Reference

Explore How We Protect Your Personal Data

At lucky apk, your personal data is handled with care and full transparency — from the moment you open an account to every transaction you make via DANA…

Account Data ProtectedDANA, OVO, GoPay & QRIS Transactions SecuredData Access on RequestNo Third-Party Sale of Your DataIndonesia Region Policy
lucky apk Explore How We Protect Your Personal Data
REACH OUR PRIVACY TEAM

Open a Privacy Request Through These Channels

If you have a question about how your data is used, want to request a copy of your records, or need to correct information on your account, our privacy support team is…

Live Chat Support Reach our privacy team directly through the live chat window inside your account dashboard, available every day from 08.00 to 23.00 WIB for data-related questions.
Email Privacy Request Send your data access or deletion request to our dedicated privacy inbox. We acknowledge every email within two hours during operating hours and resolve most requests within five business days.
In-Account Help Centre Navigate to Settings › Privacy in your account to submit a formal data request, update your communication preferences, or withdraw consent for optional data processing without contacting support.
HOW WE HANDLE DATA

See How lucky apk Manages Your Account Data

Data handling at lucky apk follows a set of operational practices designed to keep your information accurate, accessible, and secure at every stage of your account lifecycle.

Cookies and Tracking

We use session cookies to keep you logged in and analytical cookies to measure page performance. You can disable non-essential cookies at any time via your browser settings without losing access to your account.

Payment Data Handling

Transactions made via DANA, OVO, GoPay, and QRIS are logged against your account ID only. We never store full card or wallet credentials on our servers — those remain with the payment provider.

Account Security Practices

Your account password is hashed using industry-standard encryption and is never readable by our staff. Suspicious login attempts from unrecognised devices trigger an automatic security alert sent to your registered email.

Data Retention Period

We retain your account records for as long as your account remains active and for a period of up to five years after closure, in line with applicable financial record-keeping requirements where local law permits.

Your Right to Access

You may request a full export of the personal data we hold about you at any time. Requests submitted via the Help Centre or privacy email are processed within five business days at no cost to you.

Who to Contact for Changes

To correct, delete, or restrict the processing of your data, contact our privacy team through live chat or the privacy email. We confirm every change in writing to your registered address within 48 hours.

Switch to the Answers You Are Looking For

We have gathered the questions about privacy that come up most often from our account holders in Indonesia — covering data rights, payment records, cookies, and how to reach us. If your question is not here, the privacy email channel is the fastest path to a direct answer.

We collect your name, email address, date of birth, and the payment method you link — such as DANA, OVO, GoPay, or QRIS. We also log your device type and IP address to verify account security on every login.

We do not sell your personal data to advertisers or data brokers. We share information only with payment processors — like DANA and OVO — that are necessary to complete your transactions, and only to the minimum extent required.

After account closure, we retain your records for up to five years where local law permits. This covers transaction logs, identity verification documents, and communication history tied to your account.

Yes. Submit a data export request via Settings › Privacy in your account or email our privacy inbox. We will compile and send your full data file within five business days at no charge.

Send a deletion request through our privacy email or live chat. We will remove data that is not subject to legal retention requirements and confirm the deletion in writing within 48 hours of processing your request.

No. We record the transaction reference and amount against your account ID, but full wallet credentials stay with the payment provider. We never have access to your DANA, OVO, GoPay, or QRIS account passwords.

You can turn off non-essential cookies in your browser settings at any time. Essential session cookies are required to keep your account logged in; all others — analytics and preference cookies — are optional and can be disabled without affecting account access.