Reference

Our Legal Terms for Indonesian Accounts

mpomawar operates under a defined legal framework that sets out your rights, our obligations, and the conditions under which your account functions — all written so you can…

Account Terms & ConditionsDANA, OVO, GoPay, QRIS Payment PolicyData Retention RulesCookie & Tracking PolicyJurisdiction: Indonesia
mpomawar Our Legal Terms for Indonesian Accounts
CONTACT CHANNELS

How to Reach Us for Legal Queries

If you have a question about your rights under our terms, need a copy of stored data, or want to raise a formal dispute, our support…

Live Chat Our live chat channel is open 24 hours a day, 7 days a week.
Email Support Email our legal desk at the address listed in your account dashboard.
Account Dashboard Ticket Log in, head to Settings, then Contact Us, and choose Legal Inquiry as the…
ACCOUNT SECURITY DETAIL

How mpomawar Handles Your Data and Security

We apply specific controls at every layer of your account — from how cookies are set on your browser to how withdrawal requests are verified before funds move.

Cookie Management

We set session cookies and one persistent analytics cookie. You can review and withdraw consent for non-essential cookies at any time from the Privacy Preferences panel inside your account settings page.

Data Handling

Personal data collected at account creation — name, email, mobile number — is stored on encrypted servers. We do not sell or share this data with third-party marketers; it is used solely for account operation and fraud prevention.

Retention Schedule

Transaction records and identity documents are retained for 36 months from your last account activity. After that period, data is purged unless a legal hold is in place, which we will notify you about by email.

Withdrawal Verification

Before any withdrawal clears to DANA, OVO, GoPay or QRIS, our system runs a two-step identity match against your registered account details. This step normally completes in under 10 minutes on business days.

Account Security

We enforce two-factor authentication on login for all accounts. If our system detects an unfamiliar device or IP address, access is paused and a verification code is sent to your registered mobile number immediately.

Requesting Changes

To update personal data or request deletion, submit a written request via the Account Dashboard Ticket route under the Legal Inquiry category. We process verified requests within 5 business days and confirm completion by email.

Legal Terms: What You Actually Want to Know

These are the questions we receive most often through our support desk about our legal terms, data practices and account rights. Each answer reflects current policy as applied to accounts in Indonesia.

Yes — eligibility depends on local law in your specific region. Where local law permits, you can open and operate a full account. We encourage you to check the applicable rules in your area before registering.

We retain transaction records, including DANA, OVO, GoPay and QRIS payment logs, for 36 months from the date of your last account activity. After that, data is deleted unless a legal hold applies.

Yes. Submit a data access request through the Legal Inquiry ticket category in your account dashboard. We will compile and send your data file within 5 business days of verifying your identity.

Open a support ticket referencing the transaction ID shown in your account history. Our compliance team reviews disputes within 48 hours and provides a written outcome with the relevant transaction reference attached.

We send an email notification at least 14 days before any material change to our terms takes effect. The updated version is also published in the Legal section of your account dashboard with a revision date.

Submit a deletion request via the Account Dashboard Ticket under Legal Inquiry. Once identity is verified, we close the account and begin the data purge process, confirming completion by email within 5 business days.

We use two-factor authentication on every login and monitor for unfamiliar devices. If an unrecognised IP attempts access, your account is paused automatically and a verification code is sent to your registered mobile number.