Thank you for choosing to be part of our community provided and operated by PT Indodax Nasional Indonesia (“Indodax”, “We”, or “Us”), located in Indonesia. We are committed to protecting your Personal Data and fulfilling your rights as a Data Subject when you visit our Website (https://indodax.com), use the applications we provide (“Applications”), and access the services we offer (“Services”). We appreciate the trust you have placed in us by knowingly providing your Personal Data and information to us.

This Privacy Notice is a form of Indodax's commitment and compliance with applicable laws and regulations, as well as to provide you with clarity regarding the data we collect, how we use that data, and your rights. We encourage you to take the time to read this Privacy Notice carefully.

1. Effectiveness

By using our services, you acknowledge that you have read, understood, and agreed to all the contents of this privacy notice, and that you are the legitimate and authorized party to provide all information and Personal Data submitted to us.

We may change, delete, and/or update this Privacy Notice from time to time as necessary. If such changes, deletions, and/or updates constitute changes to information that must be notified to Users based on Applicable Regulations, we will use reasonable efforts to notify Users in advance through our official channels.

We encourage Users to read this Privacy Notice together with our General Terms and Conditions of Service, as these documents may contain specific information about how we process your Personal Data.

The version of the Privacy Notice displayed on our website/application/electronic system is an update to all previous versions of our Privacy Notice, so we encourage Users to check the Privacy Notice on our website/application/electronic system periodically.

The Privacy Notice displayed on our website/application/electronic system is an update to all previous versions of our Privacy Notice. Therefore, we encourage Users to periodically review the Privacy Notice on our website/application/electronic system.

This Privacy Policy is an integral part of Indodax's General Terms and Conditions (“GTC”). In the event of any conflict between the GTC and this Privacy Notice, the provisions of the GTC shall prevail, to the extent that they do not reduce the provisions on the protection of Personal Data as stipulated in the applicable laws and regulations.

2. Basis for Personal Data Processing

We will only process Personal Data by fulfilling one or more of the bases for processing as mandated by Law Number 27 of 2022 concerning Personal Data Protection, as follows: 

a. Your explicit and valid consent;

b. Fulfilling the obligations of the agreement between us and You;

c. To fulfill legal obligations under applicable laws and regulations;

d. To fulfill your vital interests;

e. To carry out the fulfillment of public interests or our authority based on laws and regulations;

f. To fulfill other legitimate interests while still considering the objectives, needs, and balance between us and You.

3. Personal Data We Process

In order to fulfill and achieve the purposes of processing your Personal Data, we will collect Personal Data and documents containing Personal Data from you directly or through other third parties (while remaining subject to and in accordance with applicable laws and regulations). We collect Personal Data in a limited and specific manner, covering only relevant information that we need for the purposes of our Services. The Personal Data and Documents containing Personal Data that you submit to us will be stored and processed for as long as we need to achieve the purposes of processing Personal Data. After that, Personal Data will be deleted and destroyed in a secure manner. If you stop using our Services, or if your permission to use the Services expires or is revoked, Indodax will only store, use, and/or disclose your Personal Data to the extent required by applicable law. 

The processing of each type of Personal Data we perform may differ depending on the purpose of processing and the activities involved in processing Personal Data. The Personal Data we process is as follows:

a. Full Name;

b. Gender;

c. Nationality;

d. Religion;

e. Marital Status;

f. Biometric Data (Facial Image);

g. Phone Number;

h. Internet Protocol (IP) Address.

Note: You are obligated to provide accurate and up-to-date Data. Indodax reserves the right to request additional documentation to verify the Data you provide.

4. Purpose of Personal Data Processing

Any processing of your Personal Data as set out in Section 3 is carried out by us for one or more of the following purposes:

a. To provide, maintain, and improve our products and services;

b. To process transactions and send related information, including confirmations, invoices, and notifications;

c. To execute agreements between you and Indodax;

d. To improve your experience in using our services;

e. To send technical notifications, security alerts, and support messages;

f. To provide services and respond to your inquiries;

g. To communicate with you about products, programs, or events available on Indodax, including providing news and marketing information that we believe will be of interest to you;

h. To monitor and analyze usage trends to maintain service quality;

i. Facilitating contests, promotions, or loyalty programs in a transparent manner;

j. Detecting, investigating, and preventing fraud, illegal activities, or security breaches;

k. Performing system maintenance and fixing errors in our system;

l. Fulfilling applicable legal and regulatory obligations;

m. Other legitimate purposes that are clearly communicated to you at the time of data collection.

5. Marketing

You have the right at any time to stop us from contacting you for marketing purposes or providing your data to other members of the Indodax Group.

If you no longer wish to be contacted for marketing purposes, please contact us.

6. User Rights

You have rights as a Personal Data Subject over your respective Personal Data (hereinafter referred to as “Personal Data Subject Rights”) in accordance with the PDP Law and policies that we establish from time to time with regard to the legal basis and processing of Personal Data. In this case, you have the right to:

a. Obtain information about the identity, legal interests, purposes of processing, and our responsibilities regarding your Personal Data that we process.

b. Complete, update, and/or correct errors and/or inaccuracies in your Personal Data in accordance with the purposes of processing your Personal Data that we process.

c. Obtain access to and obtain a copy of your Personal Data that we process in accordance with the provisions of laws and regulations.

d. Terminate the processing, delete, and/or destroy your Personal Data in accordance with the provisions of laws and regulations. 

e. Withdraw your consent to the processing of your Personal Data.

f. Object to automated decision-making based solely on the processing of your Personal Data.

g. Suspend or restrict the processing of Personal Data in a manner proportionate to the purposes of processing your Personal Data. 

h. Seek compensation in the event of a breach.

i. Obtain and/or use your Personal Data.

We can accommodate requests to fulfill Personal Data Subject Rights as described above, unless we believe that such fulfillment could potentially violate laws and regulations, violate legal provisions, or cause information to become inaccurate.

7. How Do We Collect Your Data?

We collect Personal Data lawfully when you:

a. Register for an account online on the system we provide.

b. Use, access, and interact with the services we provide.

c. Make any kind of agreement with us.

d. You grant permission on your device to provide information to us through the application.

e. Contact us via telephone, face-to-face meetings, social media platforms and email, or other means of communication. 

f. Voluntarily complete customer surveys or provide feedback on our message boards or via email.

g. Use or access our website through your browser cookies.

h. Obtaining data about you from legitimate third-party sources, including but not limited to identity verification service providers, banking or payment partners, and data analytics providers.

8. How do we process your data?

We process your personal data using reasonable methods in accordance with applicable laws and regulations and personal data protection principles to fulfill the purposes of personal data processing as specified.

9. How do we store your data?

We store your data securely on third-party systems that we use. We will store your personal data for as long as necessary to fulfill the purposes of processing while you use our services. After that period ends, we will delete your personal data. To protect your Personal Data, we implement international standards for Information Security Management Systems based on ISO 27001:2022 as the standard for implementing security systems for data confidentiality, integrity, and availability through reasonable controls and mitigation. 

We also constantly strive to improve the security of your Personal Data by using the latest technology and complying with applicable regulations, as well as ensuring continuous quality improvement. Furthermore, we make the protection of your Personal Data our priority by using the highest standards to secure your Personal Data.

10. What Are Cookies?

Cookies are text files stored on your computer to collect standard Internet log information and visitor behavior information. When you visit our website, we may automatically collect information from you through cookies or similar technologies. For more information, please visit allaboutcookies.org.

11. How Do We Use Cookies?

Cookies are small text files placed on your device when you visit our site that enable our site's features and functions. Cookies allow us to recognize your device(s) and store certain information about your preferences or previous actions. To run the features of our service as we offer them, we use Functional Cookies, Analytics Cookies, and Advertising Cookies.

a. Functional Cookies: These cookies are necessary for our services to function. it’s enable core functions such as security, network management, and accessibility. Without these cookies, certain features on our site may not work properly.

b. Analytics Cookies: These cookies help us understand how visitors interact with our site by collecting and reporting visitor behavior on our site. These cookies enable us to measure and improve the performance of our website, ensuring a better user experience.

c. Advertisement Cookies: These cookies track your online activity and enable us to provide relevant advertising content based on your interests. These cookies help us measure the effectiveness of our advertising campaigns and limit the number of times you see an ad.

12. Cookies We Use

To run our services properly, we use cookies and functions as listed in the following table.

13. Cookies Settings

You can set your browser to not accept cookies. However, in some cases, certain features of the services we provide may not function properly as a result.  

14. Other Websites Privacy Policies

This Privacy Notice applies only to websites and applications provided directly by us. If you visit a website outside of these two, you are advised to read and understand the privacy notice again.

15. Changes To The Privacy Notice

This Privacy Notice may be updated in accordance with our services, practices, and applicable laws. In the event of changes, We will publish them directly on Our Privacy Notice page and notify you via email and notifications in the Indodax Application. We encourage you to review this Privacy Notice periodically to stay informed about how Indodax protects and processes your Personal Data.

16. Contact Us

You may contact us if you have any questions or concerns regarding this Privacy Notice and the processing of your Data by contacting us via email at support@indodax.com.