1. What Data Do We Collect?
When registering and using dewi17 services, we collect several categories of data necessary to operate the platform effectively. Account data includes full name, email address, phone number, and an encrypted password. This data is used to verify user identity and ensure account security.
We also collect device and browser data, such as browser type, operating system, IP address, and device identifiers. This information helps us detect unauthorized access and optimize the platform's display for the various types of devices used by Indonesian users, including the most commonly used Android phones.
For transaction purposes, we store data related to the payment method used — including account name and bank code — however, we do not store PIN numbers, OTPs, or banking passwords of users. Usage data such as activity history, categories visited, and session duration is also collected anonymously for internal analytics purposes.
2. How Is This Data Used?
Data collected by dewi17 is used exclusively for platform operational purposes and improving the user experience. The primary purposes include: processing account registration and verification, managing deposits and withdrawals in Indonesian Rupiah (IDR), sending important account-related notifications, and detecting and preventing suspicious activity or fraud.
Anonymous usage data is analyzed to understand user navigation patterns so we can improve page layout, access speed on mobile connections, and the relevance of displayed content. dewi17 does not use user data for third-party advertising without explicit consent.
We may also use email addresses to send service-related communications, such as transaction confirmations, policy updates, or other important information relevant to the user's account. Users can manage these communication preferences through their account settings.
3. Cookies & Session Tracking
dewi17 uses cookies and similar tracking technologies to keep login sessions active, remember user display preferences, and analyze usage patterns in aggregate. The cookies we use fall into two categories: session cookies that are automatically deleted when the browser is closed, and persistent cookies that are stored longer to remember user preferences.
Users can manage or disable cookies through their browser settings. Please note that disabling certain cookies may affect platform functionality, such as the ability to remain authenticated or access features that require an active session. We recommend that users do not disable core functional cookies.
This platform does not use third-party cookies for targeted advertising. All data collected through cookies is used solely for dewi17's operational and internal analytics purposes.
4. & Data Storage & Security
All dewi17 user data is stored on servers protected by industry-standard SSL/TLS encryption. User passwords are never stored in plain text — only a hashed representation processed using high-security algorithms is stored. Access to the user database is strictly limited to personnel with the required authorization.
We implement multi-layered security monitoring to detect and respond to potential threats in real time. In the event of a security incident affecting user data, dewi17 is committed to notifying affected users within a reasonable timeframe in accordance with industry best practices.
Data from inactive users or closed accounts will be archived in accordance with legal and operational requirements, then securely deleted after the defined retention period ends. Users who wish to delete their data may submit a request through official support channels.
5. Sharing Data with Third Parties
dewi17 does not sell, rent, or distribute users' personal data to third parties for commercial purposes. User data may only be shared under the following limited conditions: with payment service providers required to process IDR transactions, with technology service providers supporting platform operations under strict confidentiality obligations, or with competent legal authorities based on a valid official request.
Every third-party partner working with dewi17 is required to sign a confidentiality agreement and is only permitted to access data directly necessary for the services they provide. dewi17 is responsible for ensuring that those partners comply with equivalent data protection standards.
6. User Rights Over Personal Data
Every dewi17 user has the right to access the personal data stored on the platform, request corrections to inaccurate data, and submit requests for account and associated data deletion. Such requests can be submitted through the Contact Us with sufficient identity verification.
Users also have the right to restrict the processing of their data for specific purposes, request a copy of their data in a machine-readable format, and object to data processing for certain purposes. dewi17 will process each request within a reasonable timeframe and provide confirmation of the action taken.
For further questions about data rights or how to manage privacy preferences, users may visit the dewi17 FAQ or contact the support team directly.
7. Privacy Policy Changes
dewi17 reserves the right to update this privacy policy at any time to reflect changes in data management practices, applicable regulatory updates, or developments in platform services. Any significant changes will be communicated to active users via their registered email or through in-platform notifications. The date of the last update is always displayed at the top of this page.
Users are advised to check this page periodically. Continued use of dewi17 services after policy changes are published will be considered acceptance of the updated terms. If users do not agree with the changes made, they have the right to stop using the service and submit an account deletion request.