Last updated: 30 July 2026
This Privacy Policy explains how PT BALI PRIVILEGE SATU, operating as Bali Privilege Club, collects, uses, stores and shares personal data when you use https://baliprivilegesclub.com/, purchase or use a membership, communicate with us, or interact with our support team.
PT BALI PRIVILEGE SATU acts as the personal data controller for the processing described in this Policy.
1. Controller and contact details
- Legal entity: PT BALI PRIVILEGE SATU
- Registered office: Jalan Bumbak, Banjar Anyar, Umalas, Kerobokan Kelod, Kuta Utara, Badung Regency, Bali 80361, Indonesia
- NIB: 2007260009802
- Privacy and customer support email: baliprivilegeclub@gmail.com
- WhatsApp: +62 853-3808-8701
2. Personal data we may collect
Depending on how you interact with us, we may collect:
Identity and contact data
Name, telephone or WhatsApp number, email address, and information used to verify that a membership belongs to you.
Order, membership and delivery data
Selected membership, order number, price, purchase and activation dates, expiry date, membership or card identifier, delivery or pickup preference, delivery address, hotel or villa details, access instructions and order notes.
Payment and transaction data
Payment status, amount, currency, payment method category, transaction reference and refund information. Payments may be processed by a third-party payment provider. Unless expressly stated otherwise, Bali Privilege Club does not need to receive or store your complete card number, CVV or online banking password.
Membership-use and partner-support data
Information provided when validating a membership, resolving a complaint or confirming a privilege, including the relevant partner, date, issue and outcome. We do not require partners to disclose more information than reasonably necessary for validation, fraud prevention or support.
Communications
Messages, complaints, feedback, support records and information you choose to send through email, WhatsApp, website forms or social media.
Website and device data
IP address, browser and device type, language, approximate location derived from IP, pages viewed, referral source, timestamps, cookie identifiers and security logs.
Marketing preferences
Whether you agreed to receive promotions and whether you unsubscribed.
Please do not send sensitive personal data unless it is necessary for a specific request and we have asked you to provide it through an appropriate channel.
3. How we collect personal data
We collect data:
- directly from you when you submit a form, purchase a membership, contact support or use a card;
- automatically through cookies, server logs and similar technologies;
- from payment, delivery, hosting, communications and technical service providers;
- from a participating partner where needed to validate membership use or resolve a complaint; and
- from public or lawful sources where necessary to prevent fraud or protect legal rights.
4. Why we use personal data
We may process personal data to:
- respond to an order or membership request;
- take payment and prevent duplicate or fraudulent transactions;
- create, activate, deliver, validate, replace and administer a membership;
- provide customer support and resolve partner-privilege complaints;
- communicate order confirmations, service notices and legal updates;
- operate, secure, troubleshoot and improve the Website and membership programme;
- measure Website performance and understand how visitors use the service;
- send marketing where you have consented or where otherwise permitted by law;
- maintain transaction, accounting, tax and compliance records;
- establish, exercise or defend legal claims; and
- comply with lawful requests and legal obligations.
5. Legal grounds for processing
Where required, we rely on one or more lawful grounds recognised by Indonesian personal data protection law:
- your consent;
- steps requested by you before entering into a contract and performance of our contract with you;
- compliance with a legal obligation;
- protection of vital interests;
- performance of a task in the public interest or exercise of official authority, where applicable; and
- our legitimate interests or those of another party, balanced against your rights, including service security, fraud prevention, support and reasonable business improvement.
You may withdraw consent at any time. Withdrawal does not affect processing already lawfully completed and does not prevent processing based on another lawful ground.
6. When we share personal data
We may share only the data reasonably necessary with:
- payment processors and banks;
- couriers, drivers, hotels, villas, reception desks and pickup points involved in authorised delivery or collection;
- participating partners where needed to validate a card or resolve a specific privilege issue;
- website hosting, cloud storage, analytics, CRM, email, messaging, security and technical support providers;
- accountants, auditors, insurers, lawyers and professional advisers;
- a buyer, investor or successor in a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards; and
- courts, regulators, law enforcement or other authorities where disclosure is legally required.
We do not sell personal data as a standalone product. We require service providers to process personal data only for authorised purposes and with appropriate protection.
7. International data transfers
Some technology, communications, payment or cloud providers may process data outside Indonesia. Where personal data is transferred internationally, we will use the safeguards required by Indonesian law, which may include confirming an adequate level of protection, contractual protection, or obtaining consent where required.
8. Data retention
We keep personal data only as long as reasonably necessary for the purposes described in this Policy, including the membership term, support, fraud prevention, accounting, tax, legal claims and mandatory electronic-commerce recordkeeping.
Retention periods may differ by data category. When data is no longer required, we will delete or anonymise it, unless continued retention is required or permitted by law.
9. Security
We use reasonable technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. These measures may include access controls, authentication, backups, logging, secure transmission and provider due diligence.
No internet or storage system is completely risk-free. If a personal data protection failure occurs, we will investigate and provide notifications within the time and form required by applicable Indonesian law.
10. Your rights
Subject to applicable law and lawful exceptions, you may have the right to:
- receive clear information about the processing of your personal data;
- access and obtain a copy of your personal data;
- correct or update inaccurate data;
- withdraw consent;
- request deletion or destruction of data;
- request restriction, suspension or termination of processing;
- object to certain automated decisions or processing;
- obtain and transfer data in a commonly used format where applicable;
- complain and seek compensation for unlawful processing; and
- exercise other rights provided by Indonesian law.
To make a request, email baliprivilegeclub@gmail.com or contact us on WhatsApp at +62 853-3808-8701. State your name, request and the account or order involved. We may verify your identity before acting to protect you and other members.
We will respond within the period required by law. A request may be limited or refused where a lawful exception applies, and we will explain the basis where required.
11. Cookies and analytics
The Website may use:
- essential cookies needed for security, forms, preferences and core functions;
- analytics cookies used to understand traffic and improve the Website; and
- marketing cookies, if enabled, used to measure campaigns or personalise advertising.
Where consent is required, non-essential cookies will be used only after consent. You can change browser settings or use the Website's cookie controls, where available. Blocking essential cookies may affect Website functionality.
The cookie banner and cookie settings must accurately reflect the technologies actually installed on the Website.
12. Marketing
Where permitted by law, we may send news, partner offers and membership promotions. You can opt out at any time through the method included in the message or by contacting us. We may still send non-marketing messages needed to administer an order or active membership.
13. Children
The membership and Website are not directed to children who cannot independently enter into the transaction under applicable law. If a membership is purchased for a minor, the parent or legal guardian must make the purchase and provide any necessary consent.
If you believe a child provided personal data without appropriate consent, contact us so that we can review and, where required, delete it.
14. Third-party websites and partner services
The Website may link to partner websites, maps, social media, booking services and payment providers. Those organisations may independently control personal data under their own privacy policies. We encourage you to review their notices before providing information.
15. Changes to this Policy
We may update this Policy to reflect changes in our service, technology or legal obligations. The latest version and date will be posted on this page. Where required, we will provide additional notice or request renewed consent.
16. Complaints and contact
Questions, rights requests and privacy complaints may be sent to:
PT BALI PRIVILEGE SATU Jalan Bumbak, Banjar Anyar, Umalas, Kerobokan Kelod, Kuta Utara, Badung Regency, Bali 80361, Indonesia Email: baliprivilegeclub@gmail.com WhatsApp: +62 853-3808-8701
You may also contact the competent Indonesian personal data protection authority or use another remedy available under Indonesian law.