Reference

How mpo surga Protects Your Personal Data

Your personal information — including account details, payment records from DANA, OVO, GoPay and QRIS, and session activity — is handled with a clear set of rules we…

Data encrypted at rest and in transitDANA, OVO, GoPay & QRIS payment data protectedAccount deletion requests processed within 7 daysNo sale of personal data to third parties24/7 live chat privacy support
mpo surga How mpo surga Protects Your Personal Data
PRIVACY CONTACT CHANNELS

Browse Our Privacy Support Paths

If you have questions about how your data is stored, want to request a copy of your personal information, or need to report a data concern…

Live Chat Reach our privacy support team directly through the live chat widget on mposurga.
Email Send detailed data requests or deletion queries to [email protected].
WhatsApp For urgent privacy matters, WhatsApp support is available Monday through Saturday, 08:00–22:00 WIB.
DATA HANDLING STANDARDS

Switch to a Safer Account: How We Handle Your Data

From the moment you create an account to the point where you request its removal, mpo surga applies a layered approach to data security.

Encryption in Transit

All data moving between your browser or app and our servers is encrypted using TLS 1.3. This covers login credentials, DANA and OVO payment tokens, and live session activity — nothing travels in plain text.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can manage cookie preferences from your account settings page under Privacy Controls at any time.

Account Security

Two-step verification is available for all accounts. We also flag logins from unrecognised devices automatically and send an alert to your registered email or phone number within 60 seconds of the access attempt.

Data Retention

Active account data is kept for the life of your account plus three years after closure. GoPay and QRIS transaction logs are held for five years under applicable financial record-keeping requirements where local law applies.

Third-Party Sharing

We share data only with payment processors such as DANA, OVO, GoPay and QRIS to complete your transactions, and with fraud-prevention services. We never sell your personal data to advertisers or data brokers.

Your Right to Access

You can request a full export of the personal data we hold on your account at any time via email or live chat. We deliver the export as a structured file within seven working days of your verified request.

Open Answers to Common Privacy Questions

Below are the questions we receive most often about how mpo surga handles personal data, cookies, payment records, and account access rights. Each answer reflects the actual processes our operations team follows — not generic legal boilerplate.

We collect your full name, email address, phone number, date of birth, and the payment method you register — DANA, OVO, GoPay or QRIS. Device type, IP address and session timestamps are also recorded to protect your account from unauthorised access.

Payment tokens from DANA and OVO are never stored in full on our servers. We use a tokenisation method where your payment provider holds the sensitive credential and we retain only a reference token, reducing exposure in the event of any security incident.

Yes. Send a data access request to [email protected] or raise it through live chat. After we verify your identity, we will deliver a structured export of your account data within seven working days, at no charge.

We retain core account data for three years after closure and financial transaction records — including GoPay and QRIS logs — for five years, as required by applicable financial record-keeping obligations where local law mandates it.

We share data only with payment processors needed to complete your transactions and with fraud-prevention partners. We do not sell, lease or trade personal data with advertisers, data brokers or any unaffiliated third parties under any circumstances.

Contact us via live chat or email [email protected] with your account username and a deletion request. We will confirm receipt within 24 hours and complete the deletion within seven working days, subject to mandatory retention periods that depend on local law.

We use essential session cookies, analytics cookies to track lobby usage, and preference cookies that remember your language and payment settings. You can review and adjust all cookie categories from the Privacy Controls section inside your account settings page.