Reference

cupangjp Privacy Policy for Your Account

This Privacy Policy explains exactly what data cupangjp collects when you open an account, complete phone verification, or process a payment via DANA, OVO, GoPay or QRIS —…

Account data encrypted at restDANA, OVO, GoPay & QRIS transaction privacyPhone verification data kept minimalNo third-party data salesRight to request data deletion
cupangjp cupangjp Privacy Policy for Your Account
REACH OUR PRIVACY TEAM

Contact Us About Your Privacy Rights

If you want to access, correct or remove your personal data, our privacy support team is ready to assist. We handle data requests through dedicated channels separate from general account support, so your inquiry reaches the right team without delay. Response times for data-access requests are typically within 72 hours of your submission.

Team online

Privacy Email

Send a written data request to our privacy email address. Include your registered account phone number and the specific data you want to access, correct or delete. We respond within 72 hours.

Live Chat — Account Security Path

Open live chat from your account dashboard, select the Account Security path, then choose Privacy Request. Agents available 07:00–23:00 WIB daily to triage your query.

In-Account Data Centre

Navigate to Settings › Privacy › My Data inside your account. From there you can download a copy of your stored data or submit a deletion request without contacting support.

HOW WE HANDLE YOUR DATA

Data Handling, Cookies and Account Security

We apply layered security across every stage where your data moves — from the moment you verify your phone number through to the point a GoPay or QRIS withdrawal completes.

Data Collection Scope

We collect only the minimum needed to operate your account: name, phone, email and your chosen payment method. We do not collect browsing history outside our platform or build profiles for advertising networks.

Cookie Use

We use session cookies to keep you logged in and functional cookies to remember your preferred payment method — for example, DANA or OVO. You can clear these in your browser at any time without losing your account data.

Account Security Measures

Every account is protected by phone-number verification before first access. Sensitive fields such as withdrawal destination are locked behind a secondary confirmation step to prevent unauthorised changes.

Data Retention Period

Active account data is retained for as long as your account remains open. If you close your account, transaction records are retained for the period required under applicable regulations, then permanently deleted.

Who Can Access Your Data

Your data is accessible only to our account-operations and compliance teams on a need-to-know basis. We share transaction references with payment providers — DANA, OVO, GoPay, QRIS — solely to process and confirm your payments.

Requesting Changes or Deletion

You can update your contact details from Settings › Account or submit a full deletion request via the In-Account Data Centre. Deletion requests are processed within 14 days for accounts with no pending withdrawals.

Frequently Asked Questions About Our Privacy Policy

The questions below cover what we hear most from account holders in Indonesia — from how DANA and QRIS transaction data is stored to how you can download or delete your personal information from cupangjp.

We collect your name, email address, phone number and the payment method you register — such as DANA, OVO, GoPay or QRIS. Phone verification is required before account access is granted, and that verification record is stored securely against your account.

No. Wallet authorisation for DANA and OVO is handled entirely on the provider's own secure infrastructure. We receive only a transaction reference number, which we log for dispute resolution and account statements — never your wallet PIN or login details.

We use session cookies to keep your login active and functional cookies to remember settings like your preferred payment method. No tracking cookies are placed for third-party advertising. You can clear cookies in your browser at any time.

Once your account is closed and any pending withdrawals are settled, we retain transaction records only for the period required under applicable regulations. After that retention window closes, your personal data is permanently deleted from our systems.

Go to Settings › Privacy › My Data inside your account. From there you can download a structured copy of your stored data. For accounts in Bandung or Surabaya, the process is identical — the data export is available to all account holders where local law permits.

Reach our privacy team via the dedicated privacy email or through live chat on the Account Security path — available 07:00–23:00 WIB daily. Data-access and correction requests receive a response within 72 hours of submission.

Yes. The same privacy standards apply to all payment methods we support, including QRIS, virtual account and bank transfer through BCA, BRI, Mandiri or BNI. Transaction references are stored only for account statements and dispute resolution.