Reference

How m21play Handles Your Personal Information

We know you want to understand exactly what happens with your data when you open an account and use our platform, including when you deposit via DANA, OVO or GoPay.

Account data protectedDANA, OVO, GoPay payment data securedYour rights, clearly statedRetention periods disclosedContact path for data requests
m21play How m21play Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to request a copy of your data, ask us to correct inaccurate details, or raise a concern about how your information is handled, you can reach our team through any of the channels below. We aim to respond to all privacy-related requests within a reasonable timeframe, and we will confirm receipt so you know your message was received.

Live Chat Open the chat widget from your account dashboard. Mention 'data request' at the start so our team routes your message to the right person quickly.
Email Support Send your request to our support email with your registered account name and the specific data action you are asking for — access, correction or deletion.
Account Help Centre Log in and navigate to Account Settings, then select 'Privacy and Data'. From there you can submit a formal data request directly linked to your profile.
HOW WE PROTECT IT

Data Handling, Cookies, Security and Retention

We apply layered protections across every part of the platform where your information sits — from the moment you enter your details at registration through to the point your account closes. Our approach covers four distinct areas that affect you directly.

Account Security

Access to your account requires OTP verification sent to your registered mobile number. Any login from an unrecognised device triggers an additional confirmation step before the session is opened.

Payment Data Handling

DANA, OVO and GoPay transaction references are stored only as long as needed for account reconciliation and dispute resolution. We do not share these references with third-party advertisers.

Cookie and Tracking Practices

We use session cookies to keep you logged in and analytics cookies to understand how sections of the platform are used. You can clear or block cookies through your browser settings without losing your account.

Retention and Deletion

We hold your account data for as long as your account is active and for a defined period after closure as required by our operational obligations. After that period, personal identifiers are removed from active databases.

Your Privacy Rights — Common Questions

These are the questions we hear most often from account holders about their personal data, how it is used, and what steps they can take to manage or remove it. If your question is not covered here, reach out through live chat or the Account Help Centre.

We collect your name, email, mobile number and date of birth at registration. When you transact via DANA, OVO or GoPay, we also record the transaction reference to match the payment to your account.

Yes. Log in, go to Account Settings and select 'Privacy and Data', or send a request through live chat. We will compile your data and deliver it to your registered email address.

Submit a deletion request via Account Settings or email support with your account name. We will process it once any outstanding balance or open transaction on your account is resolved.

We share data only with service providers who help us operate the platform — payment processors for DANA, OVO, GoPay transactions and security tools. We do not sell your data to advertisers.

We retain your data for a defined period after account closure to meet our operational obligations. Once that period ends, personal identifiers are removed from our active systems.

Contact us immediately through live chat or email. We will review the session logs on your account, flag the incident for our security team, and guide you through securing your login credentials.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.