Reference

How vintogel Handles Your Personal Data

Your personal data is collected, stored, and used only for the purposes described in this policy — account verification, payment processing via DANA, OVO, GoPay and QRIS, and…

Encrypted account dataDANA, OVO, GoPay & QRIS transaction privacyData access requests acceptedRetention periods disclosedContact us to update your data
vintogel How vintogel Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Any Data or Privacy Question

If you want to request a copy of your data, ask us to correct inaccurate records, or raise a concern about how your information is used, our privacy support team is available seven days a week. You can reach us by live chat on the site, by email at [email protected], or through the in-account support ticket system — all three channels are monitored daily, with responses typically within 24 hours for data-related requests.

Team online

Live Chat

Start a live chat session directly from any page on vintogel.xyz. Our privacy support agents are available daily from 08:00 to 23:00 WIB to handle data access and correction requests.

Email Support

Send a detailed request to [email protected]. Include your registered account email so we can verify your identity before processing any data disclosure or deletion request within 3 business days.

In-Account Ticket

Log in, navigate to Settings › Help, and submit a support ticket tagged 'Privacy Request'. This creates a reference number you can track, and our team responds within 24 hours on business days.

DATA HANDLING PRACTICES

Six Ways We Protect Your Account Data

Our data practices are designed around your account security and your right to control what we hold.

Encryption in Transit and at Rest

All data exchanged between your device and our servers uses TLS 1.3 encryption. Stored account and payment records — including DANA, OVO, GoPay and QRIS transaction logs — are encrypted at the database level using AES-256.

Cookie and Tracking Disclosure

We use session cookies to keep you logged in, analytics cookies to measure page performance, and preference cookies to remember your language and display settings. No advertising tracking cookies are set without your explicit consent via the cookie banner.

Payment Data Handling

We store only the reference identifiers for DANA, OVO, GoPay and QRIS transactions — not full wallet credentials. Payment rail providers handle authentication on their own secured infrastructure, limiting what we ever hold about your financial accounts.

Account Security Measures

Each account is protected by password hashing and optional two-factor authentication via SMS. Failed login attempts trigger an automatic lockout after five tries, and you receive an email alert whenever a new device accesses your account.

Data Retention Periods

Active account data is retained while your account remains open. If you request account closure, transaction records required for financial audit purposes are held for five years as required under applicable financial regulations, then permanently deleted.

How to Request Data Changes

Submit a written request via live chat or email with your registered account details. We verify your identity, then process corrections, access exports, or deletion requests within three business days — confirming completion by email once done.

Your Most Common Privacy Questions Answered

The questions below cover the data rights most frequently raised by people using vintogel — from what we collect when you deposit via QRIS to how long we keep your records after account closure. If your question is not listed here, use the live chat or email channel and our privacy team will respond within 24 hours.

We collect your name, email address, phone number, date of birth, and the payment method you link — such as DANA, OVO, GoPay or QRIS. Device type and IP address are also logged for security purposes at the time of registration.

We share data only with payment processors like DANA, OVO, GoPay and QRIS to complete transactions, and with identity verification services where local law requires it. We do not sell or rent your personal data to marketers under any circumstances.

Once you request closure, your active profile is deactivated immediately. Transaction and identity records are retained for five years to meet financial audit requirements under applicable regulations, then permanently and securely deleted from our systems.

Yes. Submit a data access request via live chat or email at [email protected] with your registered account email. We verify your identity and send a full data export within three business days of confirming the request.

Log in and go to Settings › Profile to update basic fields yourself. For changes to identity documents or payment records, submit a correction request via the in-account ticket system or email; our team processes these within three business days.

We use strictly necessary session cookies, performance analytics cookies, and preference cookies. Non-essential cookies require your consent through the cookie banner on first visit. You can withdraw consent at any time through the cookie settings link in the site footer.

Core data rights apply to all account holders. Certain data disclosure requirements and retention rules depend on local law in each region. Where local law permits, you may have additional rights to erasure or portability beyond our standard policy terms.