolve within 7.
In-Account Request Form Navigate to Account Settings › Privacy & Data inside your lapak99 link account on desktop or mobile. Submit the form directly; your request is timestamped automatically so you can track its progress without needing to follow up by chat.
DATA HANDLING STANDARDS

Explore How We Protect Your Account Data

Every layer of our data handling — from the moment you create your account to the last transaction you make via QRIS — is designed around containment and accountability.

Cookies & Tracking

We use session cookies to keep you logged in and analytics cookies to understand how pages load on your device. You can manage cookie preferences from the settings panel in your account; opting out of analytics cookies does not affect account functionality.

Account Security Measures

Your account password is stored as a salted hash — never in plain text. We enforce two-step verification for withdrawal requests and flag login attempts from unrecognised device fingerprints, triggering an email alert to your registered address within 60 seconds.

Data Retention Schedule

Active account data is retained for the lifetime of your account plus the statutory period required under applicable Indonesian regulations. Inactive accounts inactive for 24 consecutive months are flagged for review; you will receive an email notification before any record is scheduled for deletion.

Third-Party Data Sharing

We share data only with payment processors — DANA, OVO, GoPay, QRIS — and identity verification partners. Each partner signs a data processing agreement that prohibits them from using your data for any purpose outside the specific service they provide to us.

Your Right to Access & Correct

You may request a full export of the personal data we hold on your account at any time. Correction requests for inaccurate details — such as a misspelled name or outdated phone number — are processed within 5 business days of identity verification.

How to Request Deletion

Submit a deletion request via the in-account form or privacy email channel. We will confirm scope, remove your data from active systems within 14 business days, and send written confirmation. Statutory records required by law are retained separately and destroyed on schedule.

Open Answers to Your Privacy Policy Questions

The questions below cover the data scenarios our account holders ask about most — from what we store when you pay via DANA to how you exercise your deletion rights. If your question is not listed here, the privacy contact paths in the section above connect you directly to a qualified team member during operating hours.

We collect your name, email address, phone number, date of birth and country of residence at registration. Device identifiers and IP addresses are logged automatically for security purposes. We do not collect more than is necessary to operate your account under applicable law.

No. When you transact via DANA, OVO, GoPay or QRIS, only the transaction reference number and amount pass through our system. Your e-wallet login details, PINs and linked bank numbers are never stored on our servers at any stage of the deposit or withdrawal process.

Once you close your account, we retain records for the statutory period required under applicable Indonesian data regulations — typically aligned to financial record-keeping requirements. After that period expires, your data is scheduled for secure, irreversible deletion from all active systems.

Yes. Submit an access request via the in-account Privacy & Data form or email our privacy inbox with your registered email address. We will verify your identity, compile the data export and deliver it to you within 7 business days of confirming your request.

Log in to your account, go to Account Settings › Privacy & Data, and submit a correction request with the specific field and the correct information. After we verify your identity, corrections are applied within 5 business days. You receive a confirmation email when the update is complete.

We use session cookies — essential for keeping you logged in — and optional analytics cookies that help us understand page performance. You can manage analytics cookie preferences in the settings panel inside your account. Disabling analytics cookies has no effect on your ability to deposit, withdraw or access the lobby.

Contact our privacy team via live chat (select 'Privacy Request'), by email, or through the in-account form. We aim to acknowledge all complaints within one business day and resolve them within 14 business days. Escalation rights depend on local law and the relevant supervisory authority in your jurisdiction.