Semesta Indovest Sekuritas

PT Semesta Indovest Sekuritas ("Semesta Indovest Sekuritas") is committed to upholding the confidentiality and security of personal information belonging to our Users ("Customers/You") and prospective Customers in compliance with applicable laws and regulations.

This Privacy Policy explains what information we gather, why we collect it, and how you can update, manage, export, or delete your information.

In this Privacy Policy, we affirm that Semesta Indovest Sekuritas as the Personal Data Controller consistently works to ensure security and protection for your convenience during transactions. Semesta Indovest Sekuritas also pledges to safeguard User data and clarify how we collect, store, use, process, analyze, display, and/or manage any form of data or information that Customers provide to Semesta Indovest Sekuritas or that Semesta Indovest Sekuritas obtains from Customers, including Customer Personal data when registering, accessing, or using Semesta Indovest Sekuritas Services.

We continuously protect your Personal Data in accordance with Law Number 27 of 2022 concerning Personal Data Protection and its implementing regulations, referred to as the "UU PDP," as well as other relevant and applicable laws and regulations, to guarantee the security of your data privacy.

We collect personal information to provide you with a fair, transparent, secure, and efficient transaction experience. You consent that Semesta Indovest Sekuritas may share your Personal Information with the following entities:

Financial Services Authority (OJK)
Self Regulatory Organization (SRO) comprising the Indonesia Stock Exchange, Indonesian Clearing and Guarantee Corporation (KPEI), Indonesian Central Securities Depository (KSEI)
Law Enforcement Agencies
Other Ministerial Agencies as required by law
Vendors
Private Institutions
Companies
Other Parties for implementing any agreement with them or you, affiliated parties, search engines for Know Your Customer ("KYC") / Customer Due Diligence ("CDD") purposes, and other authorized related parties in accordance with the UU PDP and/or provisions of applicable laws and regulations

We utilize your data to enhance reliability and improve our Electronic System quality. By accessing and using our Electronic System, you agree to the use of data/information in accordance with this Privacy Policy.

A. DEFINITIONS

In this Privacy Policy, the following terms are defined as:

Personal Data refers to data about individuals that is identifiable individually or in combination with other information either directly or indirectly through electronic or non-electronic systems
General Personal Data refers to Personal Data that is general in nature and not included in the Specific Personal Data category, including but not limited to: full name, mother's maiden name, gender, address, place and date of birth, phone number, email address, occupation, IP address, geo-location data, unique device identifier, photo, identification numbers issued by Competent Authorities (such as: National Identity Card (KTP), Driving License (SIM) or passport), citizenship, and signature
Specific Personal Data refers to Personal Data that is sensitive in nature and requires heightened protection compared to other Personal Data under applicable laws and regulations, such as bank accounts, investment objectives, sources of investment funds, risk profiles, trade confirmations, monthly reports, biometric data, and transaction data combined with or containing Personal Data
Semesta Indovest Sekuritas refers to PT Semesta Indovest Sekuritas
Third Party refers to any party maintaining a business relationship with Semesta Indovest Sekuritas including business partners, vendors, outsourcing companies, and/or other parties appointed to represent Semesta Indovest Sekuritas
Personal Data Subject or Customer/You refers to any Personal Data owner using the Services including, but not limited to, Customers and individuals appointed and/or authorized to represent Semesta Indovest Sekuritas Customers, and visitors or users of Semesta Indovest Sekuritas website or application where this Privacy Policy applies and is displayed
Services refers to all types of Semesta Indovest Sekuritas services and products including websites, features, applications, social media, or other communication media provided or used by Semesta Indovest Sekuritas
UU PDP or Personal Data Protection Act refers to Law Number 27 of 2022 concerning Personal Data Protection and its derivative regulations as well as amendments from time to time
Personal Data Processing refers to any activity for obtaining, collecting, processing, analyzing, storing, correcting, updating, disseminating, displaying, announcing, transferring, disclosing, removing, and destroying Personal Data

B. COLLECTION AND USE OF PERSONAL INFORMATION

We collect several information types to enhance our services to you, including:

Your Data collection aims to process transactions, manage and facilitate Semesta Indovest Sekuritas Services usage, and other purposes permitted by applicable laws and regulations.
We collect data or information directly from you during the following activities:
1. Creating an Account on Semesta Online and/or other Semesta Indovest Sekuritas applications, including username, email address, mobile phone number, PIN
2. Contacting Semesta Indovest Sekuritas to submit questions or feedback through branch offices, Call Center, Social Media, and other Semesta Indovest Sekuritas communication channels
3. Using Semesta Online and/or other Semesta Indovest Sekuritas applications, including detailed transaction data such as transaction type, payment amount, transaction date and time, and other transaction details
4. Completing surveys distributed by Semesta Indovest Sekuritas
5. Participating in activities organized by Semesta Indovest Sekuritas or appointed third parties such as webinars, seminars, etc.
6. When you submit your Personal Data to us for other reasons
We also collect data or information from other third parties, including:
1. Parties you authorize (Power of Attorney) to provide instructions, manage your Account and make decisions on your behalf
2. Financial Institutions, Government Institutions and other authorized parties
3. Other Websites/Applications that use Semesta Indovest Sekuritas's Application Programming Interface (API) or that are used by Semesta Indovest Sekuritas
4. Other public information sources, including: Social media services, Financial Information Service System (SLIK) from the Financial Services Authority (OJK), Population Information registered with Dukcapil, Company information registered with the Ministry of Law and Human Rights

C. TYPES OF PERSONAL DATA

Categories and Types of Personal Data consist of:

General Data
1. Personal profile identification data
  Full name, National Identification Number (NIK) for Indonesian Citizens (WNI) and Foreign Citizens (WNA), NPWP (Tax Identification Number/TIN), immigration documents, gender, citizenship, place and date of birth, mother's maiden name, alias/nickname, religion, voice recording, image recording, photo, signature form (wet and/or electronic), and/or biometric data
2. Family Records
  Marital status, spouse's name, number of children, and number of dependents
3. Correspondence Data
  Address as stated in KTP, current address and domicile status, email address, telephone/mobile phone number, and emergency contact including name, relationship type with you
4. Education and Employment Data
  Education level, occupation type, business, position, division, work/business start year, company/agency name where you work, workplace address, employment status, and name, position, and telephone number of co-workers
Specific Data
1. Financial Data
  Fund or securities account number, source of income, monthly/annual income, transaction data, tax data, and other Capital market service data you receive
2. Data related to Personal Preferences
  Communication preferences, hobbies, and interests
3. Digital Activity Data
  Time data about your activities related to Services usage including registration, login and transaction, your activities in Semesta Online Applications with other applications on your electronic device; device data including hardware model, operating system and version, software, IP address, WI-FI information, or mobile network used to access the Services
4. Interaction Data
  CCTV recordings in Semesta Indovest Sekuritas environments, Call Center phone conversation recordings, conversation transcripts through Semesta Indovest Sekuritas communication media including WhatsApp, e-mail, and social media
5. Processed Data
  Data obtained from your data processing including, but not limited to, profiling by Service use activities

D. PERSONAL DATA USE AND DISCLOSURE

Semesta Indovest Sekuritas may use all or part of the data obtained and collected from you for the following purposes:
1. To identify and register Customers, and to administer, verify, deactivate, or manage Customer Accounts
2. To provide Services and/or products to you including responding to and handling requests, questions, complaints, and feedback
3. To facilitate or enable any verification that Semesta Indovest Sekuritas deems necessary before providing Services to you or before Semesta Indovest Sekuritas registers you
4. To make features available to provide, implement, maintain and improve Semesta Indovest Sekuritas products and Services, including conducting internal activities necessary for providing Services on Semesta Online Applications and/or other Semesta Indovest Sekuritas applications such as troubleshooting software, bugs, operational issues, security improvement, data analysis, testing and research, and/or monitoring and analyzing usage and activity trends
5. To notify you about updates to Semesta Online Applications and/or other Semesta Indovest Sekuritas applications or changes to Services provided
6. To provide information regarding your Personal Data to Third Parties as permitted by applicable law for commercial purposes, in which case, Semesta Indovest Sekuritas will request your separate consent for the offering activities mentioned above, for example when opening a Securities account
7. To implement Know Your Customer (KYC) principles and/or Customer Due Diligence (CDD) for Anti-Money Laundering, Prevention of Terrorism Financing and Prevention of Proliferation of Weapons of Mass Destruction (APU PPT PPPSM)
8. To verify your information accuracy related to Services utilization
9. To submit reports in accordance with applicable laws and regulations to OJK, Indonesia Stock Exchange, KSEI, KPEI, and other competent authorities
10. To perform Semesta Indovest Sekuritas's obligations to fulfill national defense and security interests, law enforcement processes, state administration, supervision of financial and monetary services sector, payment systems, and financial system stability, statistics and scientific research in the context of state administration; and/or
11. Emergencies that have been determined by the Government
Semesta Indovest Sekuritas warrants that no sale, transfer, distribution or lending of your Data to other third parties is permitted without your consent, except in the following cases:
1. It is necessary to disclose Personal Data to partners or other third parties that assist Semesta Indovest Sekuritas in providing Services in the Application and processing all forms of your activities in the Application, including preventing fraud, processing transactions, verifying payments, promotions, etc.
2. You contact Semesta Indovest Sekuritas through public media, such as social media and certain Application features so that communication between you and Semesta Indovest Sekuritas can be viewed publicly
3. Semesta Indovest Sekuritas discloses your data to comply with legal obligations and/or legitimate requests from Law Enforcement Agencies/Officials
4. Semesta Indovest Sekuritas may share your data with Agents, Contractors, or Service providers that deliver operational Services to Semesta Indovest Sekuritas, such as Cloud Online storage and processing, marketing optimization, information technology, and with providers of telecommunications, backup and disaster recovery, security Services or other related Services that require the collection, use, or disclosure of your Personal Data

E. BASIS FOR PERSONAL DATA PROCESSING

Personal Data Processing is conducted after Semesta Indovest Sekuritas fulfills one or more processing bases, as follows:

Explicit Consent
Semesta Indovest Sekuritas processes your Personal Data for specific purposes based on your consent or the authorized party representing you. Particularly for child or disabled customers, consent shall be given by the guardian or parent of the child/disabled customer
Contractual Obligations
Semesta Indovest Sekuritas processes your Personal Data to fulfill obligations under the agreement between you and Semesta Indovest Sekuritas or before entering into a Contract with you
Legal Obligations
Semesta Indovest Sekuritas processes your Personal Data to fulfill legal obligations in accordance with applicable laws and regulations

F. CUSTOMERS' RIGHTS AS PERSONAL DATA SUBJECTS

In accordance with the Personal Data Protection Act (UU PDP) concerning the Rights of Personal Data Subjects, Semesta Indovest Sekuritas warrants the rights of Customers as Personal Data Subjects, as follows:

The right to obtain information about identity clarity, legal interest basis, request purpose and Personal Data disclosure, and accountability of the party requesting the Personal Data
The right to complete, update and/or correct errors and/or inaccuracies in their Personal Data in accordance with Personal Data processing purposes
The right to access and obtain a copy of their Personal Data in accordance with legal and regulatory provisions
The exercise of Personal Data Subjects' rights as set out in numbers 2 and 3 shall be applied online or offline using a form to Semesta Indovest Sekuritas as the Personal Data Controller and submitted through the contact provided in this Privacy Policy

G. OBLIGATIONS OF CUSTOMER

The Obligations of Customers as Personal Data Subjects are as follows:

Customers shall provide truthful Personal Data and make corrections for errors and updates for changes
Customers are prohibited from falsifying or using other people's Personal Data which constitutes a violation of the Personal Data Protection Act
Customers shall protect their respective Personal Data and be alert and prudent regarding all forms of fraud or social engineering aimed at stealing Personal Data
Customers shall read and understand this Privacy Policy as an effort of Semesta Indovest Sekuritas to protect Participants' Personal Data in accordance with applicable laws and regulations

H. STORAGE, PROCESSING AND REMOVAL OF USER DATA

Your Personal Data that we have collected may be stored, transferred, or processed by third-party Service providers. We use all reasonable efforts to ensure all such third-party Service providers provide protection at a level comparable to our commitments under this Privacy Policy
Semesta Indovest Sekuritas may store your Personal Data after you terminate the use of Semesta Indovest Sekuritas's products and/or Services for a period required by laws and regulations or in accordance with storage or retention periods stipulated in Semesta Indovest Sekuritas's internal policies or in accordance with applicable laws and regulations
Semesta Indovest Sekuritas also has a legal obligation to retain your Personal Data if related to ongoing legal proceeding settlements
Semesta Indovest Sekuritas will remove your Personal Data in accordance with your request, Semesta Indovest Sekuritas's Internal policy provisions and/or applicable laws and regulations

I. MERGER, ACQUISITION, CONSOLIDATION, SPIN-OFF, LIQUIDATION

In case of Merger, Acquisition, Consolidation, Spin-Off, or Liquidation where Personal Data transfer occurs, Semesta Indovest Sekuritas will notify you:

Before the implementation of Personal Data transfer; and
The subsequent Data Controller under a different Privacy Policy; in certain situations, Semesta Indovest Sekuritas may be required to disclose your Personal Data if mandated by law or in response to public authorities, such as a court or Government agency

J. COOKIE

A Cookie is a file containing a small amount of data commonly used as anonymous unique identifiers. This data is sent from the website you visited to your browser and stored on your device's internal memory. Cookies are designed as a mechanism for websites to remember information or record user activities (including button clicks, recording visited pages).

This Service does not explicitly use "cookies." However, this application may use third-party code and libraries that use "cookies" to collect information and improve their Services. You have the option to accept or decline these cookies and know when a cookie is being sent to your device. If you choose to decline our cookies, you may not be able to use certain parts of this Service.

K. CHANGES AND UPDATES TO PRIVACY POLICY

Semesta Indovest Sekuritas may modify and update this Privacy Policy periodically to ensure this policy aligns with future developments of Semesta Indovest Sekuritas and/or changes in laws or regulations. However, if Semesta Indovest Sekuritas intends to make material changes to how your Personal Data is used, Semesta Indovest Sekuritas will request your consent and suggest Users carefully read and periodically check this Privacy Policy page for any changes.

L. CONTACT US

If you have any questions or complaints regarding this Privacy Policy and Privacy Notice or wish to exercise your rights regarding your Personal Data, please contact our Customer Service at 081211372872 on company Working Days (Monday-Friday) during operating hours (08.00 to 17.00 WIB).