Amendment Date: 11 February 2025

Version: 002/GTN/2025/02

Welcome to tiket.com website.

This website is owned, operated, and hosted by PT Global Tiket Network (“We”, "Us", "Our" or “tiket.com”), a limited liability company established under the laws of the Republic of Indonesia. 

 

We provide website and services available online through the website: www.tiket.com or mobile website: m.tiket.com or mobile application: tiket.com for iOS and tiket.com for Android, and various accesses, media, devices and platforms (“Online Services”), either already or will be available at a later date.

 

At tiket.com, your privacy and the protection of your personal data are of utmost importance to Us. This Privacy Notice explains how we collect, use, disclose, store, and protect your personal data in compliance with applicable laws. This Privacy Notice also describes all services that We have provided for you to use, both services that We operate ourselves and those that are operated through our affiliates and/or partners. 

 

In order to maintain your trust in Us, We are committed to always maintaining all the confidentiality contained in your personal data. Thus, We encourage you to read this Privacy Notice carefully to understand Our practices regarding your personal data. This Privacy Notice includes the following matters:

1. Personal Data Which We Collect;
2. How We Use Your Personal Data;
3. The Use of Your Personal Data;
4. Sharing of Personal Data;
5. Cross-Border Personal Data Transfer;
6. Your Rights to Personal Data;
7. Retention of Personal Data;
8. Security of Personal Data;
9. Changes to this Privacy Policy;
10. Concerns and Complaints;
11. Applicable Law;
12. Language Used.

Personal Data means any data about a person either identified and/or identifiable through Our electronic system, whether those provided by you and/or we collect from third parties (“Personal Data”). 

 

We collect your Personal Data to provide and improve Our services to you. Thus, We will ask you to fill in your Personal Data correctly, clearly, completely, and accurately.  The Personal Data referred to are as follows:

 

For Creating an Account and/or Booking

When you access the Online Services, to make a personal account and/or a booking, then you have to provide Us certain Personal Data for account creation and booking purposes, including children's Personal Data, disabilities Personal Data, and Personal Data of guests who use the service through your account. Personal Data that We will record and store are as follows:

 

A. Identification Information

1. Full name;
2. Date of birth;
3. Nationality;
4. Gender;
5. Identification documents (e.g., Passport or ID Card).

 

B. Contact Information

1. Email Address;
2. Phone Number;
3. Current Address.

 

For Transaction or Payment Process

We will ask you to fill in payment data when you conduct a payment transaction activity through Our services, including data of:

1. Card type data (Visa or MasterCard);
2. Cardholder name;
3. Card issuing bank name credit;
4. Card number (only the last 4 (four) digits appear);
5. Card expired date.

 

For Third Parties That Affiliated with Us

We collect Personal Data necessary for the functioning of Our site and its features. This data is used to identify, contact, or locate individuals or entities related to the services provided by third parties on the site. Additionally, We collect Personal Data required to fulfill payment obligations and any associated tax responsibilities between the third parties and Us.

 

Career and Vendor

Data that we collect for non-transaction purposes, including:

1. Career;
2. Vendor or supplier.

 

Technical Data

When you use Our Online Services, We automatically collect technical data from your device to improve your experience on Our site. This information we collect helps provide relevant content and services, and may be collected through cookies. 

 

We also collect data from your device and installed applications to improve security, prevent fraudulent activity, and for risk assessment and statistical purposes, while ensuring your personal identifiers are removed or pseudonymized to protect your privacy.

 

We collect the following technical data from your device:

• IP Address
• UDID (Unique Device Identifier)
• Android ID

 

In the event that you use service features provided by third-party providers who cooperate with tiket.com including but not limited to providers of goods and/or device manufacturing services, the goods or service provider may collect additional technical data, including:

• IMEI & IMSI
• SIM Card Serial Number
• Wi-Fi Mac Address

 

These third-party providers manage their own data collection processes, and their handling of data is subject to their respective privacy policies in accordance with applicable data protection laws and industry standards.

Your Consent

You can give Us permission to use your Personal Data so We can offer Our services to you.

 

Fulfilling Our Contract

We may process your Personal Data to meet our contractual obligations when you make transactions or bookings with Us.

 

Legitimate Interests

We may use your Personal Data for your convenience in using Our services. We always ensure that our business interests do not override your rights and privacy.

 

Legal Obligations

We may need to process your Personal Data to comply with laws or regulations.

 

Vital Interest

We may process your personal data when it is essential to safeguard your vital interests.

We may process and use your Personal Data based on your request for specific purposes with the following:

 

Data Verification and User Experience

We use your Personal Data to verify your identity and enhance your experience on Our platform. This includes facilitating account creation, processing refunds, and managing booking cancellations.

 

Transaction Processing

Your card data that you provide to Us will be used to manage and expedite transactions on Our platform, including payment verification and order fulfillment, in compliance with applicable laws.

 

Monitoring and Analysis

We analyze your activities, behavior, demographic information, search queries, response time for the various services provided in the Online Services, and any Personal Data you provided to improve the functionality, performance, and overall user experience of Our platform.

 

Marketing and Communication

We use your Personal Data for sending you marketing materials using direct and open graphic techniques and for conventional digital marketing purposes through email and various social media platforms. We will notify you of limited discounts, special offers, new features, or information that We think will interest you. Once you create an account or make a booking, you'll start receiving these newsletters automatically to the email you registered. If you no longer wish to receive them, you can easily unsubscribe anytime through your profile menu.

 

Advertising Activities

tiket.com cooperates with third parties to assist in promoting and creating attractive advertisements for you based on the use of Online Services which We conclude from the data you share on Our Online Services. Companies We work with may also use cookies to help track customer behavior. These companies may use your information to disclose about user behavior to provide customized advertising across various services and products. In providing products and services, each company uses cookies in accordance with privacy information in accordance with the privacy and security policies of each company.

 

Security and Legal Protection

We use any information provided to protect Our Online Services from fraud, suspicious transactions, and any legal violations. This includes investigating fraudulent activities and enforcing Our terms of service.

If required, We may use your Personal Data to defend ourselves against legal claims and ensure compliance with applicable laws.

 

Publishing Reviews

We may publish reviews you provide about your booking and/or experience on Our platform, helping other users make informed decisions.

 

Potential Future Purposes for Personal Data

We use your Personal Data for purposes not mentioned, but which may arise in the future, which We notify you of when we collect and process your Personal Data.

We may share your Personal Data with trusted third parties, including Our subsidiaries, affiliates, and service providers, who agree to handle your data as outlined in this Privacy Notice. The purposes for sharing your Personal Data include:

 

To Provide Our Transactions and Services:

1. When necessary, We may share your Personal Data with Our partners to process payments, send notifications via email, SMS, or by phone call, perform data analysis, provide customer support, fulfill search results, enhance security and privacy systems, and improve or develop Our platform.
2. We may share your Personal Data with relevant third parties to facilitate the collection of any outstanding or due payments you owe to Us. Additionally, We may share your information to help manage the refund process or insurance claims with Our vendors or service providers, also ensuring that these processes are handled efficiently and in a timely manner.
3. If necessary, We may distribute Your Personal Data with legal entities connected with You for the purpose of verification, administration, and/or Your legitimate interests.
4. We may transfer Personal Data to third parties for corporate action, like mergers, acquisitions, takeovers, or reorganizations that result in a change of control or ownership of the company.
5. For publishing reviews or feedback on service usage available on Our platform, such data will be displayed on Our services, with relevant service providers, or third parties that collaborate or affiliate with Us.
6. We may share Personal Data with third-party service providers acting on Our behalf to assist in providing services to users. These providers include business relationship management services, customer service providers, and payment transaction providers.

 

Legal and Compliance:
If required by law or for legal compliance, in accordance with applicable regulations.

The transfer of Personal Data outside the jurisdiction of the Republic of Indonesia, may be carried out under the following conditions:

1. Coordination with relevant authorities/agencies
   We will coordinate with relevant authorities to comply with regulations on cross-border Personal Data exchanges. This may include:
   • Requesting legal advocacy or assistance if necessary; and
   • Reporting the outcome of the data transfer activities.
      
2. Responsibility
   We will be responsible for the transfer of Personal Data for partnership purposes with external parties outside the jurisdiction of the Republic of Indonesia by evaluating compliance with the legal requirements related to the transfer of Personal Data.
    
3. Equivalent or Higher Data Protection Standards
   The country or international organization receiving the transfer of Personal Data must have data protection standards that are equivalent to or higher than those set out in the applicable law regarding personal data protection Law.
    
4. Adequate and Binding Data Protection
   If the condition in number 3 above is not met, we will ensure that there are adequate and binding data protection measures in place.
    
5. Consent of the Data Subject
   If the condition in number 4 above is not met, We will obtain the explicit consent of the data subject.
    
6. Country of Personal Data Transferee
   We may share Personal Data with subsidiaries located in Singapore, Canada, India and/or across borders that are affiliated with Us.

As per applicable laws and regulations, you have the following rights concerning your Personal Data:

 

Account Creation

You can create a user account using the information you provide. You acknowledge that any Personal Data that you provide is true and accurate. 

 

Access

You have the right to access your Personal Data that you have provided and have been stored in Our system as set out in the applicable law regarding personal data protection Law. By accessing your Personal Data, you can also complete, update, correct errors, and/or inaccuracies on your profile menu.
 

Restriction

In the event that We process Your data, such data will be processed only as needed and for the purposes as stated in this Privacy Notice. 

 

Withdrawal of Consent, Objection, and Deactivation

You have the right to withdraw and lodge an objection to consent at any time. Your withdrawal of consent will be considered once you deactivate your account.

We will ensure that all related processing activities will be discontinued in accordance with the timeframe stipulated by applicable laws.

Please note that all your remaining Blibli tiket points, Elite Rewards tier benefits, BCA tiket.com credit card rewards, and rewards that have not been active can no longer be used and obtained again following your rejection and/or withdrawal consent.

 

Deletion

• You have the right to request the termination of processing or permanent deletion of your personal data from all systems of Ours as long as it does not conflict with the laws and regulations.
• In the event of deletion of Personal Data belonging to you from the Our system, notification shall be sent to you.
• In the context of the deletion process, you must complete all activities, needs, or ongoing transactions before the deletion can be carried out.
• You have the right to request the deletion of your Personal Data from Our systems, as allowed by applicable law. We will make reasonable efforts to erase or anonymize your data within the required timeframe if the data is no longer needed for the original purpose, if We are not legally required or permitted to retain it, or if the law mandates deletion based on your request. 

Please note that requesting data deletion may affect Our ability to provide some services, and you are fully liable for any losses or damages resulting from the termination of those services.

 

Data Portability

You can request your Personal Data in a machine-readable format. Requests will be provided in accordance with the company's ability to accommodate such requests in accordance with technical and operational feasibility.

 

Filing Complaints

If your privacy rights are violated or you are harmed by unlawful data processing, you have the right to file a complaint with the relevant data protection authority.

Please note that if there are administrative fees charged to you for handling requests to access, modify, or correct your Personal Data, it will be fully charged to you.

All requests will undergo a verification process to confirm your identity and authority. We may request additional documentation for this purpose. Once verified, We will process your request within the timeframe specified by relevant laws.

All exceptions in fulfilling the rights of personal data subjects are in accordance with applicable laws. 

Your Personal Data will be retained only for as long as necessary to fulfill the Purposes for which it was collected, or allowed by law. We will delete your Personal Data as required by applicable laws and regulations from the date you terminated/de-registered your account with Us.

1. You acknowledge that the transmission of information which you submit via the Internet is not completely secure. Nonetheless, We will use all reasonable efforts through data masking, encryption, and/or appropriate technical & organisational measures to protect and secure your Personal Data against access, collection, use or disclosure by unauthorized persons and against unlawful processing, accidental loss, destruction and damage or similar risks. You also acknowledge that We cannot guarantee the integrity and accuracy of any Personal Data, nor guarantee.
    
2. You are fully responsible for the confidentiality of your Personal Data, including being responsible for all access and use of Online Services such as your password, account, One Time Password (OTP) and tokens.
    
3. You must immediately notify Us of any use of your password or account without your permission or any form of breach or threat of security breach on this site. We will also notify you, as required by applicable law, through Our communication channels, either directly or indirectly. We will provide you with sufficient details about the breach and take steps to safeguard your Personal Data from misuse.
    
4. You acknowledge that you are obligated to secure your account details including your password and are prohibited to share such details to third parties, you also acknowledge that you are liable for any damages and losses incurred due to such data sharing.

We may change, update or remove portions of this Privacy Notice at any time without prior notice. Any changes may reflect updates to the law, Our activities, or new features on Our site. 

When changes affect how We collect or use your Personal Data, We will notify you via a general notice on Our site or via email and post a revised Privacy Notice, including the effective date of the changes. 

We encourage you to review this Privacy Notice periodically to stay informed of any updates. By continuing to access and use Our Online Services, you are deemed to agree to any changes that may exist in this Privacy Notice. The adoption of this Privacy Notice supersedes any and all previous Privacy Notices as of the date of amendment.

If You have any concerns and/or complaints regarding Our treatment of Your Personal Data, please contact Us via cs@tiket.com. 

If you have any concerns and/or complaints regarding your privacy data, our Customer Service team will forward it to Our Data Protection Officer. 

We will contact you within a reasonable period of time after receiving your concern and/or complaint to discuss it and outline options as to how your concern and/or complaint may be resolved. We will treat your complaint confidentially. 

If you have concerns and/or complaints regarding the treatment of your Personal Data that cannot be resolved by Us, you may lodge your concerns and/or complaints with the relevant authorities.

Use of this Online Services is subject to and governed by and/or construed in accordance with applicable law in the Republic of Indonesia or countries that have data protection standards equivalent to or higher than those set out in the Personal Data Protection Law, without giving effect to any applicable principles of conflict of laws.

In case of any controversy related to the provisions of this Privacy Notice, interpretation in the Bahasa prevails.