Reference

How h5.gowin Protects Your Personal Data

At h5.gowin, your personal data belongs to you — we collect only what we need to run your account, process payments through DANA, OVO, GoPay and QRIS, and…

Data collected only as neededDANA, OVO, GoPay & QRIS payment data securedAccount deletion on requestNo third-party sale of personal dataIndonesia-region data handling

Explore the Lobby Read FAQ

What This Policy Covers for Your Account

h5.gowin Service availability depends on jurisdiction. Users are responsible for checking local law before access.

This policy applies to every account registered on h5.gowin and covers all data we process when you log in, deposit via DANA or OVO, withdraw to your GoPay wallet, or scan a QRIS code at checkout. We operate under applicable Indonesian data-protection principles, and any cross-border

1
data transfer depends on local law. We do not process data in ways that conflict with your rights under Indonesian privacy frameworks. If a service feature requires data we have not listed here, we will notify you and ask for explicit consent before proceeding. Your account
2
data is stored on servers with AES-256 encryption at rest and TLS 1.3 in transit.

Service availability depends on jurisdiction. Users are responsible for checking local law before access.

PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about how your data is handled, want to download a copy of your account data, or need to request deletion, our…

DATA HANDLING PRACTICES

Six Ways We Protect Your Information

Data protection at h5.gowin is not a checkbox — it is built into how the platform processes every transaction, session, and account event.

Payment Data Isolation

When you pay via DANA, OVO, GoPay or QRIS, your payment credentials are handled by the payment provider directly.

Cookie Transparency

We use session cookies to keep you logged in and analytics cookies to see which lobby sections you visit most.

Account Security Events

Every login, password change, and withdrawal request generates a security event logged against your account.

Data Retention Schedule

Active account data is retained for the duration of your account plus 12 months after closure, in line with Indonesian…

Staff Access Controls

Only staff with a specific operational need can access identifiable account data, and each access event is logged with a…

Third-Party Disclosure Policy

We share data with third parties only where required to process your transaction (e.g.

Frequently Asked Questions About Your Data

Below are the questions we receive most often about how h5.gowin handles personal data. If your question is not answered here, the in-app request form or live chat team can give you a specific answer tied to your account record.

We collect your name, email address, date of birth, and country of residence at registration. If you deposit via DANA or OVO, we also receive a transaction reference number from those providers — we do not store your wallet login credentials.

Yes. Navigate to Account > Privacy & Data and submit a data access request. We will compile and deliver a structured file of your account data within 14 calendar days to the email address on your account.

Submit a deletion request via Account > Privacy & Data or through live chat. We close the account, remove identifiable records, and confirm deletion by email. Anonymised transaction references required by law are retained separately and cannot be traced back to you.

No. We do not sell or share personal data with advertisers, data brokers, or marketing networks. Data is shared only with payment processors — such as GoPay or QRIS routing partners — strictly to complete your transaction.

Only the transaction reference and outcome (success or failed) are stored on our side. The actual payment credential and wallet details remain with the payment provider. This limits what is exposed even in an unlikely data incident.

Identifiable account data is kept for 12 months after account closure to handle any dispute or regulatory query. After that period, records are deleted or fully anonymised. You can confirm your specific deletion date by submitting a data access request.

Contact our privacy desk immediately via email (listed in Account > Settings > Privacy) or through live chat during 08:00–23:00 WIB. We treat privacy complaints as high priority and aim to issue a first response within 24 hours of receipt.

How h5.gowin Protects Your Personal Data

Reach Our Privacy Team Directly

Six Ways We Protect Your Information

Payment Data Isolation

Cookie Transparency

Account Security Events

Data Retention Schedule

Staff Access Controls

Third-Party Disclosure Policy

Frequently Asked Questions About Your Data

01 What personal data does h5.gowin collect when I register?

02 Can I request a full copy of the data h5.gowin holds about me?

03 How do I ask h5.gowin to delete my account and personal data?

04 Does h5.gowin share my data with advertisers or data brokers?

05 Are my QRIS and GoPay transaction details stored on h5.gowin servers?

06 How long does h5.gowin keep my data after I close my account?

07 Who do I contact if I believe my privacy rights have been breached?

Related Pages