Reference

Lock Down Your Account With Two-Factor Setup

Two-factor authentication turns your phone into a second key. Enable it once, and every login asks for both your password and a code sent to your device—double the protection for your DANA, OVO, and GoPay wallet.

SMS CodeApp TokenAccount ShieldFast Enable
bisnis188 Lock Down Your Account With Two-Factor Setup
SETUP HELP

Common Two-Factor Questions

Team online

Lost Access to My Phone

If your phone is unavailable, use one of the backup codes you saved during two-factor setup. Each code works once. If you lost those too, contact our support team with your account details and ID proof to reset authentication.

Code Not Arriving

Check your phone number is correct in account settings and that SMS delivery is not blocked by your carrier. Switching to an authenticator app avoids SMS delays entirely, since codes generate locally on your device.

Switching to App Authentication

Open account settings, choose authenticator app under two-factor, scan the QR code with Google Authenticator or Authy, then enter the six-digit code shown in the app to complete the link. From that point all codes come from the app.

SECURITY FOUNDATION

How We Handle Authentication Data

End-to-End Code Delivery SMS codes route through local carrier gateways and expire after five minutes. App tokens generate on your device using a shared secret and never travel over the network, so interception is not possible once the initial QR scan completes.
Backup Code Storage We provide ten single-use backup codes during two-factor setup. Store them offline in a secure note or password manager. Each code works once, letting you regain access if your primary method fails, then mark it as used so it cannot be replayed.
Session Handling After Login Once you pass the two-factor gate we issue a session token valid for the period you choose in settings—stay logged in for convenience, or expire it quickly for shared-device security. The token itself is HTTP-only and cannot be read by scripts in the browser.
Removal and Reset You can disable two-factor in account settings, but we ask for your current code first to prove it is really you making the change. If you are locked out entirely, our support team verifies your identity through ID and account history before removing the second factor.
bisnis188 Why We Built Two-Factor Around Mobile Access

Why We Built Two-Factor Around Mobile Access

Password alone leaves your account exposed if someone guesses it or intercepts it. Two-factor setup means we text a six-digit code to your mobile every time you log in, or you generate one in an authenticator app like Google Authenticator. Even if your password leaks, the attacker still needs your phone in hand to get past the second gate. We built this

for players in Jakarta and across Indonesia who move between devices—home desktop, break, commute on mobile—and want the same account accessible everywhere without risking wallet exposure. Enable it in your account settings under Security, add your phone number, confirm the first code, and you're protected. From that point forward every session starts with the code step. You can switch to app-based tokens

if you prefer offline codes, and you'll get backup codes to store somewhere safe in case your phone is lost. The friction is one extra step; the payoff is knowing your live-casino balance, your slot session history, and your withdrawal queue stay locked to you alone

Two-Factor Glossary

What does two-factor authentication mean?

Two-factor authentication, or 2FA, requires two separate proofs before granting access—something you know, like a password, and something you have, like your phone. This way an attacker needs both pieces to break in.

What is an authenticator app?

An authenticator app like Google Authenticator or Authy generates time-based codes on your device without needing SMS. You scan a QR code once to link the app, then it produces a fresh six-digit code every thirty seconds.

What are backup codes?

Backup codes are single-use passwords provided during two-factor setup. Each code works once to log you in if your phone or authenticator app is unavailable, then expires so it cannot be reused or stolen.

Why does the code expire so quickly?

SMS and app codes expire after a few minutes to limit the window an attacker has to intercept and use a stolen code. If you miss the window, request a fresh code and it arrives immediately.

Can I use two-factor on multiple devices?

SMS codes deliver to one phone number, but authenticator apps sync across devices when you link the same app account. Backup codes work from any device since they are just text you type, not tied to hardware.

What happens if I lose my phone?

Use a backup code to log in, then disable two-factor in account settings and re-enable it with your new phone number or a fresh authenticator app scan. If you lost backup codes too, contact support with ID proof to reset.

Setup and Troubleshooting

Log into your account, open Settings, choose Security, then enable two-factor. Add your phone number for SMS codes or scan the QR with an authenticator app. Confirm the first code to activate, and save the backup codes shown.

Any TOTP-compatible app works—Google Authenticator, Authy, Microsoft Authenticator, or 1Password. Scan the QR code shown in account settings, and the app starts generating codes immediately. No account link or cloud sync is required unless your app offers it.

Check your phone number is correct in account settings and that your carrier is not blocking short-code SMS. If delays persist, switch to an authenticator app under two-factor settings so codes generate locally without relying on carrier delivery.

Yes. Open account settings, choose Security, and disable two-factor. We ask for your current code to confirm it is you making the change. Once disabled, login returns to password only until you re-enable it.

Each backup code is a single-use password that bypasses the two-factor gate once. Type one in place of the SMS or app code, log in, then go to settings and disable two-factor so you can set it up again with your new phone.

No. Two-factor protects your login and sensitive account changes; once you are logged in your DANA, OVO, GoPay deposits and withdrawal requests proceed at the same speed they always did. The extra security sits at the account gate, not the transaction flow.
Reference

Two Factor Setup

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.