Reference

How boom138 Handles Your Personal Data

At boom138, we collect only the data we genuinely need to run your account, process withdrawals, and keep your sessions secure — nothing more.

Data collected only as neededDANA, OVO, GoPay & QRIS transactions protectedYour rights — accessible 24/7Retention periods clearly statedContact us to request deletion
boom138 How boom138 Handles Your Personal Data
PRIVACY CONTACT PATHS

Browse Our Privacy Support Channels

If you have questions about how we store your data, want to correct an error in your account record, or need to submit a formal data-access request, our privacy support team is reachable around the clock. Queries from Bandung and across Indonesia are handled through the channels below — typical response time for data-related requests is within 48 hours on business days.

Team online

Live Chat

Start a live-chat session directly from your account dashboard — available 24 hours a day, seven days a week. Privacy queries are escalated to our data team and answered within one business day.

Email Support

Send your data-access or deletion request to our dedicated privacy inbox. Include your registered email and account ID so we can locate your records. We reply within 48 hours on business days.

Account Settings

Many privacy actions — downloading your data summary or updating contact details — are available directly in the Account Settings panel without contacting support, making self-service fast and straightforward.

DATA HANDLING STANDARDS

Switch On Confidence: How We Protect Your Information

Every security and retention measure below reflects what boom138 actually applies to your account data day-to-day.

Encryption at Every Layer

All data in transit — including your DANA, OVO, GoPay, and QRIS transaction details — travels over TLS 1.2 or higher. Data at rest is encrypted using AES-256 so stored records cannot be read without authorised decryption keys.

Cookie Policy

We use strictly necessary cookies to keep your session alive and analytics cookies to improve page performance. You can review or withdraw cookie consent at any time via the cookie preferences link in the site footer.

Account Security Controls

Two-factor authentication is available on your account — we strongly encourage enabling it. Login alerts are sent to your registered email whenever a new device or location accesses your account for the first time.

Data Retention Schedule

Active account data is held while your account remains open. After closure, we retain transaction records for the period required by applicable financial regulations, then securely delete remaining personal data. You can request the specific retention period for your record type.

Who Can Access Your Data

Internal access to personal data is restricted to staff whose role requires it — payment operations, fraud prevention, and customer support. We do not share your data with advertising networks or data brokers at any time.

Requesting Changes or Deletion

Submit a correction or deletion request via live chat or email, including your account ID. We verify your identity before acting on any request. Deletion of financial records may be limited where local law requires us to retain them.

Open Answers to Your Privacy Questions

These are the questions we receive most often about how boom138 manages personal data. If your question is not covered here, reach out through live chat or email and our data team will respond within 48 hours on business days.

We collect your name, email address, date of birth, and the payment method you register — such as DANA, OVO, GoPay, or QRIS. Device identifiers and IP addresses are also logged to detect unauthorised access and prevent duplicate registrations.

Payment identifiers linked to DANA, OVO, GoPay, and QRIS are encrypted using AES-256 at rest and transmitted only over TLS-secured connections. We do not store full payment credentials — only the transaction references needed for dispute resolution.

Yes. Submit a data-access request via live chat or email with your account ID. After we verify your identity, we will send a structured summary of your stored personal data within five business days, free of charge.

We retain transaction records for the period required by applicable financial regulations after account closure. Non-financial personal data — such as communication logs — is deleted within 90 days of closure unless local law requires a longer period.

We share data only with processors essential to running your account — payment processors for DANA, OVO, GoPay, and QRIS, and fraud-prevention services. We never sell, rent, or share your data with advertising networks or data brokers.

Log in and go to Account Settings to update your contact details directly. For changes to identity documents or registered payment methods, contact our support team via live chat. Corrections are processed within two business days after identity verification.

Yes — the scope of data rights available to you depends on local law. Where local law permits, you may request access, correction, portability, or deletion of your personal data. Our support team can clarify which rights apply to your jurisdiction.