How to Remove Your ID Card Data from Online Lending Apps: Seven Steps

Jakarta (ANTARA) – Using online lending services requires prospective borrowers to submit personal data, including their Population Identification Number (NIK) and a photograph of their identity card (KTP). This information is generally used to verify identity, assess creditworthiness and administer loans.

However, after a loan has been repaid or someone stops using a service, questions arise about how to delete KTP data stored in an online lending app. The concern relates to identity security, particularly if personal data is no longer needed or could be misused.

Deleting the app from a phone is not necessarily enough to remove the data. Users need to submit a request to the lender, check the status of their loan obligations and understand their rights over personal data. Providers may also be required to retain some information to meet legal obligations.

The following steps can be taken to request the safe deletion of KTP data from an online lending app.

1. Make sure the loan has been repaid

Before requesting data deletion, ensure that all loan obligations have been settled. Check the principal, interest, service fees and any penalties.

If a loan is still active or overdue, users must continue to meet their obligations under the agreement. A request to delete personal data does not automatically cancel a debt or payment history.

Keep proof of repayment, such as a receipt, transfer confirmation or clearance letter. These documents may be useful if there is a dispute about the loan’s status.

2. Contact the lender through official channels

Once the loan has been confirmed as repaid, contact the online lender’s customer service team or personal data protection officer.

Ask the provider to delete personal data, or stop processing data that is no longer needed. This may include copies of a KTP, facial photographs, telephone numbers, addresses and other personal information held in its systems.

Submit the request through an official channel, such as the company’s email address, the app’s help centre or the customer service number listed on its official website.

Make sure you receive a complaint reference number or other evidence that the request has been received.

3. Submit a written data deletion request

To make the request easier to process, users should submit it in writing. Include their account details, registered telephone number and confirmation that the loan has been settled.

Users may also ask what types of data are still being retained, why they are being held and for how long.

Under Law No. 27 of 2022 on Personal Data Protection, individuals have the right to end the processing, delete and destroy their personal data in accordance with applicable laws and regulations.

However, this does not mean that all information must be deleted immediately. Companies may be required to retain certain data to comply with the law or fulfil outstanding obligations.

4. Ask for written confirmation and an explanation

Do not rely solely on a response saying that the account has been deactivated. Request written confirmation of the action taken in response to the data deletion request.

Questions to ask include:

• Have the copy of the KTP and identity photographs been deleted?

• Is any data still being held to meet legal obligations?

• Why is any data that has not been deleted being retained?

• How long will it be retained?

• Is it still being used for marketing or loan offers?

If some data cannot be deleted, users can ask for the legal basis and retention period.

The Personal Data Protection Law also requires data controllers to notify individuals when their data has been deleted or destroyed.

5. Close the account once the situation is clear

Once the request has been processed and all obligations have been settled, users can proceed to request account closure through the app.

The account closure option is usually available under settings, profile or the help centre. Procedures differ between providers.

Deleting an app from a phone is not the same as deleting an account or data stored on the company’s servers.

For this reason, do not delete the app before communicating with the provider and keeping evidence of the request. Also make sure there are no outstanding transactions or obligations.

6. Review the app’s permissions

In addition to asking the provider to delete data, users can review the app’s access permissions in their phone settings.

On Android devices, the general steps are:

1. Open Settings.

2. Select Apps.

3. Find the online lending app.

4. Open App Permissions.

5. Review access to the camera, microphone, location and other features.

6. Disable permissions that are no longer needed.

On an iPhone, users can open Settings, select the relevant app and review the permissions granted.

This helps restrict the app’s access to the device. However, revoking permissions does not automatically delete KTP data or other information previously submitted and stored on the provider’s servers.

7. Report the matter if the deletion request is ignored

If the provider does not respond or is suspected of misusing personal data, users can make a complaint through official channels.

For licensed online lenders regulated by the Financial Services Authority (OJK), complaints can be submitted through OJK Contact 157 or the Consumer Protection Portal Application (APPK).

Users can also contact the OJK on WhatsApp at 081-157-157-157. The 157 telephone service operates 24 hours a day, according to operational information published by the OJK in 2025.

Prepare supporting evidence, such as screenshots of conversations, emails requesting deletion, proof of repayment and details identifying the provider. This can assist with the investigation of a complaint.

If there is suspected identity misuse to apply for a loan without consent, users can also report it to the police.

KTP data submitted to an online lending app cannot always be deleted in full immediately. Financial service providers may be required by applicable rules to retain certain documents and information.

Law No. 27 of 2022 gives data owners the right to request deletion. Its implementation, however, remains subject to the legal basis for processing, retention periods and data controllers’ legal obligations.

Users should therefore distinguish between deleting an account, stopping data processing for a particular purpose and destroying all personal data. These processes do not necessarily take place at the same time.

Users should also be wary of people offering to delete online lending data for a fee. Do not give your KTP photograph, password, one-time password (OTP) or account access to anyone whose identity is unclear.

The OJK has warned the public about services offering to delete loan data or repair credit histories instantly in return for an upfront fee. Such offers may be a new form of fraud.

In addition to requesting the removal of data from apps they no longer use, users should protect their identity when accessing digital financial services.

Recommended measures include:

1. Use online lending apps licensed by the OJK. Check the provider’s status through official channels before applying for a loan.

2. Do not send KTP photographs indiscriminately. Make sure the request comes from the company through an official channel.

3. Do not share OTP codes. Verification codes must not be given to anyone, including someone claiming to work for the app.

4. Use different passwords. Avoid using the same password for multiple financial services.

5. Check account activity regularly. Follow up immediately on any unfamiliar transaction or loan application.

The OJK also advises the public to keep passwords and OTP codes confidential to prevent data misuse by irresponsible parties.

Removing KTP data from an online lending app requires following the provider’s official procedures; simply deleting the app from a phone is not enough. Users can start by making sure the loan has been repaid, submitting a written deletion request and seeking confirmation about any data that is still being retained.

Nevertheless, not all data can be destroyed immediately because rules may require certain information to be kept by financial service providers. Understanding personal data rights and using official complaint channels are important steps in protecting one’s identity.