Kebijakan Privasi

1. Introduction

Welcome to tiketlari.id ("Platform"). Your privacy is very important to us. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal information when you use our Platform, including race event registration services and related features.

By using the Platform, you agree to the collection and use of information in accordance with this Policy. Please read this Policy carefully. If you do not agree with the terms of this Policy, please do not use our Platform.

This Policy is an integral part of our Terms & Conditions.

2. Data Collected

We collect the following categories of personal data:

2.1 Identity & Contact Data

Full name, identification number (ID/Passport/Driver's License), date of birth, gender, nationality.
Email address, phone number, residential address.
Emergency contact (name, relationship, phone number).
Account data (username, encrypted password, profile photo — if provided).

2.2 Health Data (PAR-Q)

History of heart conditions or blood pressure issues.
History of chest pain during activity or at rest.
History of dizziness, loss of balance, or fainting.
History of bone or joint problems.
Use of prescription medication.
Pregnancy status (for female participants).

This health data is collected through the PAR-Q (Physical Activity Readiness Questionnaire) to ensure your safety during the event.

2.3 Transaction Data

Purchase and payment history (amount, payment method, transaction status).
Registration codes and event registration details.

2.4 Technical & Usage Data

IP address, device type, browser type, operating system.
Pages visited, visit times, and interactions with the Platform.

3. Data Collection Methods

We collect your personal data through:

Directly from You: When registering an account, completing event registration forms, PAR-Q questionnaire, contacting support, or interacting with the Platform.
Automatically: Through cookies, server logs, and other tracking technologies when you access the Platform.
Third Parties: Through payment service providers and login integrations (Google Sign-In).

4. Purpose of Collection

We use your personal data for the following purposes:

Processing race event registrations, payments, and BIB number issuance.
Evaluating participant health readiness through the PAR-Q questionnaire and determining the need for a doctor's clearance letter.
Communicating event-related information (registration confirmations, reminders, schedule changes, race results).
Issuing race result certificates and publishing race results.
Providing customer support and responding to inquiries or complaints.
Improving and optimizing the user experience on the Platform.
Complying with applicable legal and regulatory obligations.

5. Legal Basis

The processing of your personal data is based on:

Consent: You provide explicit consent when registering and completing forms on the Platform, including the PAR-Q health questionnaire.
Contractual Obligation: Data is required to process your event registration and provide the services you have ordered.
Legal Obligation: The Platform is required to comply with Law No. 27 of 2022 on Personal Data Protection ("UU PDP") and other applicable laws and regulations in Indonesia.

6. Storage & Retention

We retain your personal data for as long as necessary to fulfill the purposes of collection, unless a longer retention period is required by law. Our retention policy is as follows:

Account and profile data: Retained for as long as your account is active. If the account is deleted, data will be removed within 60 days.
Event registration data: Retained for 2 years after the event date for administrative and historical purposes.
PAR-Q health data: Retained for 30 days after the event date you participated in, then permanently deleted. We retain this data for a limited period given its sensitive nature and its sole use for event safety purposes.
Transaction data: Retained in accordance with applicable tax and accounting regulations (minimum 5 years).

7. Third-Party Sharing

We do not sell your personal data. Your personal data may be shared with third parties only in the following circumstances:

Event Organizers: Registration data (name, category, BIB number, emergency contact) is shared with the event organizer for race operational purposes. PAR-Q health data is only shared with the event medical team in case of emergency.
Payment Partners: Transaction data is processed through third-party payment gateways (such as Midtrans, Xendit) that comply with PCI-DSS security standards.
Service Providers: We may use third-party service providers for hosting, email delivery, analytics, and other technical services bound by confidentiality agreements.
Legal Obligation: Data may be disclosed if required by law, court order, or an official request from competent authorities.

8. Security

We implement reasonable technical and organizational security measures to protect your personal data, including:

Encryption of data in transit (SSL/TLS) and sensitive data at rest.
Access to personal data limited to authorized personnel on a need-to-know basis.
Regular security audits and system monitoring.
Passwords stored using one-way encryption (hashing).

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. User Rights

In accordance with the UU PDP, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right of Rectification: Request correction of inaccurate or incomplete data.
Right of Erasure: Request deletion of your personal data, subject to applicable retention obligations.
Right to Withdraw Consent: Withdraw previously given consent for data processing.
Right to Object: Object to the processing of your personal data.
Right to Data Portability: Request your data in a structured and commonly used format.

To exercise these rights, please contact us using the details in section 11.

10. Cookies

The Platform uses cookies and similar technologies to:

Maintain your login session and language preferences.
Analyze Platform usage for service improvement.
Ensure security and prevent fraudulent activity.

You can configure your browser to refuse cookies. However, some Platform features may not function properly without cookies. By using the Platform without changing your cookie settings, you consent to our use of cookies.

11. Changes & DPO Contact

Policy Changes: We may update this Privacy Policy from time to time. Any changes will be published on this page with a new "Last updated" date. We encourage you to review this page periodically. Significant changes will be notified via email (if available) or a notice on the Platform.

DPO Contact: If you have any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO):

Last updated: August 2026