LEGAL REFERENCE

How lawu88 Handles Your Account Data

This is the lawu88 privacy policy — a plain-English read on what we collect when you open an account, why we need it, and how long it sits...

Data minimisedWallet-awareIndonesia-firstPlain EnglishUpdated regularly
lawu88 How lawu88 Handles Your Account Data

Our Privacy Posture and Your Rights

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

24/7 SUPPORT

Privacy Contact Paths

Data Requests Email our privacy desk to export, correct or...
Live Chat The chat bubble in the lobby reaches a...
Account Settings Open the privacy panel inside your account to...
EDITORIAL CLARITY

How We Keep This Policy Honest

Editorial Review

Our policy team rereads this page each quarter against actual lobby behaviour, so the wording matches what the product genuinely does — not a template borrowed from another brand.

Legal Counsel

Indonesia-licensed counsel signs off any change touching consent, retention or cross-border transfer before it appears here, with a revision note added to the footer.

Security Team

Our infrastructure team maps every data field to a storage zone and an access role, so the claims we make about who sees what hold up under audit.

Payment Partners

DANA, OVO, GoPay and QRIS each receive only the transaction fields they require to settle — never your full profile — and we document those handoffs in our processor register.

User Feedback

When you flag confusing wording through chat or email, we log it and rewrite the affected paragraph. Several lines on this page started as questions you asked us.

Regulator Alignment

We align retention timers and breach-notification timelines with the standards our supported-region regulators publish, and update this page within ten days of a relevant change.

Consistency Across Our Policy Pages

Terms of ServiceOur terms reference the same data categories listed here, so what you agree to at signup matches what this policy describes in detail.
Cookie NoticeCookie identifiers count as personal data in this policy and are handled under the same retention rules described in the details section above.
AML StatementIdentity checks for anti-money-laundering live under the same retention window noted here, with the regulator-mandated extension where applicable.
KYC NoticeDocuments you upload during verification follow the deletion timeline in this page, not a separate one buried elsewhere on the site.
Marketing PreferencesOpt-out toggles in your account control the same consent flag this policy refers to when discussing promotional contact and segmentation.
Data Export PageThe export tool returns exactly the fields enumerated in this policy — nothing extra, nothing redacted beyond what regulation requires us to hold back.
Breach DisclosureIf we ever notify you of an incident, the language used will reference the categories defined here so you can map the impact to your own record quickly.
QUICK SIGNAL

What Shapes This Policy Page

Plain Wording We avoid legalese where it doesn't earn its place. If...
Revision Stamp Each update carries a visible date and a short note...
Section Anchors Headings link directly so you can deep-link a friend or...
Mobile Layout The policy reads cleanly on the same phone you used...
Localised Examples Where we mention wallets or identity documents, we name the...
Quick Contact A privacy contact block sits within thumb reach at the...

Privacy Questions We Hear Most

At signup we take your name, contact details and device fingerprint. Once you fund the account we add the wallet handle for DANA, OVO, GoPay or QRIS, plus the transaction record needed for accounting.

Only with payment processors that settle your deposits and withdrawals, and with licensing or compliance bodies where local law permits. We never sell your record to advertisers or data brokers, full stop.

Active account data stays while your account is open. After closure we hold the regulatory minimum — typically five years for transaction history — then purge automatically on schedule for supported regions.

Yes. Email the privacy desk or use the in-account tool. We confirm closure, settle any pending balance, then delete fields not held under a regulator-mandated retention window within thirty days.

Open the privacy panel in your account settings and click export. You'll receive a structured file containing your profile, preference flags and transaction list, usually within minutes rather than days.

We notify affected accounts directly through the contact channel on file, describe the categories involved using this policy's language, and post a public notice within the regulator-defined window.

A revision date and short change note appear at the foot of the page. Material changes affecting consent or sharing also trigger an in-account banner the next time you sign in.