Reference

Your Rights and Our Legal Commitments

gunungwin operates under a clear legal framework designed to protect your account, your data, and your transactions — all subject to where local law permits.

Account Holder RightsData Protection PolicyDANA, OVO, GoPay & QRIS ComplianceJurisdiction DisclosureIndonesian Law Alignment
gunungwin Your Rights and Our Legal Commitments
LEGAL CONTACT PATHS

Reach Us on Legal and Policy Matters

If you have a question about your legal rights, a data request, or a policy dispute, our support team is available around the clock to assist.

Live Chat — 24 / 7 Open the chat widget on gunungwin.xyz at any hour. For legal queries, type 'legal request' in your first message so our agent routes you to the policy team directly without delay.
Email — Policy & Data Requests Send formal data-access, correction, or deletion requests to our support email. We acknowledge every email within 4 business hours and resolve documented legal requests within 7 working days.
WhatsApp — Account Disputes For account disputes tied to transactions via DANA, OVO, GoPay or QRIS, reach us on WhatsApp. Have your account ID and transaction reference ready to speed up the verification step.
ACCOUNT & DATA SECURITY

How We Protect Your Data and Account

Security at gunungwin is not a single feature — it is a layered set of practices covering encryption, access controls, cookie handling, and data retention.

Data Encryption

All personally identifiable information stored on our servers is encrypted at rest using AES-256. In transit, your data travels over TLS 1.3 connections, meaning no third party can read your account details or payment history.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to measure page performance. You may opt out of analytics cookies at any time via the cookie preference panel in your account settings without affecting your session.

Account Access Controls

Two-factor authentication is available on every account. We strongly encourage you to activate it through Settings → Security. Any login attempt from a new device triggers an email alert to your registered address within seconds.

Data Retention Schedule

Account records are kept for a minimum of five years after closure, in line with financial compliance standards. After that retention window, personal data is permanently deleted unless a legal hold requires otherwise.

Right to Access and Correction

You have the right to request a copy of all data we hold about you or to correct inaccurate records. Submit a written request via email; we respond within 7 working days and fulfil data exports within 14 working days.

Designated Policy Contact

Our legal and data team handles all formal policy correspondence. Address your request to our support email with the subject line 'Data Rights Request' and include your registered account ID for fastest handling.

Common Questions About Our Legal Policy

These are the questions we hear most often from account holders in Indonesia regarding their legal rights, data handling, and how our policies interact with their day-to-day account activity. Each answer reflects the current operative version of our terms.

Yes — access to certain features depends on local law. We apply region-based eligibility checks at registration and monitor for regulatory changes that may affect what is available to your account in Indonesia.

You can. Send a written data-access request to our support email with 'Data Rights Request' in the subject line and your account ID in the body. We fulfil exports within 14 working days of verifying your identity.

Transaction records — including those for DANA, OVO, GoPay and QRIS payments — are retained for a minimum of five years after account closure, in line with applicable financial record-keeping requirements.

If a regulatory change in Indonesia affects how we handle your data, we notify you at your registered email address within 72 hours of the change taking effect and update the legal terms version timestamp accordingly.

Contact us on WhatsApp or live chat with your account ID and the transaction reference number. Our team opens a formal dispute case and provides an initial response within 24 hours of receiving your details.

Yes, you may request permanent deletion by emailing our support team with subject line 'Deletion Request'. We acknowledge within 4 business hours and complete the deletion — subject to any legal hold obligations — within 30 days.

Go to Settings → Security → Cookie Preferences in your account dashboard. Turning off analytics cookies does not affect your login session, payment flow, or any other account function — your session cookie remains active.