PRIVACY POLICY

PT KAYA LAUTAN PERMATA

I.        COLLECTION AND USE OF PERSONAL INFORMATION

In the context of this privacy policy, personal information refers to information about you as a customer ("Customer") that can identify or can be used to identify the Customer, whether used alone or in conjunction with other information, which has a direct or indirect relationship with the Customer ("Personal Information").

The Customer's Personal Information collected by PT Kaya Lautan Permata ("Kaya") will be used in accordance with the purposes permitted by applicable laws and regulations in the Republic of Indonesia.

Kaya collects this personal information with the aim of providing Customers with a smooth, secure, efficient, and fair transaction experience, as this personal information will be provided to relevant parties in providing investment services to Customers within the Kaya application ("Kaya App"), including but not limited to parties such as investment managers and KSEI (Kustodian Sentral Efek Indonesia) for creating the Customer's investment account.

By reading the content of this privacy policy, the Customer agrees that Kaya has the right to share this Personal Information with third parties who collaborate with Kaya, affiliated companies of Kaya, parties, and/or tools used to process the Customer's Personal Information for the purposes of Know Your Customer (KYC), financial institutions that cooperate with Kaya in connection with the execution of investment transactions ("Partners"), authorities or agencies authorized both within the Republic of Indonesia and abroad, in accordance with the limitations set forth in the applicable personal data laws and regulations as well as this Privacy Policy. The Customer also understands that these third parties previously have the right to store and/or process the Customer's Personal Information for purposes related to the use of services provided by Kaya.

Kaya will collect the following information:

1. Customer account information, including:

• Name

• Nationality

• Identification Number (NIK/passport for foreign nationals)

• Identity expiration date (for passports)

• Taxpayer Identification Number

• NPWP/TIN registration date

• Country of birth

• City of birth

• Date of birth

• Gender

• Last education level

• Mother's name

• Religion

• Occupation

• Income level (in Rupiah)

• Marital status

• Spouse's name (if any)

• Investor risk profile

• Investment purpose

• Source of funds

• Asset owner

• Address as per identity

• City as per identity

• Postal code as per identity

• Email address

• Mobile phone number

• Emergency contact

• Bank account number and bank name

The above information is collected for the purposes of registration, KYC, and transaction recording.

Information regarding the Customer's device, including basic information that may arise from the use of the Kaya App by the Customer, such as, but not limited to, IP address, cellular ID, location, images from the camera connected to the device, phone number used for SMS (short message services), mobile network information, and similar information will be used by Kaya to ensure the proper functioning of the Kaya App.

Kaya will provide this data to third parties only for the purpose of processing Single Investor Identification (SID), Customer Due Diligence (CDD), and Enhanced Due Diligence (EDD) processes.

II.         RETENTION OF PERSONAL INFORMATION

The storage of the Customer's Personal Information is carried out by Kaya for as long as the Personal Information is needed by Kaya to carry out the purposes described earlier, or if required by court orders, public officials, institutions, or authorized agencies, and/or based on applicable laws and regulations. The Customer's Personal Information will no longer be stored by Kaya when it is no longer needed for legal purposes and/or Kaya's business activities.

The Customer understands that their Personal Information will be stored by Partners in various ways. Information shared between the Customer and Partners or other third parties, in addition to being shared through Kaya, may also be stored in various ways (such as through phone, mobile messages, or other modes of communication). Kaya does not grant permission and is not responsible to the Customer if their Personal Information or other related information is obtained in this manner. To the extent permitted by Indonesian law, Kaya is not liable and will not be held responsible for the storage of the Customer's Personal Information and for any losses resulting from the storage of the Customer's Personal Information or other related information.

III.       CONFIDENTIALITY OF PIN/PASSWORD

The Customer is required to maintain the confidentiality of their PIN (Personal Identification Number) or password that has been created or determined. Kaya is not responsible for any losses caused by the Customer's negligence in protecting the confidentiality of their PIN or password.

IV.       SECURITY OF PERSONAL DATA

Kaya will protect all Personal Information obtained in accordance with the standards and provisions of applicable laws and regulations as well as this Privacy Policy. This protection will be carried out to the best of our ability using reasonable and adequate security devices. The Personal Information that the Customer provides to third parties outside of the Partners, who may misuse such personal data, is beyond Kaya's responsibility and control. Kaya will make reasonable efforts to prevent unauthorized access to the Customer's Personal Information by unauthorized parties.

V.         OBLIGATION TO DISCLOSE PERSONAL DATA

Kaya will only disclose and provide the Customer's Personal Information if:

• Kaya has obtained prior consent from the Customer or has received written instructions from the Customer.

• If the Customer's data is requested by authorities such as the attorney general, police, Pusat Pelaporan dan Analisis Transaksi Keuangan (PPATK), Otoritas Jasa Keuangan (OJK). Kaya may also provide data to authorities not listed above as long as those authorities have legal authority, and/or Kaya has received a court order to disclose the Customer's Personal Information held by Kaya.

• If required by applicable laws and regulations to be disclosed to a specific party or to the public.

VI.       STORAGE AND DESTRUCTION OF PERSONAL INFORMATION

Kaya has the right to store the Customer's Personal Information for the duration specified by applicable laws and regulations to meet the various purposes outlined in this privacy policy, which may be adjusted from time to time if permitted or required by applicable laws and/or relevant authorities.

Kaya allows Customers to modify and/or delete data stored by Kaya, provided that Kaya is not required to retain such data in accordance with applicable laws.

VII.     LOCATION WHERE WE STORE USER PERSONAL INFORMATION

Kaya will collect the Customer's Personal Information to be stored, transferred to, or processed by service providers from Partners. With reasonable methods and efforts, Kaya will ensure that all Partners provide a level of protection that is equivalent to or no less stringent than the standards that Kaya applies in this Privacy Policy.

VIII.   COOKIES

To improve service and products, Kaya implements the use of Cookies to provide Customers with a unique and personalized experience on the Kaya App. Cookies are small text files stored on the Customer's device that provide Kaya with information related to the Customer's online use of the Kaya App, which is used to help Kaya customize the Customer's experience and make the Kaya App more user-friendly.

IX.       MARKETING AND PROMOTIONAL MATERIALS

If the Customer consents to it, Kaya may provide the Customer with direct marketing materials in the form of advertisements, promotions through push notifications, in-app messages, POS, mobile calls, SMS, chat platforms, social media, email, and/or mailing lists.

The Customer has the right to opt-out of receiving marketing materials at any time by clicking on the "unsubscribe" link provided in the mailing list (app and social media). However, the Customer may still receive non-promotional messages even if they have opted out of receiving marketing materials.

X.         PARTNER PLATFORMS

In conducting its business, Kaya will collaborate with Partners. It is possible that the Customer will find links to platforms managed or controlled by these Partners within the Kaya App. Kaya has no authority or obligation and is not responsible for these platforms, as well as all operational matters such as the collection, use, safeguarding, sharing, or disclosure of data and information by these third parties. For more information, Kaya strongly encourages Customers to review the privacy policies of these Partners first.

By agreeing to this Privacy Policy, the Customer also agrees to comply with all terms of use, privacy policies, and other agreements established and required by Partners in relation to or when using the services available in the Kaya App, as a result of collaboration with the relevant Partners.

XI.       CHANGES TO THE PRIVACY POLICY

This Privacy Policy may change from time to time, either periodically or in its entirety by Kaya. These changes may be made without prior notice to the Customer, and the Customer agrees to any such changes.

XII.     CONTACT US

If the Customer wishes to contact us, they may do so through the following contact details:

Email: care@investasikaya.co.id
WhatsApp: 081818777708