IDX Privacy Policy
- This Privacy Policy represents the policy of PT Bursa Efek Indonesia (IDX) regarding the collection, storage, processing, improvement, updating, transmission, disclosure, and protection of your Personal Data (Personal Data Processing) through IDX’s websites, domains, applications, and services.
- This Privacy Policy applies to all users when accessing IDX’s websites, domains, applications, and services. By giving your consent to this Privacy Policy, you are deemed to have read, understood, and agreed to all its provisions, including granting consent for IDX to process your Personal Data.
- This Privacy Policy does not apply to third-party applications, websites, products, services, or platforms accessible through links provided by IDX and not affiliated with IDX.
- When you provide Personal Data to IDX, you guarantee that all information provided is accurate and not falsified. If you provide Personal Data of other individuals, you declare and guarantee that you have obtained consent from such individuals and agree, on their behalf, to the processing of their Personal Data by IDX.
- As a user whose Personal Data is processed by IDX, you have the right to obtain information, correct, complete, update, access and obtain copies, delete, withdraw consent, raise objections, delay or restrict processing, dispute and claim compensation, and transmit your Personal Data to other Data Controllers.
- If you disagree with this Privacy Policy, you may cease using IDX’s websites, domains, applications, and services. IDX recommends regularly visiting its websites, domains, applications, and services to review the latest Privacy Policy to which you are bound to.
- IDX is committed to processing your Personal Data in compliance with applicable procedures under the supervision of competent individuals to uphold this Privacy Policy; and
- You can update the accuracy and completeness of your Personal Data in case of changes by submitting a written request to the authorized personnel designated by IDX.
The protection of your Personal Data is a priority for IDX. IDX will make its best effort to safeguard and secure your Personal Data from various security risks, including data loss, unauthorized access, disclosure by unauthorized parties, unlawful processing, and data destruction or damage. Measures implemented include, but are not limited to adequate data security technology, security controls, and technical and administrative safeguards. However, you also agree that perfect security and confidentiality on internet media are currently unattainable. Without limiting disclaimers in this Privacy Policy, IDX is not responsible for any losses you or others may incur related to security or confidentiality breaches beyond IDX’s control. Therefore, you are responsible for maintaining the confidentiality of your account details and must not share your account details, including passwords, with anyone. You must also ensure and take responsibility for the security of the devices you use.
"Personal Data" refers to information that can be used to identify, contact, or trace individuals or related devices. Personal Data may include:
- General Personal Data, such as full name, address, date of birth, occupation, phone number, email address, gender, official identification (e.g., passport or ID card), vehicle data, photos, nationality, religion, marital status, phone numbers in contact lists, and/or Personal Data combined to identify someone.
- Specific Personal Data, such as health data, financial data, biometric data (including fingerprints and facial recognition), genetic data, criminal records, child data, and other information classified as Personal Data under applicable regulations.
Applicable legislation includes all laws, regulations, policies, and government provisions in effect during the period of this Privacy Policy. Any data linked or combined with Personal Data is also considered Personal Data.
IDX may collect your Personal Data based on the consent provided and in compliance with applicable regulations to support the development of Indonesia's Capital Market. Collected Personal Data may include:
- General information, such as full name, phone number, gender, date of birth, nationality, email address, password, ID Card photo, and employment data.
- Tax-related data, such as Tax ID Number (NPWP).
- Location and residential address data.
The Personal Data is collected by IDX when:
- You create an account on the website, domain, or application in accordance with the consent you have provided;
- You use IDX services;
- You access or log in to the website, domain, and application in accordance with the consent you have provided;
- You complete surveys and/or questionnaires conducted by IDX;
- You contact IDX to submit inquiries and/or report issues (via phone, email, social media, web forms, letters, messaging services, or face-to-face meetings);
- You interact with IDX's social media accounts, such as liking IDX posts, commenting on IDX posts, or sending private messages to IDX on its social media platforms;
- You participate in programs organized by IDX, such as socialization events, educational programs, expos, and similar activities; and
- IDX collaborates with third parties.
IDX collects and uses your Personal Data with your consent to transmit, process, and store it for purposes such as:
- Registration, maintenance, and verification or authentication of your identity;
- Communication related to:
- Your inquiries, requests, and feedback on IDX services;
- Changes to the Terms of Service, Policies, or Terms and Conditions of IDX’s websites, domains, and applications;
- Matters related to the operation of your account.
- Monitoring and enforcing compliance with IDX Terms of Service, including dispute resolution;
- Compliance with:
- Internal risk control, particularly concerning suspicious transactions;
- Applicable laws.
- Sending newsletters and marketing communications about IDX services, investments, events, surveys, or activities organized on behalf of IDX;
- Ensuring the proper functioning of IDX’s websites, domains, and applications and enhancing their performance through debugging and statistical analysis;
- Investigating and preventing cybersecurity incidents, attacks, and hacking attempts;
- Improving IDX’s services;
- Providing technical and customer support;
- Managing and delivering advertisements and marketing content;
- Registering participants for events;
- Research and development purposes; and
- IDX may also use your Personal Data:
- For other purposes reasonably related to the above objectives, with obtained and maintained related consent;
- In situations where consent is not required as stipulated by applicable laws.
IDX will process your Personal Data in accordance with the purposes outlined in the section on the Use of Personal Data. In processing Personal Data, IDX also considers the legal basis for processing Personal Data as stipulated in applicable laws and regulations, including:
- Valid and explicit consent;
- Fulfillment of contractual obligations;
- Law enforcement;
- Fulfillment of vital needs;
- Public interest; and/or
- Other legitimate interests.
IDX will process your Personal Data for as long as you provide consent and as necessary to fulfill the purposes for which it was obtained and collected, or as required by applicable laws and regulations.
IDX will accommodate your request regarding corrections and/or updates to your Personal Data managed by IDX. Such requests can be submitted through the IDX Contact Center by completing the Personal Data Subject Rights Request Form. IDX may also request proof of your identity to verify your authenticity as the Personal Data Subject at IDX. If the request is made by a Guardian/Third Party, it must be accompanied by a Power of Attorney or an equivalent legal document. Please note that the request will be processed within a maximum of 3x24 calendar hours from the date the request is received. IDX reserves the right to deny requests to correct and/or update your Personal Data if the request endangers others, impacts the disclosure of others' Personal Data, or conflicts with national defense and security interests.
Currently, your Personal Data is stored and managed on servers located in Indonesia. However, IDX may share your Personal Data with Third Parties only in the manner specified in this Privacy Policy or as outlined at the time the Personal Data is collected, including with the following parties:
- Employees, consultants, and temporary workers;
- Business partners or vendors in relation to the processing of promotions, events, or services organized by IDX (if any);
- Professional advisors and consultants;
- Agents, contractors, or service providers providing operational services to IDX, such as email services, online cloud storage and processing, marketing optimization, information technology, telecommunications, backup and disaster recovery services, security, or other related services requiring the collection, use, or disclosure of your Personal Data;
- Other parties, such as Self-Regulatory Organizations (SROs) and the Otoritas Jasa Keuangan (OJK), authorized by you for IDX to disclose your Personal Data; and
- Applications such as Google Analytics, used to help IDX monitor activities and traffic on IDX's website.
IDX may transmit your Personal Data to the parties mentioned in the Disclosure of Personal Data section. The transmission of Personal Data by IDX ensures the following:
- The purpose of the data transmission;
- The legal basis for processing Personal Data;
- Security of the recipient of the Personal Data;
- Security of the method of data transmission; and
- Retention period by the recipient of the Personal Data.
For large-scale transmission of Personal Data outside Indonesia, IDX will conduct an impact assessment prior of the Personal Data transfer.
- IDX will retain your Personal Data only for the purposes for which it was collected as your consent and/or as required by applicable law;
- All collected Personal Data will be used only for the purposes stated in the Use of Personal Data section for a duration of 5 years from the date you agree to these terms, except for financial supervision activities and/or other regulations; and
- Upon the expiration of the retention period or at your request to delete your Personal Data, IDX will remove your Personal Data from its systems in compliance with applicable laws.
In the event of a merger, acquisition, consolidation, spin-off, or liquidation involving the transfer of your Personal Data, IDX will notify you:
- Before the transfer of Personal Data occurs;
- Regarding the next Data Controller operating under a different Privacy Policy; and
In certain situations, IDX may be required to disclose your Personal Data if mandated by law or in response to legitimate requests from public authorities, such as courts or government agencies.
- Right to Obtain Information
You have the right to obtain information regarding the clarity of identity, the legal basis for the request, the purpose of the request and use of your Personal Data, and the accountability of the party requesting your Personal Data in accordance with applicable laws and regulations. Additionally, you have the right to request and receive your Personal Data managed by IDX in a commonly used format. Furthermore, you have the option to transfer this Personal Data to another Data Controller, provided that:
- You originally provided this Personal Data to IDX; and
- IDX processes the data based on your consent or to fulfill a contract with you or a Third Party subscribed to IDX services.
- Right to Request Deletion of Personal Data
You have the right to request IDX to delete or terminate the processing of your Personal Data managed by IDX. However, please note that this right may be exempted if the information is required and/or mandated to be retained by regulators as a legal requirement. - Right to Access and Obtain a Copy of Personal Data
You have the right to access and obtain a copy of your Personal Data from IDX in accordance with applicable laws and regulations. Please note that such requests will be processed within a maximum of 3x24 calendar hours from the date the request is received. IDX will provide access and copies of Personal Data as requested. However, this right may be exempted if the request endangers others, impacts the disclosure of others' Personal Data, or conflicts with national defense and security interests. - Right to Withdraw Consent
You have the right to withdraw your consent for the processing of Personal Data provided to IDX. Upon withdrawal of consent, IDX will stop processing your Personal Data for any purpose except for storage purposes. Please note that such requests will be processed within a maximum of 3x24 calendar hours from the date the request is received. However, this right may be exempted if the information is required and/or mandated for legal requirements. - Right to Delay or Restrict Processing
You have the right to delay or restrict the processing of your Personal Data under certain situations. In such cases, IDX will not process your data for any purpose other than storage necessity. Please note that such requests will be processed within a maximum of 3x24 calendar hours from the date the request is received. However, this right may be exempted if the information is required and/or mandated for legal requirements. - Right to File a Complaint
You have the right to file a complaint and receive compensation for violations of the processing of your Personal Data in accordance with applicable laws and regulations. - Right to Correct Personal Data
You have the right to request and make corrections to incomplete or inaccurate Personal Data managed by IDX. Please note that such requests will be processed within a maximum of 3x24 calendar hours from the date the request is received. IDX will notify you once the corrections are completed. However, this right may be exempted if the request endangers others, impacts the disclosure of others' Personal Data, or conflicts with national defense and security interests. - Right to Obtain and Use Personal Data
You have the right to obtain and use Personal Data processed by IDX in a commonly used format or in a format readable by electronic systems. This right applies where the processing of Personal Data is based on consent or fulfillment of contractual obligations and involves automated data processing. - Right to Transfer Personal Data
You have the right to transfer Personal Data processed by IDX to another Data Controller, provided the systems used can securely communicate with each other in accordance with legal provisions. This right applies where the processing of Personal Data is based on consent or fulfillment of contractual obligations and involves automated data processing. - Right to Objection
If the processing of your Personal Data is based on legitimate interests and/or involves automated processing, including profiling that results in legal consequences or significantly affects you, you may object for reasons related to your specific circumstances. IDX will respect your decision unless IDX has compelling legitimate excuses for processing that override your interests and rights or if processing is necessary for establishing, exercising, or defending legal claims.
You can submit a request to exercise your rights related to your Personal Data by sending the request to IDX via the IDX Contact Center. To ensure your privacy and security, IDX may require you to verify your identity before providing the requested information.
- As part of IDX's commitment to properly handle, protect, and process your Personal Data, IDX will periodically review and assess its policies, procedures, and processes. As part of this commitment, IDX may amend this Privacy Policy to align with any changes in legal or regulatory requirements. IDX reserves the right to make changes to this Privacy Policy;
- By accessing IDX's website, domain, application, and services, you acknowledge your acceptance of the terms outlined in this Privacy Policy, which may be updated from time to time. Any changes to the Privacy Policy will be published on IDX's website, domain, and application. By continuing to use IDX's platform and/or services after amendments to the Privacy Policy, you imply your consent to comply with the updated terms; and
- IDX recommends that you periodically check IDX’s website, domain, and application to stay informed about the latest developments in IDX’s Personal Data Protection Policy.
If you have questions about your Personal Data or this Privacy Policy, wish to file a complaint regarding the collection, use, or management of your Personal Data by IDX, or have questions about IDX's compliance with applicable laws, please contact the IDX Contact Center via Contact Us.
This Privacy Policy (along with the Terms of Use listed on the IDX Website www.idx.co.id) explains the basis for the collection, use, security, confidentiality, alteration and deletion of personal data or information belonging to IDX Website Users (hereinafter referred to as "Personal Information") which the IDX obtains through the IDX Website. IDX Website Users need to pay close attention to the provisions below to understand how the Personal Information is treated.
By registering on the IDX Website, IDX Website Users are deemed to have read, understood and gave their consent to the collection and use of IDX Website Users' Personal Information as described below.
IDX Website Users know that IDX as the owner of the IDX Website directly or indirectly accesses and uses IDX Website Users' Personal Information. Personal Information includes, but is not limited to, name, address, date of birth, telephone number, email address, gender, nationality and activity records. IDX Website Users hereby given approval to IDX to store and access IDX Website Users' Personal Information, both in the context of managing the IDX Website for use by IDX. In addition, IDX Website Users allow IDX to provide IDX Website Users' Personal Information to other parties needed in managing the IDX Website, including but not limited to Self-Regulatory Organizations (SRO) and the Financial Services Authority (OJK).
Personal Information provided by IDX Website Users will be used for various purposes:
- To provide and maintain IDX Website services;
- To notify about changes in IDX services;
- To enable IDX Website Users to use the Stock Screener feature which is not limited by the number of searches;
- To analyse information in order to improve IDX Website services;
- To monitor the use of IDX Website services;
- To detect, prevent and resolve technical problems on the IDX Website.
IDX is committed to always protecting IDX Website Users' Personal Information. IDX states that it has never sold or transferred, in any way, Personal Information of IDX Website Users to other parties that are not involved in the management of the IDX Website except to those parties mentioned in number 1 above.
IDX will maintain confidentiality including protecting data from the danger of leakage, hacking, alteration or loss of data, both related to IDX Website Users' Personal Information and other data or information related to the management of the IDX Website. IDX Website Users acknowledge and agree that IDX can verify certain parties IDX deems necessary to confirm data correctness.
IDX Website users can make changes and delete Personal Information through the IDX Website independently through the "My Account" feature. If the IDX Website User has deleted Personal Information through the IDX Website as mentioned above, then the IDX Website User cannot use the same email address to register again on the IDX Website.
This Privacy Policy may be changed and/or updated from time to time without prior notification. IDX recommends that IDX Website Users carefully read and check this Privacy Policy page from time to time to find out about any changes. By continuing to access and use the IDX Website, IDX Website Users are deemed to agree to changes in this Privacy Policy.
In the event that IDX Website Users have questions, comments or complaints regarding this Privacy Policy, please contact the IDX Contact Center via https://www.idx.co.id/id/about-bei/contact-us/.