DMB News:
Pesona Wisata Amazing Indonesia Traveling DMB Indonesia
verified_user Compliance with Personal Data Protection Law (UU PDP) โ€ข SOP 2026

Privacy Policy of dmbindonesia.id

The dedicated commitment of PT. DMB Satria Indonesia in managing, securing, and guaranteeing the confidentiality of guest and partner personal data in compliance with the laws of the Republic of Indonesia.

policy
Legal Framework
UU PDP No. 27/2022
lock
Transmission Encryption
SSL 256-Bit High Grade
key
Administrative Access
Passwordless 15-Min OTP
schedule
Data Retention Standard
30 Hari Log / 5 Thn Pajak
shield_with_heart Commitment to Guest Privacy Protection

The dmbindonesia.id privacy policy reflects our solemn pledge to safeguard all personal information entrusted to us. PT. DMB Satria Indonesia respects guest privacy throughout dream vacation planning. We collect information transparently in strict compliance with legal frameworks.

This document outlines how we manage, store, and safeguard your information, strictly governed by Personal Data Protection Law (UU PDP) open_in_new . You grant explicit consent to this data processing by accessing our platform and services.

1
Data Classification

What Information Do We Collect?

The information we collect includes details you provide directly and technical data captured automatically during platform usage, gathered to ensure seamless ticket issuance, fleet permits, and accommodations:

badge 1. Personal Identification Data (Passenger Manifest)

When requesting a quotation or booking a tour package, we request the following data:

  • Full name matching legal official identification (National ID, Driver License, or Passport).
  • Active email address for dispatching digital billing invoices, payment confirmations, and e-tickets.
  • Active phone and WhatsApp number for field crew pick-up coordination.
  • National Identification Number (NIK) or passport number for conservation area entrance permits (SIMAKSI) and port authority harbormaster manifests (KSOP).

credit_card 2. Financial & Payment Transaction Data

We record payment status, transaction amounts, and invoice reference numbers. However, we NEVER store credit card numbers or CVV codes on our internal servers. Credit card transactions are processed directly by our licensed partner Faspay, certified under PCI-DSS and 3D-Secure standards.

devices 3. User Browsing & Analytics Data (Cookies)

Our site analytics records pages accessed, anonymized IP addresses, browser specifications, city geolocation, and session duration in real time. We also deploy an affiliate cookie (dmb_affiliate_token) with a 30-day lifetime for official partnership commission attribution.

2
Legality & Efficiency

Why Do We Process Your Personal Data?

We process your personal information solely to deliver seamless, safe, and dependable travel services. Specifically, your data is utilized for the following operational needs:

confirmation_number Reservation & Official Ticket Issuance

We secure official conservation area entry tickets for Mount Bromo, Ijen Crater, and Komodo National Park under your legal identity.

mail Dispatch of Travel Documents

We deliver official billing invoices, detailed day-by-day itineraries, and electronic boarding vouchers directly to your inbox.

support_agent Assistance & Logistics Automation

We contact you promptly to re-confirm airport arrivals, hotel lobbies, or railway station pick-up points.

shield Cybercrime & Fraud Prevention

We monitor transaction legitimacy and dashboard access patterns to thwart unauthorized incursions and cyber fraud.

You may further review our operational standards via our about dmbindonesia.id arrow_forward .

3
Trusted Partner Ecosystem

With Whom Do We Share Your Data?

We share data strictly with verified partners essential to operating your travel itinerary. We NEVER sell, lease, or trade your personal data to any external parties for third-party marketing purposes.

account_balance
National Park Conservation Authorities: We forward your identification to national park boards (TNBTS, BBKSDA, BTNK) solely for official entrance permit issuances.
groups
Field Operations Partners: We supply your name and contact details to drivers, boat captains, licensed local guides, and partner accommodations for logistics.
account_balance_wallet
Payment Gateway Providers: We connect your booking order with official systems of Faspay and Espay for secure automated invoice clearing.
gavel
Legal Compliance & Law Enforcement: We reserve the right to disclose relevant information when legally mandated by Indonesian court orders or government authorities.
4
Data Retention & Purge Schedule

How Long Do We Retain Your Data?

We store your data strictly for the period necessary to fulfill operational goals and legal compliance requirements according to tiered standards:

history Retention: 30 Days

Website Access Logs & Analytics Retention

We maintain website activity logs for 30 days in active databases. Afterward, aggregated summaries are archived securely, and raw access logs are permanently purged.

receipt_long Retention: Minimum 5 Years

Financial Invoices & Tax Records Retention

We retain invoice records, customer transaction names, and tax deduction vouchers for at least 5 years pursuant to the statutory tax laws of the Republic of Indonesia.

5
Security Infrastructure

How Do We Safeguard Your Data?

We protect your data across multiple modern digital infrastructure layers. All communications with our platform are encrypted with industry-standard 256-bit SSL protocols:

vpn_key Passwordless Admin Access (15-Minute Email OTP)

Administrative access is secured with a passwordless architecture. Staff authenticate exclusively via time-limited (15-minute) email OTP tokens, eliminating static credential breach vulnerabilities.

security Automated IP Intrusion Defense & Rate Limiting

We deploy automated firewalls that instantly blacklist IP addresses exhibiting brute-force attacks, penetration probing, or suspicious activity patterns.

6
Guest Data Sovereignty

What Are Your Privacy Rights?

Your privacy rights are protected under the Indonesian Personal Data Protection Act (Law No. 27/2022). You are entitled to the following legal entitlements:

download

Right of Access

You have the right to request an electronic copy of your personal data stored within our systems.

edit_note

Right to Rectification

You have the right to rectify inaccurate personal details, misspelled names, or outdated contact info.

delete_sweep

Right to Withdraw Consent & Erasure

You have the right to withdraw marketing consent or demand the deletion of your account records at any time.

Simply submit a written request to our Data Protection Officer via email at contact@dmbindonesia.id.

7
Data Protection Officer

Contact Our Privacy Compliance Team

Should you have inquiries, objections, or wish to exercise your privacy rights, please contact our Data Compliance Office:

Company Name

PT. DMB Satria Indonesia

Divisi Kepatuhan Privasi (DPO)

Office Address

PRA Residence B13 Tambakasri, Malang

Jawa Timur, Indonesia

Official Email

contact@dmbindonesia.id

WhatsApp Support Hotline

+62 812-4929-3400

You can also review our comprehensive terms of service on our official page Terms and Conditions of dmbindonesia.id arrow_forward .

8
Questions & Answers

Privacy Policy Frequently Asked Questions (FAQ)

help Is my ID or passport data safe when booking tour packages?

Your ID data is encrypted with advanced protocols and strictly utilized for official national park permits and harbor passenger manifests.

help How can I request the deletion of my data from dmbindonesia.id databases?

You can request data deletion simply by sending a formal email to contact@dmbindonesia.id.

verified
Confirmed Booking โ€ข Just now

Budi S. (Surabaya)

Sailing Phinisi Komodo Signature 3D2N

check_circle Deluxe Ocean View Cabin โ€ข Scheduled