Privacy Policy

Last Updated: 5 February 2026

Devata Pixel - Booking Engine (“Devata Pixel - Booking Engine”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data in connection with the use of Devata Pixel - Booking Engine’s services.

By accessing or using Devata Pixel - Booking Engine’s website, applications, or services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

1. DATA CONTROLLER

Devata Pixel - Booking Engine is owned and operated by:

PT Devata Kreasi Bangsa
(Sole Proprietorship Limited Liability Company)
Established under the laws of the Republic of Indonesia

For the purposes of applicable data protection laws, PT Devata Kreasi Bangsa acts as the Data Controller as defined under Law No. 27 of 2022 on Personal Data Protection (PDP Law).

2. LEGAL BASIS

This Privacy Policy is governed by and complies with:

Law No. 27 of 2022 on Personal Data Protection
Law No. 11 of 2008 on Electronic Information and Transactions (as amended)
Relevant government regulations and implementing rules
Reasonable industry standards for data protection and security

3. SCOPE OF APPLICATION

This Privacy Policy applies to:

Guests (users who search, book, or transact accommodation)
Properties / Partners (hotels, villas, guesthouses, or accommodation operators)
Website visitors
All users of Devata Pixel - Booking Engine’s booking engine and systems

4. PERSONAL DATA WE COLLECT

4.1 Guest Data

We may collect the following personal data:

Full name
Email address
Phone number
Booking details (stay dates, number of guests, room type)
Transaction history
Payment-related information (excluding full card details)
IP address, device, and browser information
Communication records and complaint history

Government-issued identification (e.g., ID card/passport) is collected only when required by law or by the Property, and will be deleted once the verification purpose is fulfilled, unless retention is required by law.

4.2 Property / Partner Data

We may collect:

Property name and responsible person
Property address and location
Contact details (email, phone)
Bank account information
Business licenses or legal documents (if required)
Room details, pricing, and availability
Transaction and performance data

4.3 Technical & Automatically Collected Data

Server logs
Cookies and similar technologies
Login activity and access records
System audit trails and change history

5. PURPOSES OF DATA PROCESSING

Personal data is collected and processed for the following purposes:

Providing and operating the Devata Pixel - Booking Engine booking engine
Processing reservations and transactions
Connecting Guests with Properties
Account verification and fraud prevention
Customer support and dispute resolution
Compliance with legal and regulatory obligations
System security, monitoring, and internal audits
Analytics, service improvement, and development

6. LEGAL BASIS FOR PROCESSING

We process personal data based on:

User consent
Performance of a contract (booking and partnership agreements)
Compliance with legal obligations
Legitimate interests of Devata Pixel - Booking Engine, provided such interests do not override users’ rights

7. DISCLOSURE OF PERSONAL DATA

Devata Pixel - Booking Engine does not sell or trade personal data.

Personal data may be shared with:

Relevant Properties for booking fulfillment
Payment gateways and financial institutions for transaction processing
Technology, hosting, and infrastructure providers
Government authorities when required by law

All third parties are contractually obligated to protect personal data.

8. PAYMENTS & TRANSACTION SECURITY

Devata Pixel - Booking Engine does not store full credit or debit card information.
All payments are processed through certified third-party payment gateways.
Transaction statuses (success, pending, failed, canceled) are recorded and retained for audit and legal purposes.
Payment data is protected in accordance with industry standards.

9. DATA RETENTION & DELETION

Personal data is retained only as long as necessary for service delivery and legal compliance.
Data will be deleted, anonymized, or securely destroyed once no longer required.
Identity verification data will be deleted after verification is completed, unless retention is legally required.

10. DATA SECURITY

Devata Pixel - Booking Engine implements reasonable technical and organizational security measures, including:

Encryption of sensitive data
Role-based access control
System logging and activity monitoring
Periodic internal security reviews

Users acknowledge that no electronic system is completely secure, and absolute security cannot be guaranteed.

11. DATA SUBJECT RIGHTS

In accordance with the PDP Law, users have the right to:

Access their personal data
Correct inaccurate or incomplete data
Withdraw consent
Request deletion of personal data
Restrict or object to data processing
Submit complaints to relevant authorities

Requests may be submitted through Devata Pixel - Booking Engine’s official contact channels.

12. PERSONAL DATA BREACH

In the event of a personal data breach:

Devata Pixel - Booking Engine will conduct an internal investigation
Notifications will be made in accordance with applicable laws
Mitigation and corrective actions will be implemented promptly

13. COOKIES

Devata Pixel - Booking Engine uses cookies to:

Store user preferences
Support authentication and security
Analyze usage and improve services

Users may manage or disable cookies through their browser settings.

14. ROLES & LIMITATION OF RESPONSIBILITY

Devata Pixel - Booking Engine acts solely as a platform and booking engine provider.
Properties are fully responsible for accommodation services and content accuracy.
Guests are responsible for the accuracy of information they provide.
Devata Pixel - Booking Engine is not responsible for losses arising from inaccurate information provided by Properties.

15. CHANGES TO THIS PRIVACY POLICY

Devata Pixel - Booking Engine may update this Privacy Policy from time to time. Any changes will be effective upon publication on the Devata Pixel - Booking Engine platform.

16. GOVERNING LAW

This Privacy Policy is governed by and interpreted in accordance with the laws of the Republic of Indonesia.

17. CONTACT INFORMATION

For questions, requests, or complaints regarding this Privacy Policy or personal data processing, please contact:

Email: design@devatapixel.net
Website: https://www.devatapixel.net