LEGAL REFERENCE

How timah33 Handles Your Account Data

This is the privacy policy that sits behind every timah33 account you open. We've written it in plain language so you can see exactly what we collect when...

Account DataCookie UseKYC RecordsPayment LogsYour Rights
timah33 How timah33 Handles Your Account Data

Our Privacy Posture and Scope

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Privacy Contact Paths

Data Requests Inbox Email our privacy desk for export, correction or...
Live Chat Privacy Queue Our 24/7 chat has a dedicated privacy lane...
Account Settings Panel Most data controls — marketing toggles, session history...
WHY THIS PLATFORM

How We Review This Policy

Quarterly Legal Review

Our in-house legal team rereads this policy every quarter against Indonesia data protection updates, and we version-stamp the page so...

Encrypted Storage

Account credentials, KYC scans and payment metadata sit on encrypted volumes with rotating keys. Only the systems that need a...

Named Data Officer

A named data protection officer signs off on cross-border transfers and partner integrations. Their contact route is published inside this...

Vendor Vetting

Every payment, KYC and analytics vendor we add goes through a written assessment before they touch a single timah33 record...

Breach Protocol

If a privacy incident is detected, we have a 72-hour notification clock for affected accounts and the relevant authority, with...

Consent Logs

Every consent you give — marketing emails, cookie categories, SMS pings — is timestamped and reversible. We keep the log...

Consistency Across Our Policy Pages

Privacy vs Terms
This page covers data; the Terms page covers account conduct. The two cross-reference each other so you don't read conflicting clauses.
Privacy vs Cookies
Cookie categories are summarised here and detailed in the Cookies page. Both share the same consent banner and the same opt-out switches.
Privacy vs KYC
KYC retention windows match the figures published on our Verification page. If one moves, the other is updated in the same release.
Privacy vs Payments
Wording about DANA, OVO, GoPay and QRIS data sharing matches the disclosures on the deposit pages, down to the partner names listed.
Privacy vs Marketing
Opt-in language for promo emails mirrors the wording on the promo board, so you never see a tighter or looser consent prompt anywhere.
Privacy vs Support
Support agents quote this exact policy. Their internal scripts are generated from this page so answers stay aligned with what you read.
Privacy vs Mobile App
The mobile build inherits this policy without variation. Permissions requested on your phone map to the categories defined right here.
PLATFORM SNAPSHOT

What This Policy Page Shows You

01
Plain-Language Clauses We've stripped out the dense legalese where we could. Each section opens with a one-line summary of what it means for your timah33 account before the formal wording follows.
02
Version Stamp A visible last-updated date sits at the head of the policy. When wording shifts, we publish a short changelog so you can spot what moved without rereading the entire document.
03
Section Anchors Anchored headings let you jump to data retention, third-party sharing or your access rights in one tap, which is useful on phone screens where scrolling gets tiring fast.
04
Rights Checklist A compact checklist near the foot of the page lists every right you can exercise — access, rectify, erase, port, object — with the exact route to file each one.
05
Jurisdiction Notes Short callouts flag clauses that depend on where you sit. Indonesia-specific handling is marked so you're not reading rules that apply to a different supported region.
06
Contact Block The privacy contact block stays pinned at the foot. Email, chat handle and postal route are all listed so you can pick the channel that fits the request you're filing.

Privacy Questions We Get Often

We collect your name, contact details, date of birth, device identifiers and the payment reference linked to DANA, OVO, GoPay or QRIS. Anything beyond that is optional and tied to a specific feature you choose to switch on.

KYC scans are retained for the period Indonesia financial regulations require, which is currently five years from account closure. After that window we purge the files from primary storage and any encrypted backup tiers.

Yes. File a deletion request through the privacy inbox or live chat. We'll verify your identity, close the account, and erase the record except for entries we're legally required to retain for tax or anti-fraud purposes.

We share only what's needed with licensed payment partners, KYC vendors and analytics providers. Each partner is named in our vendor schedule, and none of them resell your data or use it for their own marketing.

Marketing emails and SMS are strictly opt-in. You can toggle them inside your account panel, and the change applies to the next cycle. We never bundle marketing consent into the registration tick-box.

Cookies are summarised here and detailed on our Cookies page. The consent banner lets you accept essential only, or extend permission to analytics and personalisation categories. Your choice is logged and reversible at any time.

Reach our data protection officer through the contact block at the foot of this page. Email is fastest for written requests; live chat works for quick clarifications about what a specific clause means for your account.