Your data. Your control. Our commitment.
At pksjitu, your privacy isn't secondary. We built our platform to collect only what's necessary to keep your account secure, process QRIS, DANA, OVO and GoPay payments reliably...
What we collect and why
We collect account details (name, email, phone), payment information tied to QRIS, DANA, OVO and GoPay wallets, gaming activity logs, and device identifiers to keep your sessions safe and prevent fraud. Your data stays within our systems and with trusted payment processors. We don't sell or rent your information. Where local law permits, we retain account records for compliance with Indonesian financial
regulations and dispute resolution. You can request access to or deletion of your personal data at any time via our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Why privacy policy compliance matters here
Encryption Standard
All payment data to QRIS, DANA, OVO and GoPay endpoints uses TLS 1.2 or higher. Your account session tokens refresh...
Payment Processor Vetting
We partner only with certified payment handlers who meet Indonesian banking standards and PCI compliance for card and wallet data.
Independent Audit Trail
Our data handling is logged and audited quarterly. Results available to privacy officers and regulators upon request.
No Third-Party Ad Networks
We don't share your gaming activity with advertisers. Analytics stay internal; you remain anonymous in reporting.
Data Retention Limits
Account data is kept for 7 years post-closure for regulatory purposes only. Gaming logs purge after 2 years unless dispute-active.
Policy Update Notifications
Changes to this policy trigger in-app alerts and email notices. You'll have 30 days to review before any new terms...
How our privacy stance holds up
Your privacy protections at a glance
End-to-End Encryption
Every login, deposit and withdrawal through QRIS, DANA, OVO or GoPay runs through encrypted channels. Your session is tied to your device fingerprint.
Two-Factor Authentication
Enable optional 2FA via email or SMS to add a second gate between your password and account entry. Recommended for all users.
No Password Storage
We store only hashed, salted versions of your password using bcrypt. Even our engineers cannot read it in reverse.
Session Timeout
Your account auto-logs out after 30 minutes of inactivity for security. Reopen on desktop or mobile to resume; no data loss.
Activity Dashboard
See every login, withdrawal and payment method change in real time. Flag suspicious activity and we'll lock your account instantly.
GDPR + Local Standards
Although GDPR applies to EU residents, we apply similar data minimisation principles to all Indonesia-supported accounts.