How We Protect Your Account & Wallet Access
Every login triggers an OTP sent to your registered number — enter it within three minutes and your session opens. Deposits from DANA, OVO or GoPay are matched against your verified wallet ID before funds reach your balance, so only your own transfers clear. Withdrawals require you to confirm the destination account number and re-enter your six-digit PIN; we hold the request
for manual review if the account name does not match your profile or if the amount exceeds your usual pattern. Session tokens expire after fifteen minutes of inactivity on mobile and thirty minutes on desktop, forcing a fresh login if you leave the tab idle. You can view every active session under account settings and revoke any device instantly — useful when
you have logged in from a shared computer or a friend's phone and want to close that access without changing your password.