Reference

Legal Framework for Your surat4d Account

surat4d operates under a clear legal framework designed to protect your account data, define your rights as a user, and set out the terms that govern every transaction…

Account TermsPrivacy PolicyDANA / OVO / GoPay / QRISData Retention PolicyJurisdiction Notice
surat4d Legal Framework for Your surat4d Account
KONTAK LEGAL

How to Reach Our Legal and Compliance Team

If you have a question about your rights, a data request, or a dispute regarding a transaction made via DANA, OVO, GoPay, or QRIS, our compliance-trained support team is reachable through the…

Live Chat Open the live chat widget from your account dashboard, available 24 hours a day, seven days a week. Legal queries are flagged and routed directly to our compliance desk, not the general queue.
Email Support Send your legal or data request to our dedicated compliance email address listed in the account settings page. Expect a written response within 48 business hours, with a case reference number provided on receipt.
Help Center Ticket Submit a formal ticket through the Help Center portal. Choose the 'Legal & Privacy' category so your case bypasses general triage and lands with the correct team from the moment it is submitted.
KEAMANAN DAN KEPERCAYAAN

How surat4d Handles Data, Cookies, and Account Security

Every measure we take — from cookie management to withdrawal verification — is designed to keep your account yours.

Data Encryption

All personal data, including the wallet identifiers linked to DANA and OVO, is encrypted using AES-256 at rest. Connections to surat4d servers use TLS 1.3, so data in transit cannot be intercepted during login or payment steps.

Cookie Policy

We use strictly necessary cookies to keep your session active and optional analytics cookies to improve page load times for Indonesian users. You can withdraw consent for non-essential cookies at any time via the Cookie Preferences panel in account settings.

Account Security

Two-factor authentication is available for all accounts and strongly encouraged. If an unrecognised device attempts to log in, we send an immediate alert to your registered email address and temporarily lock the session pending your confirmation.

Data Retention

We retain transaction records — including QRIS and GoPay payment logs — for a minimum of five years to comply with applicable financial record-keeping requirements. Account data is deleted within 30 days of a verified account-closure request.

Withdrawal Verification

Before processing a withdrawal to any wallet or bank account, we run an identity check against the details submitted during registration. This step protects your funds and ensures payouts reach only the verified account holder.

Data Change Requests

You can request a correction, export, or deletion of your personal data at any time by submitting a ticket under the 'Legal & Privacy' category. We complete verified data requests within 14 calendar days and confirm completion by email.

Your Legal Questions, Answered Directly

These are the questions we receive most often from Indonesian users about our terms, data practices, and account rights. If your question is not covered here, open a ticket via the Help Center under the 'Legal & Privacy' category and our compliance team will respond within 48 business hours.

Access and eligibility depend on local law. We recommend you check the regulations applicable in your region before opening an account. Where local law permits, you can join and explore the full lobby without restriction.

We collect your name, date of birth, email address, and the payment identifiers linked to wallets such as DANA, OVO, GoPay, or QRIS. This data is used only for account management, identity verification, and legally required financial record-keeping.

Submit a ticket through the Help Center, selecting the 'Legal & Privacy' category and choosing 'Data Export Request'. We will compile and send a structured copy of your data to your registered email address within 14 calendar days of verification.

Yes. Submit a verified deletion request via the Help Center. We will close your account and erase personal data within 30 days. Transaction records may be retained for up to five years where financial regulations require, but they will not be used for marketing.

Open a live chat session or submit a formal ticket under 'Legal & Privacy' and include your transaction reference number. Our compliance team contacts the relevant payment rail within two business days and provides a written resolution timeline.

We publish updated terms at least seven days before they take effect and send a notification to your registered email address. Continuing to use the platform after the effective date constitutes acceptance; you may close your account before that date if you disagree.

surat4d is the data controller for all personal information collected on this platform. Contact details for the compliance team are available in your account settings page under 'Legal & Privacy', and all formal correspondence receives a case reference number within 24 hours.