Reference

mega118 Privacy Policy: What We Collect and Why

The mega118 Privacy Policy explains exactly what personal information we gather when you open an account, how we store it, and who can access it — with specific…

Account Data ProtectionDANA, OVO, GoPay & QRIS ContextIndonesia Jurisdiction WordingCookie & Device Tracking NoticeYour Right to Request Changes
mega118 mega118 Privacy Policy: What We Collect and Why
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you want to request a copy of your data, ask us to delete specific records, or flag a concern about how your information has been handled, our support team is available around the clock. You can reach us through live chat directly inside your account dashboard, via our dedicated privacy email, or by submitting a formal data request through the account settings page. Responses to data-access requests from Jakarta or Yogyakarta are processed within three business days.

Team online

Live Chat

Reach our privacy support team through the chat icon in your account dashboard. Available 24 hours a day, seven days a week, for data queries and access requests.

Privacy Email

Send a detailed data-access or deletion request to our privacy inbox. We acknowledge every email within 24 hours and resolve most requests within three business days.

Account Settings

Log in, navigate to Account Settings, and use the Data Request form to submit changes or deletion requests directly — no separate email required for standard requests.

DATA HANDLING STANDARDS

Six Ways We Protect Your Personal Information

Our data-handling practices are built around the principle that your account information belongs to you, not to us.

End-to-End Encryption

All personal data, including wallet references from OVO and GoPay, is encrypted in transit and at rest using industry-standard protocols. Only authorised internal systems can decrypt stored records.

Cookie Transparency

We use session cookies to keep you logged in and analytics cookies to monitor page load performance. You can manage cookie preferences from the footer of any page on the site.

Account Security Alerts

Any login from an unrecognised device triggers an automated alert to your registered phone number. You can review all active sessions under Account Security and terminate any you do not recognise.

Data Retention Limits

We retain transaction records, including QRIS and bank transfer logs, for as long as required by Indonesian financial regulations. Non-essential data is deleted automatically after 12 months of account inactivity.

Third-Party Sharing Rules

We do not sell personal data. We share account information only with payment processors — such as DANA and BRI virtual account services — strictly to complete transactions you initiate.

Your Right to Request Changes

You can request a full export of your stored data, correct inaccurate details, or ask for account deletion at any time via the Account Settings form or our privacy email channel.

Your Privacy Policy Questions Answered

Below are the questions we hear most often from account holders across Indonesia about how the mega118 Privacy Policy works in practice — from what data we hold to how you can request changes or close your account entirely.

We collect your name, phone number, email address and the payment method you register — DANA, OVO, GoPay, QRIS or a bank transfer. We also log device type and session timestamps to protect against unauthorised access.

Yes. Payment references from DANA, QRIS, OVO and GoPay are stored to verify your deposit and withdrawal history. These records are encrypted and only accessible to our finance verification team.

Transaction and identity records are kept for as long as Indonesian financial regulations require. Non-essential account data is deleted automatically after 12 months of account inactivity, where local law permits shorter retention.

Yes. Submit a data-access request through the Account Settings page or email our privacy team directly. We acknowledge all requests within 24 hours and deliver the data export within three business days.

We do not sell your data. Information is shared only with payment processors — such as DANA, BRI virtual account services and QRIS clearing networks — when you initiate a transaction. No sharing happens for marketing purposes.

Navigate to Account Settings, select the Data Request form, and choose the deletion option. Alternatively, contact support via live chat or privacy email. Deletion is processed within three business days, subject to regulatory retention rules.

The core policy applies to all accounts. Specific data-retention and consent requirements depend on local law, and we apply the stricter Indonesian standard wherever it differs from our baseline practices.