Reference

citra77 Privacy Policy: What We Collect and Why

This Privacy Policy explains exactly what personal data citra77 collects when you open an account, verify your phone number, or complete a deposit via DANA, OVO, GoPay or…

Account & identity dataPayment method data: DANA, OVO, GoPay, QRISDevice and session dataCommunication recordsRetention schedule on request
citra77 citra77 Privacy Policy: What We Collect and Why
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy Rights

If you want to review, correct or request deletion of the personal data we hold on your account, our support team handles these requests directly.

Live Chat Available daily 08:00–24:00 WIB via the chat widget on site.
Email Support Send a written privacy request to our support address and we aim to respond…
In-Account Settings For payment transaction records — DANA, OVO, GoPay or QRIS — log in and…
HOW WE HANDLE DATA

Data Handling, Cookies and Account Security

citra77 applies a layered approach to data handling: collecting only what is operationally necessary, storing it with access controls, and deleting it when retention periods expire.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand how pages are navigated. You can disable non-essential cookies in your browser settings at any time without losing account access.

Account Security

Phone number verification is required before account access is granted. If we detect a login from an unrecognised device or IP, we flag it and may request re-verification to protect your data.

Data Retention

Transaction records — including DANA, QRIS and bank transfer entries — are retained for a minimum period required by applicable financial regulations. After that, they are deleted from active storage on a rolling schedule.

Third-Party Sharing

We share your data with payment processors such as OVO and GoPay only to authorise and complete your transaction. No profile data is passed to advertisers or data brokers.

Data Access Requests

You can request a copy of the personal data we hold on your account by contacting support via live chat or email. We aim to fulfil verified requests within seven calendar days.

Policy Updates

When this Privacy Policy changes materially, we post a notice on the site and record the revision date at the top of this page. Continued use of the account after notice constitutes acknowledgement of the update.

Frequently Asked Questions About Our Privacy Policy

Below are the questions we receive most often about how citra77 handles personal data — covering what we collect, how long we keep it, and how you can request changes to your record.

We collect your phone number, email address, and the payment details you submit — such as your DANA wallet ID or QRIS reference — plus the device type and IP address used at login. We collect only what is needed to run your account.

We share payment details with processors like OVO or GoPay only to complete your transaction. We do not sell your data to advertisers, data brokers or any other third party outside of what is required for operational purposes.

Transaction records from DANA, bank transfer and QRIS deposits are kept for the minimum period required under applicable financial regulations, then removed from active storage. You can request the specific schedule via email support.

Contact our support team through live chat (08:00–24:00 WIB) or by email. Verified data access or deletion requests are processed within seven calendar days. Your rights in this area depend on local law.

Yes. Any wallet reference — OVO account number, GoPay-linked phone, QRIS token — that you submit during a deposit is covered under this Privacy Policy and handled with the same access controls as your account credentials.

We use session cookies for login continuity and analytics cookies to improve navigation. Non-essential cookies can be disabled in your browser settings at any time; doing so will not affect your ability to log in or process payments.

We post a notice on the site whenever the policy changes materially, and the revision date at the top of this page is updated. We aim to give at least seven days' notice before significant changes take effect.