How We Handle Your Account Data
This is the dewi99 privacy policy — the page that tells you exactly what we collect when you open an account, why we hold it, and how long...
Our Privacy Posture and Your Rights
We process the data you give us during sign-up — name, contact, payment reference and device signals — only where local law permits and only for the purpose tied to your dewi99 account. For supported Indonesia regions, that includes verifying your wallet reference when you link DANA, OVO, GoPay or QRIS, recording session activity for security, and keeping audit trails our licensing
requires. You can ask us to export your record, correct an entry, or close the account and erase what isn't legally retained. We don't sell your data to third-party marketers, and our processors are bound by written contracts that mirror this policy.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Contact Paths
How This Policy Is Reviewed
Legal Sign-Off
Our retained counsel reviews every clause before it goes live on dewi99. Nothing reaches this page until the wording matches the licensing conditions we operate under for Indonesia-facing traffic.
Quarterly Refresh
We re-read the policy each quarter and any time a processor changes. If a paragraph moves, the change log at the top of the page tells you what shifted and when it took effect.
Data Map Audit
A documented data map sits behind this policy. We trace each field from sign-up through storage to deletion, so the answers you read here line up with what actually happens internally.
Processor Vetting
Every vendor that touches your account record signs a data-processing contract. We re-check their security posture annually and drop any partner that can't show current certifications.
Staff Training
Our support and payments teams sit through privacy refreshers twice a year. Access to your record is role-scoped, logged, and reviewed so only the agent helping you can read what they need.
Breach Protocol
If something goes wrong, we have a written escalation path: contain, assess, notify the regulator on the legal clock, and tell affected account holders in plain language without industry jargon.
Consistency Across Our Policy Pages
| Cookie Notice | The cookie notice and this privacy policy use the same definitions for session, preference and analytics cookies — no contradictions between the two documents on dewi99. |
|---|---|
| Terms of Use | Where the terms reference your data, they point back here. We don't bury privacy clauses inside the terms or duplicate them with slightly different wording. |
| AML Notice | Identity checks tied to anti-money-laundering rules are described in both places using identical retention windows so you see one consistent answer. |
| Payments Page | Wallet-linking data — the reference you share when adding DANA, OVO, GoPay or QRIS — is described the same way on the payments page and inside this policy. |
| Account Closure | Closure deletion timelines match the account-help page exactly: same days, same exceptions for legally retained records, no surprises later. |
| Marketing Preferences | Opt-in and opt-out language is mirrored on the preferences screen so the choice you make in-app reflects the rights described here word for word. |
| Complaints Path | Escalation steps for a privacy complaint match the general complaints policy, with the privacy desk as the first internal stop before any external regulator route. |
What Defines This Policy Page
Plain Language
We keep the wording readable on a phone. Short paragraphs, no recursive legalese, and a quick definition the first time a technical term appears so you aren't flicking between tabs.
Dated Sections
Each clause carries the date it was last touched. If something changed last week, you see that immediately at the top rather than hunting through a long changelog.
Scoped By Region
Where Indonesia-specific rules apply, we say so in the same paragraph. You don't have to guess which sentence is meant for your jurisdiction and which is generic.
Right-To-Act Buttons
Export, correct and erase requests have direct entry points from inside your account. The policy points to the exact screen so the right you read about is one tap away.
No Dark Patterns
Marketing opt-ins are off by default. You turn them on if you want promo emails, and switching them off again takes one toggle without a retention dialog trying to talk you out of it.
Change Alerts
Material updates trigger an in-app notice the next time you sign in. Minor edits stay in the changelog so you can scan what moved without being interrupted mid-session.