PRIVACY POLICY
Last Updated: 2025-08-08
Introduction
KuyBeli and its related services (hereinafter referred to as the "Product," "Service") are provided by PT. KuyBeli Sukses Digital (hereinafter referred to as "we," "us," or "our"). We highly value your privacy. This Privacy Policy (hereinafter referred to as the "Policy") explains how we collect, use, disclose, process, and store personal information that you provide to us or that we collect when you use our products and services. If you are under 18 years of age or considered a child under your jurisdiction, please do not provide any personal information without parental or guardian consent.
This Policy applies only to Services that reference or link to this Privacy Policy. This Policy also explains your rights and choices regarding your personal information.
PT. KuyBeli Sukses Digital acts as the data controller (or a similar term under applicable law) for any information collected and processed in connection with this Policy. We have entrusted FantasticFusion (Hong Kong) Holding Limited with the online distribution of KuyBeli, but all data processing activities, including collection, storage, processing, and use of data, remain under our control. We will not disclose your personal information to FantasticFusion (Hong Kong) Holding Limited, nor entrust it to process your personal information on our behalf.
Our policy is to comply with applicable data protection laws. We reserve the right to amend this Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices.
1. What Information We Collect
The term "personal information" or "personal data" means information that specifically identifies an individual (such as name, mobile number, email address, or other account numbers), and information about an individual's location or activities (such as information about the usage of our Services, IP address, or mobile device identifiers) when directly linked to personally identifiable information. Personal information also includes demographic information such as date of birth, gender, geographical area, and preferences when such information is associated with other personal information that identifies or can identify you.
Personal information does NOT include "anonymous" information, which is data we collect about the use of our Services or about groups or categories of products, services, or users, or other data from which individual identities or other personal information have been removed so that individuals cannot be identified directly or indirectly. Such data helps us understand trends and user needs to consider new features or tailor our Services. This Policy does not restrict or limit our collection and use of such information.
We may collect information you voluntarily provide to us, information we collect automatically through your use of the Services, and certain information we obtain from third-party sources. Further details about categories and sources of information are provided below.
1.1 Information Provided by You
• Contact Information
When you create an account with us, log in to your account, or for communication purposes, we collect certain information about you necessary for these purposes, including:
o Email
o Phone Number
Please note that if you refuse to provide the above information, we may not be able to provide certain features or functionalities of the Service. For example, you may be unable to switch to the online shopping platform via links presented in KuyBeli to purchase goods or services.
• Profile Information
To help you complete your personal information and use it to provide personalized recommendations in the future, we collect certain information about you necessary for these purposes, including:
o Nickname
o Account ID
o Profile Picture
o Gender
o Date of Birth
o Personal Profile
o Camera and Album Access
With your consent, we may access your device's camera to allow you to take photos for updating your profile picture, and request write permission to your photo album to save photos. We only collect related information when you use the corresponding functions.
• Browsing and Search History
While you view product and service information, we record your browsing history to provide a more consistent and continuous user experience.
When you use the search function, we collect your search keywords. This keyword information is temporarily stored on your device to provide efficient search services. When you use the search function again on the same device, we will display your search history.
• Interaction Information
When you post comments, we collect the comments you post and publicly display the posted comments along with your nickname and avatar. When you follow accounts or mark content as favorites, we collect information about the accounts you follow and your favorite content, and then display content posted by followed accounts and your favorited content to you.
When you use the sharing feature, we collect the content you share, successful sharing status, and your sharing activity history.
• Notifications
While using our products and services, you may provide us with your contact information (phone number, email, and/or social media account). We may send various notifications to you through one or more communication channels you have provided, for purposes such as notifying you about new comments, software updates, error alerts, system notifications, identity and security verification, and user experience surveys. We may also send such notifications via in-app private messages. Additionally, through in-app private messages and our emails, we provide information about services, features, activities, and other commercial offers that may interest you.
• Shipping Address
To deliver physical gifts or products to you, we will collect your shipping address information.
1.2 Information We Collect Automatically
We, or authorized third parties, automatically collect certain information as follows when you use our Services to ensure proper functioning, support performance and operational security, verify risk control for our Services, and provide personalized recommendations:
• IP Address
• Device Model and Name
• Device Identification Information
• Operating System and Version
• Error Information, Device Information, Network Status, User ID, Phone Number, and Email
Gyroscope Parameters - When you participate in our promotional activities, we collect your phone's gyroscope parameters to determine if it is being operated by a real person. This step is implemented to enhance our anti-fraud efforts.
1.3 Information from Third-Party Sources
When you log in to your account via external accounts (e.g., Google, Facebook, Line, and/or Apple), you need to authorize us to obtain your information (avatar, nickname, and other information you authorize) from the external platform so we can recognize your login identity. Once the account is created and linked to your external account, you can directly log in using that external account.
1.4 Special Categories of Information
Unless otherwise stipulated by applicable law, we do not request or intend to collect any special categories of information, such as any information relating to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, disabilities, trade union membership, genetic data, biometric data, or any data that could affect the data subject in a similar manner. We also urge you to exercise caution when sharing such information about yourself (or others) on our Services.
1.5 Cookies and Similar Technologies
By using our Services, you agree that we may automatically collect certain information through the use of "cookies" or similar tracking technologies to analyze trends and manage the Services. Many browsers allow you to control cookie usage at the individual browser level. Cookies are small text files stored on your device by us to ensure the normal operation of the Services and your convenient access. Cookies typically contain identifiers, site names, and some numbers and characters. We only use strictly necessary cookies that enable the Services to function, such as login tokens. We generally treat information collected by cookies and similar technologies as non-personal information as it does not contain information that can personally identify you. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal information under the laws of the country concerned, we will also comply with the laws of that country. If you wish to block, delete, or receive alerts regarding the use of cookies, please refer to your browser or mobile device instructions or help screens to learn about these functions. You may not be able to delete or disable cookies on certain mobile devices and/or browsers.
Please note that if your browser or mobile device is set to not accept cookies or if the user rejects cookies, some parts of the Website or Services may not function correctly. For example, you may not be able to log in and may not access certain features or services of the Website or Services.
We will not use cookies for any purpose other than those stated in this Policy.
2. How We Use Your Personal Information
We may only use your information when we comply with applicable data protection laws. Generally, we use your personal information in the following ways:
• To enforce the Terms of Service.
• To facilitate your use of the Service or access to the Platform.
• To manage online accounts you may create with us.
• To resolve errors and ensure the smooth operation of our Services.
• To ensure proper functionality, performance, secure operation, and verification of risk control for our Services.
• To perform analytics, research, business, and development.
• To personalize recommendations.
• To personalize advertisements.
• To improve and develop our Services.
3. How We Store Your Personal Information
Personal information we collect and generate in our operations is stored in third-party cloud storage located in Singapore.
We retain personal information to comply with legal, regulatory, or our commercial purposes. We will delete or anonymize your personal information exceeding the retention period mentioned above.
4. How We Disclose Your Personal Information
We may disclose part of your personal information to affiliated companies, service providers/vendors, and authorized partners cooperating with us in providing products and services. We will not disclose your personal information to third parties for their own marketing or commercial purposes.
o Affiliated Companies: We may share your personal information with our affiliated companies. If your personal information is shared with our affiliates, we will only share it within our corporate group for legitimate and explicit purposes, the information necessary to provide the Services, and bound by the purposes stated in this Policy (meaning these companies will use your personal information in the same way we do under this Policy, including providing parts of the Product's functionality, preventing illegal use, and supporting users). If an affiliate wishes to change the processing purpose, we will state this in appropriate notices for specific services.
o Service Providers/Vendors: To perform certain features or to provide you with a better Service and user experience, some of our Services may involve assigning service providers or vendors to process personal information on our behalf or for us. Categories of service providers or vendors include data storage service providers, customer relationship management service providers, mailing service providers, logistics service providers. We will sign confidentiality agreements with service providers/vendors we assign to process your personal information, stipulating the purpose, conditions, processing methods, types of personal information, protection measures, and rights and obligations of both parties.
o Authorized Partners: To perform certain features or to provide you with a better Service and user experience, some of our Services will be provided by our authorized partners (including customer relationship management service providers, data storage service providers, analytics service providers, mailing service providers, etc.). We uphold the principles of minimization, necessity, and legality for such sharing. Before sharing information, we will require authorized partners to take relevant confidentiality and security measures to process personal information in accordance with this Policy and applicable laws in your jurisdiction.
o Corporate Transactions: In the event of a merger, acquisition, or bankruptcy liquidation, if it involves the transfer of personal information, we will require the company or organization acquiring your personal information to adhere to this Policy. If this is not possible, we will request that the company or organization reobtain your authorization and consent.
o Legal Obligations and Rights: We will only publicly disclose your personal information if legally required, in accordance with subpoenas, legal processes, judicial actions, or mandatory requests from supervisory departments of government agencies. If we believe in good faith that disclosure is necessary to protect our rights, ensure your safety or the safety of others, investigate fraud, or respond to the government, we may publicly disclose your personal information.
5. How We Protect Your Personal Information
o We have taken adequate and reasonable technical measures to protect the service-related data collected. However, please note that while we provide reasonable protection for your data, no website, internet transmission, computer system, or wireless connection is absolutely secure.
o We have implemented industry-standard security measures for the personal information you provide and prevent data from unauthorized access, public disclosure, use, modification, damage, or loss. We take all reasonably practicable steps to protect your personal information. Specifically:
(1) We encrypt much information. For example, we have implemented encryption measures to protect the security of your phone number, email address, password, etc. We periodically review practices regarding the collection, storage, and management of information (including physical security measures) to prevent various systems from unauthorized access.
(2) We use computer systems with limited access, only allowing our employees who need to know personal information to help us process it, or authorized staff of Service companies to access personal information. These individuals are contractually bound by strict confidentiality obligations. Failure to comply may result in legal liability or termination of their contract with us.
(3) The security of your information is paramount to us. Therefore, we strive to ensure the security of your Personal Information and implement measures such as security encryption during storage and transmission to prevent your information from unauthorized access, use, or disclosure. At the same time, no one can access the specific content of certain encrypted data except the user themselves.
o In the event of a personal information security incident that may pose a high risk to the rights and freedoms of the personal information subject, we will promptly inform you of the relevant leakage information via email or website notification.
6. How Long We Retain Your Personal Information
o We retain your personal information for the purposes of collection described in this Privacy Policy or as required by applicable laws, regulations, legal requirements, and commercial purposes, until you actively request its deletion. We will cease storing and delete or anonymize personal information after the purpose of collection is fulfilled, and/or after we cease operating the relevant product or service, and/or after we confirm your deletion request.
o We may retain your personal information for a longer period if there are complaints or if we reasonably believe there is a prospect of litigation related to our relationship with you. When we no longer need to use your information, we will delete it from our systems and records and/or take steps to anonymize it immediately so you can no longer be identified from it.
o To determine appropriate retention periods for personal information, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and applicable legal, regulatory, tax, accounting, or other requirements.
o However, we may continue to store certain data up to the maximum permitted period under applicable law. If you wish to delete your data, please refer to the section titled "Your Rights" below.
7. Your Rights
As the subject of personal information, you have rights granted by privacy laws in your jurisdiction. Your rights may include all or part of what is described below. You can exercise your rights guaranteed by the privacy laws in your jurisdiction at any time by submitting a relevant request to us. To help us verify that you are the subject of the personal information and are exercising the rights outlined below, we may request sufficient proof of identification from you. This is a security measure to ensure that personal data is not disclosed to anyone unauthorized to receive it.
Your rights may include:
1. Right to be Informed:
We publish this Policy to inform you about how we handle your personal information. We are committed to transparency regarding the use of your information.
2. Right to Access Your Personal Information:
You have the right to access the personal information we hold about you, how we use it, and with whom we share it.
3. Right to Rectify Your Personal Information:
You have the right to rectify your information if it is inaccurate. You can rectify your personal information by contacting us via the email listed in this Policy.
4. Right to Delete Your Account or Your Personal Information:
You may request us to delete your account or delete specific personal information we store about you. However, please note that we may need to retain personal information if there is a valid reason under data protection law for us to do so (e.g., for defense of legal claims or freedom of expression) but we will respond to and inform you if this is the case.
Please note that cancellation of your member account is irreversible. Therefore, we recommend you carefully consider the decision to cancel your account.
5. Right to Restrict or Object to Data Processing:
In limited circumstances, you have the right to request that we stop processing or restrict the use of personal information we hold about you other than for storage purposes in certain situations.
6. Right to Data Portability:
You can request a copy of certain data in a machine-readable format that can be transferred to other providers if such a right is provided for by privacy laws in your jurisdiction.
7. Right to Object:
In certain circumstances (including where data is processed based on legitimate interests or for marketing purposes) you can object to such processing.
8. Right to Withdraw Consent:
You can withdraw your consent for the processing of your personal information by submitting a request to us via email. We will handle your request within a reasonable timeframe from when the request is received, and thereafter we will no longer process your personal information as per your request.
Please note that withdrawing your consent may have certain legal consequences. Depending on the extent to which you permit us to process your personal information, it may mean you will no longer be able to enjoy the use of our services. However, any decision by you to withdraw your consent or authorization will not affect the prior processing of personal information carried out with your permission.
9. Right to Object to Automated Decisions:
You may have the right not to be subject to automated decision-making, including profiling, if such a right is provided for by privacy laws in your jurisdiction.
10. Right to Lodge a Complaint with a Supervisory Authority:
If you are concerned about how we manage personal information and believe we may be violating relevant laws and obligations, please contact us.
We will respond and reply to you as soon as possible. Generally, we will reply to you within one (1) month of receiving your request (If necessary, we can extend this by an additional two months as permitted by law. We will inform you of the reason for the extension within that 30-day period, e.g., the request is overly complex or numerous).
If you feel we have not resolved your concern, you have the right to lodge a complaint with your local privacy or data protection regulator.
8. How We Process Children's Personal Information
Our Service is primarily oriented towards adults, and we do not offer direct services to children or use children's personal information for marketing purposes. A child should not create their own user account. We treat anyone under the age of 18 (or the equivalent minimum age in the relevant jurisdiction) as a child. We do not knowingly collect any information about or market to children, minors, or anyone under the age of 18. If you are under 18 years old, we ask that you do not submit information to us. If we become aware that a child, minor, or anyone under the age of 18 has registered with us and provided us with personal information, we will take steps to terminate that person's registration.
9. How Your Personal Information is Transferred
For the purposes described in this Privacy Policy, we may transfer your personal information to our affiliated companies, third-party service providers, and business partners who may be located outside your jurisdiction. Such transfers will comply with applicable data protection laws and implement safeguards such as standard contractual clauses approved by relevant authorities to ensure an adequate level of protection.