lotuspelangi Platform Privacy Notice

This page describes what we collect when you use lotuspelangi and how we keep that data protected. We at lotuspelangi collect personal information to verify your identity, process deposits and withdrawals, and deliver our service. Your data is stored securely and shared only with third-party processors necessary to operate our platform — payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), identity-verification services, and fraud-prevention systems.

We do not sell your personal data to marketers or advertisers. We do not share your information with unrelated third parties. Our servers may sit outside your jurisdiction, but we apply consistent data-protection practices across all locations. You have the right to access, correct, or request deletion of your data subject to legal and operational constraints.

This notice outlines our data practices and your privacy rights on lotuspelangi.

What data we collect on lotuspelangi

We collect personal information when you create an account on lotuspelangi. This includes your email address, full name, date of birth, residential address, and a valid Indonesian ID (KTP) number. We also collect payment information — the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details for mobile banking, local payment, online payment, e-wallet) and transaction history.

We collect behavioural data when you use lotuspelangi — which markets you view, which selections you place, your account balance, and your login history. We use this data to operate the platform, detect fraud, and comply with legal obligations. We do not use this data for marketing or profiling beyond what is necessary to deliver our service.

How we use your data

We use your personal data to verify your identity, process deposits and withdrawals, settle your selections, and deliver our service. We use your payment information to process transactions through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment. We use your behavioural data to detect fraud, prevent unauthorized access, and comply with anti-money-laundering regulations.

We do not use your data for marketing emails or promotional messages unless you explicitly opt in. We do not sell your data to third parties. We do not use your data to build marketing profiles or sell to advertisers. Our use of your data is limited to operating lotuspelangi and meeting legal obligations.

Third-party processors and data sharing

We share your data with third-party processors necessary to operate lotuspelangi. These include payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), identity-verification services, and fraud-prevention systems. We also share data with our hosting provider and analytics service. All third-party processors are bound by confidentiality agreements and must comply with data-protection standards.

We may share your data with law enforcement or regulatory authorities if required by law. We may also share data in response to legal process (court order, subpoena) or if we believe disclosure is necessary to protect our rights or the safety of our users. We do not share data with unrelated third parties for any other purpose.

Payment processors

mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment receive transaction data to process deposits and withdrawals

Identity verification

Third-party services verify your KTP and address to comply with anti-money-laundering regulations

Fraud prevention

Systems analyze your account activity to detect unauthorized access and suspicious transactions

Hosting and analytics

Our infrastructure provider and analytics service receive aggregated data to maintain platform performance

How long we keep your data

We retain your personal data for as long as your account is active on lotuspelangi. After you close your account, we retain your data for a minimum of five years to comply with anti-money-laundering and tax regulations. We may retain aggregated or anonymized data indefinitely for analytics and fraud prevention.

You may request deletion of your data subject to legal and operational constraints. If you request deletion, we will remove your personal information from active systems but may retain anonymized records for compliance purposes. We cannot delete data that is subject to legal holds or regulatory requirements.

Cookies and tracking technologies

We use cookies to maintain your session on lotuspelangi and remember your preferences. We use tracking pixels and analytics tools to measure platform usage and identify technical issues. These technologies help us deliver a consistent experience across devices and locations.

You can disable cookies in your browser settings, but this may limit your ability to use lotuspelangi. We do not use cookies for marketing or third-party tracking. Our cookies are first-party only and expire when you close your browser or after a set period of inactivity.

Your rights on lotuspelangi

You have the right to access your personal data by logging into your account dashboard. You can view your profile information, transaction history, and account activity at any time. You have the right to correct inaccurate data — you can update your email, address, or payment method through your account settings.

You have the right to request deletion of your data, subject to legal and operational constraints. You have the right to object to certain uses of your data, such as fraud-prevention analysis. To exercise these rights, contact our support team through your account dashboard. We will respond to requests within 30 days.

How we protect your data

We use industry-standard encryption (TLS/SSL) to protect data in transit. Your password is hashed and salted — we do not store plain-text passwords. Your account is protected by two-factor authentication if you enable it. Our servers are protected by firewalls and intrusion-detection systems.

We conduct regular security audits and penetration testing. We train our staff on data-protection practices. However, no security system is perfect — we cannot guarantee absolute protection against all attacks. If we detect a data breach, we will notify affected users and relevant authorities as required by law.

Our lotuspelangi privacy commitments

We at lotuspelangi commit to transparent data practices. We collect only the information necessary to operate our platform and comply with legal obligations. We do not sell your data or use it for marketing without your consent. We share data only with processors necessary to deliver our service.

Our servers may sit outside your jurisdiction, but we apply consistent data-protection standards across all locations. Users across Jakarta, Surabaya, Bandung, and Medan have the same privacy protections. We comply with applicable data-protection laws and regulations.

This privacy notice may be updated at any time. Changes take effect immediately upon publication. Continued use of lotuspelangi after changes constitutes acceptance of the updated notice. If you have questions about our privacy practices or wish to exercise your rights, contact our support team through your account dashboard.