Reference

Your Rights and Our Legal Commitments

gemarwin operates under a clear legal framework designed to protect your account, your data, and your access rights — where local law permits.

Data Protection PolicyAccount Ownership RightsCookie & Tracking DisclosureDANA, OVO, GoPay, QRIS CoveredIndonesia Jurisdiction Noted
gemarwin Your Rights and Our Legal Commitments
LEGAL CONTACT PATHS

Reach Our Legal and Compliance Team

If you need to submit a legal request, dispute a transaction, or request account data deletion, our compliance team is reachable through three dedicated channels.

Live Chat Support Our live chat operates 07:00–23:00 WIB daily. For legal matters, select the 'Account & Legal' category from the chat menu and our compliance staff will handle your request directly without routing through general support.
Email — Legal Requests Send formal legal requests, data-deletion instructions, or dispute letters to our dedicated legal inbox. We acknowledge every submission within 24 hours and provide a case reference number for tracking your request through to resolution.
Account Panel — Document Upload Log in, navigate to Account Settings, then select 'Legal & Documents' to upload identity verification files or formal written requests. Files are encrypted on upload and accessible only to our compliance team for processing.
DATA HANDLING & SECURITY

How We Protect Your Account and Data

Account security and data integrity are handled through specific technical and procedural controls.

Data Encryption at Rest

All personal data tied to your account — including your name, registered mobile number, and payment method history across DANA, OVO, GoPay and QRIS — is encrypted using AES-256 at rest on our servers at all times.

Cookie Policy Transparency

We use session cookies for login continuity and analytics cookies to understand how you navigate the lobby. You can withdraw cookie consent at any time through the privacy settings panel inside your account dashboard without losing session data.

Account Ownership Verification

Your account belongs solely to you. We verify identity before processing any withdrawal or account-transfer request, using a two-step document check that matches your registered DANA or OVO wallet name against the account holder record.

Data Retention Schedule

We retain your account records for a period of five years from your last login, in line with financial record-keeping obligations. After that window, inactive account data is securely deleted unless a legal hold applies to your account.

Third-Party Data Sharing Rules

We do not sell or share your personal data with marketing partners. The only external parties who receive limited account data are our payment processors — DANA, OVO, GoPay, QRIS — strictly to complete your transaction and for no other purpose.

Requesting Your Data or Changes

You may request a full export of your stored personal data or ask us to correct inaccurate records by submitting a request via the Account Panel or our legal email inbox. We complete data exports within seven business days of verification.

What You Need to Know About Your Legal Rights

These are the questions we receive most often from Indonesian account holders regarding their legal rights, data use, and account access. Each answer reflects the actual process we follow, not a generic policy summary.

Your account is governed by Indonesian civil law as the primary jurisdiction. Access to certain product features depends on local law, and where a conflict exists between our platform terms and local regulation, the applicable local rule takes precedence.

Yes. Submit a data-export request through the 'Legal & Documents' section in Account Settings or by emailing our legal inbox. After we verify your identity, we deliver a complete data package within seven business days to your registered email address.

We use session cookies to keep you logged in and analytics cookies to improve navigation. You can manage or withdraw cookie consent at any time through the privacy settings in your account dashboard. Withdrawing consent does not log you out or erase your account history.

We retain your records for five years from your last login for financial compliance reasons. After that period, data is permanently deleted from our servers unless a legal hold is in place. You may request early deletion by submitting a written request to our legal team.

Your payment details are shared only with the relevant payment processor to complete your transaction — never with marketing firms or unaffiliated third parties. Transaction records are encrypted and stored solely for dispute resolution and regulatory compliance purposes.

Open live chat between 07:00–23:00 WIB and select 'Account & Legal', or send a written complaint to our legal email inbox. We acknowledge every dispute within 24 hours, assign a case reference number, and aim to resolve the matter within five business days.

Yes. Any material change to our legal terms is communicated to your registered email address at least 14 days before it takes effect. Continuing to use your account after that date constitutes acceptance of the updated terms on your part.