How virus88 Handles Your Account Data
This page sets out how we collect, store and use the information tied to your virus88 account. We keep the language plain so you can scan it in...
Our Privacy Posture and Jurisdiction
We process your virus88 account data under the rules of the supported regions where you sign in from. That means name, contact details, device fingerprints, session logs and payment references are handled only for purposes tied to running your account — verification, balance movement, dispute checks and security. Where local law permits, we retain transaction records for the period regulators require, then
purge. We do not sell your profile to third parties. Payment processors see only the fields they need to settle a DANA, OVO, GoPay or QRIS movement, nothing more. You can request a copy of what we hold at any point.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Contact Paths
How We Keep This Policy Honest
Editorial Review
Our legal and product teams re-read this policy each quarter so the wording tracks the actual data flows inside virus88, not a template copied from another brand. Changes get dated at the foot.
Named Reviewers
Every revision is signed off by a named data steward inside our team. If you ask who approved the current text, our support desk will tell you which role cleared it.
Version History
We keep prior versions of this policy on file. Request the archive through the privacy inbox and we send the dated PDFs so you can see what changed between revisions.
Encryption Standards
Account fields, session tokens and payment references move over TLS and rest behind encrypted storage. Our infrastructure team rotates keys on a schedule documented in our internal security posture.
Access Controls
Only staff with a job reason can open your profile. Each lookup is logged, reviewed, and tied to a ticket so we can trace any internal access back to a cause.
Regulator Alignment
Where local law permits us to operate, we align retention windows and breach-notice timing with that jurisdiction's data authority. Conflicts default to the stricter standard, not the looser one.