LEGAL REFERENCE

Your Privacy Matters. Here's How We Protect It.

When you open an account with pablo168, we collect only what we need to keep your account secure, process your DANA, OVO, GoPay and QRIS transactions, and deliver...

Data SecurityPayment SafetyYour ControlTransparencyCompliance
pablo168 Your Privacy Matters. Here's How We Protect It.

What We Collect and Why

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Questions About Your Privacy?

Team online

Email Support

Reach our privacy team at [email protected] with any concerns about your data, account access requests or deletion inquiries. We respond within 48 hours.

Account Settings

Review your personal information, communication preferences and connected payment methods directly in your account dashboard. Update or remove details anytime.

Data Request

Request a copy of all data we hold about you or ask for permanent account deletion. Submit via the Data Rights form in your account profile.

TRUST MARKERS

How We Earn Your Trust

Encryption Standard

All connections to pablo168 use TLS 1.2+ encryption. Payment data transmitted to DANA, OVO, GoPay and QRIS gateways meets PCI DSS compliance for card and wallet security.

Independent Audits

Our data handling practices are reviewed quarterly by third-party security auditors. Audit reports confirm our compliance with data protection frameworks.

Clear Cookies Policy

We use session cookies to keep you logged in and analytical cookies to improve performance. You can disable non-essential cookies in your browser settings anytime.

No Third-Party Tracking

We don't share your browsing behaviour with ad networks or data brokers. Your activity within pablo168 stays within pablo168, except as required by law.

GDPR Alignment

Although pablo168 operates in supported regions, we apply GDPR-equivalent data minimisation and consent principles. You control what we collect and store.

Incident Response

If a data breach occurs, we notify affected account holders within 24 hours and provide guidance on securing your account and payment methods.

Consistency Across Our Brand

Privacy First
Every pablo168 property — web, mobile app and lobby gateway — applies the same encryption, audit and retention standards outlined here. No shortcuts across platforms.
Payment Gateway Alignment
DANA, OVO, GoPay and QRIS transactions flow through pablo168 with identical privacy controls. Your wallet data never leaves the transaction layer.
Update Notifications
When we revise this policy, we notify you via email and in-app message at least 14 days before changes take effect. You can review the change log anytime.
Dispute Resolution
Privacy complaints are handled through the same support channel as account issues. If unresolved, you can escalate to the Indonesian Financial Ombudsman.
Children's Safety
pablo168 accounts are for adults only. We don't knowingly collect data from anyone under 18. If we discover a child's account, we delete it immediately.
Legacy Account Data
If you close your account, we retain transaction records for seven years to comply with Indonesian tax and financial reporting requirements.
Cross-Border Transfers
Your data may be processed in supported regions outside Indonesia if needed for service delivery or legal compliance. We apply the same security standard globally.

What Defines Our Privacy Approach

Account-Level Encryption

Your password is hashed, never stored in plain text. Two-factor authentication via OTP adds a second security layer when you log in from a new device.

Payment Data Isolation

DANA, OVO, GoPay and QRIS wallet tokens are stored separately from your profile data. We never see your full card number or wallet password.

Session Management

We automatically log you out after 30 minutes of inactivity. Session tokens expire after 24 hours even if you stay logged in. You control forced log-out settings.

Consent-Driven Marketing

We send promotional emails and in-app notifications only if you've opted in. Unsubscribe anytime without affecting your account status or gameplay access.

Data Portability

Export your account history, transaction logs and personal details in a machine-readable format (CSV/JSON) whenever you want. Transfer to another platform if you choose.

Right to Be Forgotten

Request permanent deletion of your account and associated personal data. We'll remove identifiable information within 30 days, except where law requires retention.

Privacy Questions Answered

We retain your name, email and identity verification for the duration of your account. Transaction records are kept for seven years to meet Indonesian regulatory requirements. After account closure, identifiable data is deleted within 30 days unless legal holds apply.

Yes. Go to Account Settings, select Data & Privacy, then choose Export My Data. We'll compile your profile, transactions and activity logs into a downloadable file within 48 hours at no cost.

Absolutely. We use tokenization, which means we never store your actual wallet credentials. Payment data is encrypted end-to-end and processed only by authorised payment gateways. You're protected by both our encryption and the payment provider's security.

Only you and pablo168 staff with authorisation. We share data with payment processors (DANA, OVO, GoPay, QRIS) only to process your transactions. We do not sell or lease your data to third parties under any circumstance.

Contact [email protected] immediately. We'll reset your password, review suspicious account activity, issue a new two-factor authentication token, and guide you through securing your connected payment methods.

Yes, we use functional cookies to keep you logged in and analytical cookies to improve performance. You can disable all non-essential cookies in your browser settings. Essential session cookies cannot be disabled without logging you out.

We comply with lawful data requests from Indonesian authorities when accompanied by proper legal process. We'll notify you of such requests unless prohibited by law. We never voluntarily share account data with government bodies outside legal requirements.