Privacy Policy

1. Definitions

“We” means Neo Valor, the personal data controller for this site. “You” means the visitor or user whose data we process. “Services” means the site, platform and support we provide.

2. Personal data

Personal data is information that can identify you, alone or together with other data. The data we collect directly from you is your first name, last name, telephone number, email address and the content of any message or request you send. At the verification stage we also process identity documents and a selfie as described in the KYC and AML policy.

3. Usage data

When you visit the site, the system records technical data such as your IP address, browser and device type, the pages opened, the time of the visit and the referring source. This data helps us keep the site secure, improve it and show a suitable currency and language.

4. Cookies

Cookies are small files stored in your browser. We use them for basic site functions, to remember preferences and, if you allow it, to measure how the site is used. You can delete or block cookies in your browser settings, with the consequence that some features may not work optimally.

5. Controller and processors

Neo Valor acts as the personal data controller that decides the purposes and means of processing. Service providers that process data on our behalf, for example hosting and identity verification providers, act as data processors and are bound by confidentiality obligations.

6. Collection and use of information

We use your data to respond to requests and contact you after registration, create and manage accounts, provide the services, meet legal obligations such as preventing money laundering, maintain security, and analyse use of the site to improve the service. With your consent, data is also used to send information and offers.

7. Legal basis for processing

Under Law No. 27 of 2022 on Personal Data Protection, we process data on the basis of: performance of an agreement with you, legal obligation, our legitimate interests that do not override your rights (for example security and fraud prevention), and your consent, especially for marketing. You can withdraw consent at any time.

8. Data retention

Account data is kept while the account is active. KYC and transaction data is kept for the period required by regulations, generally five years after the relationship with you ends. Marketing data is kept until you withdraw consent, and technical logs are kept for about twelve months. After that the data is deleted or anonymised.

9. Data transfer

Our servers and service providers may be located outside Indonesia. When data is sent abroad, we make sure the destination country or recipient offers an adequate level of protection, or we apply agreements and safeguards of equal effect as required by regulations.

10. Disclosure of data

Data may be disclosed to affiliated companies and service providers who help our operations, identity verification and payment providers, and to regulators, law enforcement or courts when required by law. We do not sell your personal data.

11. Security

We apply encryption, access restrictions and monitoring to protect data. No system is completely immune, and if a personal data protection failure occurs, we notify you and the competent authority as required. The full set of security measures is on the security page.

12. Rights of data subjects

You have the right to access and obtain a copy of your data, correct inaccurate data, request deletion or destruction of data, restrict or object to certain processing, withdraw consent, and object to decisions taken solely through automated processing. We respond to your requests within the time limits set by regulations.

13. Service providers

We use third-party providers for hosting, email delivery, identity verification and customer support. They may use the data only on our instructions and for the purposes we set.

14. Analytics

We may use analytics tools to understand how the site is used, for example which pages are opened most often. Results are used in aggregate form, and such tools are only active according to the site settings and your cookie preferences.

15. Advertising and retargeting

If we run advertising, ad providers may use cookies or similar identifiers to show relevant ads. You can turn off ad personalisation in your device or browser settings, and refuse direct marketing at any time.

16. Links to third-party sites

The site may contain links to other sites, such as exchanges or payment providers. Their privacy policies apply separately and are outside our control, so you should read them before giving data.

17. Children's privacy

Our services are not intended for children under 18, and we do not knowingly collect their data. If we learn that a child's data has been collected without the consent of a parent or guardian, it will be deleted.

18. Changes to this policy

This policy may be updated as the services or regulations change. The latest version applies from the moment it is published on this page, and changes of importance will be communicated by email or a notice on the site.

19. Contact us

For questions, requests to exercise your rights, or complaints about personal data, contact Neo Valor at [email protected]. Other terms that apply are in the Terms of Use.