We may collect, store, and process the following categories of personal data:

• Identification information (e.g., full name, date of birth, nationality, passport number).
• Contact details (e.g., email address, phone number, residential address).
• Travel-related information (e.g., flight tickets, insurance documents, supporting visa documents).
• Photographic identification documents.
• Financial information if needed (e.g., payment details, proof of funds, transaction history).
• Other information necessary for compliance with Indonesian immigration and financial regulations.

Your personal data is processed for the following lawful purposes:

• To facilitate and process your visa application with the relevant Indonesian authorities.
• To verify your identity and supporting documents.
• To process and confirm payments related to visa services.
• To communicate with you regarding updates, requirements, and administrative procedures.
• To comply with legal, regulatory, and governmental obligations.
• To enhance, evaluate, and improve the quality and efficiency of our services.

We ensure that your personal data is handled with the highest standards of safety and compliance:

• Personal data is stored securely on controlled systems and accessed only by authorized personnel.
• Technical, administrative, and organizational safeguards are applied to prevent unauthorized access, loss, misuse, or disclosure.
• Data will be retained only for as long as is necessary to fulfill the purposes outlined in this Policy or as required under Indonesian law and international compliance standards.

We may disclose your personal data strictly for lawful purposes to:

• Relevant Indonesian government institutions (e.g., Directorate General of Immigration, Ministry of Law and Human Rights).
• Officially appointed partners and service providers engaged in visa processing.
• Financial institutions, auditors, or regulators when required for compliance and verification.

We do not sell, lease, or rent personal data to third parties for commercial gain.

Visaloka is committed to adhering to applicable Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) regulations, in accordance with the standards of the Financial Action Task Force (FATF), Indonesian Law No. 8 of 2010 on Prevention and Eradication of Money Laundering, and relevant OJK (Financial Services Authority) regulations.

In this regard:

• We may conduct Know Your Customer (KYC) and enhanced due diligence checks, including identity verification, screening against international sanctions lists, and monitoring of transactions.
• We reserve the right to request additional documents or information to satisfy AML/CFT obligations.
• Where suspicious activity is detected, we are legally obliged to report such transactions to the competent authorities, including PPATK (Indonesian Financial Transaction Reports and Analysis Center).
• By using our services, you acknowledge and consent to such monitoring and reporting obligations as part of our legal and regulatory compliance.

Subject to applicable laws, you have the right to:

• Request access to your personal data.
• Request correction or updating of inaccurate or incomplete data.
• Request deletion of personal data when it is no longer required, except where retention is mandated by law.
• Restrict or object to the processing of your personal data under certain circumstances.
• Lodge a complaint with the relevant data protection authority.

Visaloka reserves the right to amend or update this Privacy Policy at any time in order to remain compliant with legal, regulatory, and operational requirements. Updates will be published on our official platform and will take effect as of the date of publication.

For questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact us at:

• 📧 Email: business@visaloka.com
• 📞 Phone: +62 878 8283 2988
• 🌐 Website: www.visaloka.com