Reference

How surya99 Handles Your Personal Data

At surya99, your personal data belongs to you — we collect only what we need to run your account, process deposits via DANA, OVO, GoPay, and QRIS, and…

Data collected only as neededDANA, OVO, GoPay & QRIS transaction records protectedAccount data retained per applicable lawYou can request access or deletion at any timePolicy applies to all surya99.xyz sessions
surya99 How surya99 Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy Rights

Live Chat — 24/7 Our live chat channel is open around the clock. If you want to request a copy of your data, ask about retention periods, or raise a data concern, our privacy team responds within the same session — day or night.
Email — [email protected] Send a written data request to [email protected]. We acknowledge all email requests within 24 hours and aim to fulfil verified data access or deletion requests within 14 calendar days of identity confirmation.
Account Settings Panel Log in, go to Account › Privacy, and submit a data export or erasure request directly. This panel also shows what categories of data we currently hold linked to your surya99 account and your registered payment methods.
DATA HANDLING STANDARDS

Six Ways We Protect and Manage Your Information

Earning your confidence means being specific about our practices. The six points below cover the complete lifecycle of your data at surya99 — from the moment you register through to how you…

Encryption at Rest and in Transit

All personal data — including payment references from DANA, OVO, GoPay, and QRIS — is encrypted using AES-256 at rest. Data moving between your device and surya99.xyz travels over TLS 1.3, preventing interception during login or transactions.

Cookie Use and Control

We use session cookies to keep you logged in and analytics cookies to understand which pages you visit. You can disable non-essential cookies through your browser settings at any time; doing so will not prevent you from accessing your account or making deposits.

Account Security Measures

Each account login is monitored for unusual location changes or device switches. If we detect an anomaly — for example, a login from Medan followed immediately by one from a foreign IP — we send an alert to your registered email within minutes.

Data Retention Schedule

Transaction records are kept for five years to meet audit obligations. Account profile data is held for as long as your account is active plus two years after closure. You may request early deletion where local law permits us to act on that request.

Third-Party Sharing Policy

We share data only with the payment processors needed to complete your DANA, OVO, GoPay, or QRIS transactions, and with regulatory bodies when required. We do not share your data with advertisers or data brokers under any circumstance.

Your Right to Access and Erasure

You may request a full export of your personal data or ask us to delete your account and associated records at any time via live chat or [email protected]. Verified requests are completed within 14 days, subject to retention obligations under applicable law.

Common Questions About Your surya99 Privacy Rights

The questions below address what we hear most often from account holders in Indonesia about data collection, payment records, cookies, and how to act on their rights. If your question is not here, reach us via live chat — available 24 hours a day.

We collect your full name, email address, date of birth, and your chosen payment method — for example, whether you use DANA or OVO. We also record your device type and IP address at the point of registration for account-security purposes.

Yes. Each deposit and withdrawal via DANA, OVO, GoPay, or QRIS generates a transaction record that we keep for five years. These records are used for fraud prevention and dispute resolution and are never shared with advertisers.

Log in and go to Account › Privacy to submit a data export request, or email [email protected]. We acknowledge your request within 24 hours and deliver a complete export within 14 calendar days after we verify your identity.

You can request erasure at any time through live chat or by emailing [email protected]. We will delete your profile and activity data, though transaction records required by law are retained for the legally mandated period, where local law requires it.

We use session cookies to keep you logged in and optional analytics cookies to improve page performance. You can disable non-essential cookies in your browser settings without affecting your ability to log in, deposit, or withdraw.

Access is limited to authorised staff in account operations, fraud prevention, and compliance roles. Payment processor partners see only the transaction data needed to complete your DANA, OVO, GoPay, or QRIS transfer — nothing beyond that scope.

Our live chat team is available 24/7 and can escalate privacy concerns immediately. Formal written complaints sent to [email protected] receive an acknowledgement within 24 hours and a resolution response within seven business days.