Policy Fast Rupiah Privacy

Final updated in August 2026

Method of collecting data

We can obtaining Personal Data from you in person direct and No direct through your interactions with Our Platform or from source legitimate external parties . Data collection is carried out For fulfil need operational service as well as obligation applicable law .

Following is ways we collect Personal Data :

• 1. Information You Provide In a way Direct moment registration and/ or using the Platform;
• 2. Information Collected Automatically by Platforms such as Technical Information and Metadata history activity usage , as well as information transaction when you do activity transaction finance through the Platform.
• 3. Information Obtained from Party The third legitimate one is related with provision Our services , for example provider verification identity , credit bureau , payment gateway, provider digital identity and signs digital hand , partner marketing , with still subject to the provisions applicable laws and your consent if required .
• 4. Data Obtained from Agency Government and Reporting Systems .
  We can get results verification , matching , validation , or updating Personal Data from agency population and registration civil as well as parties who are legitimate provide access on population data . We can also obtain data, results validation , information , or response from OJK through System Reporting and/ or other systems managed by the OJK, as long as required For implementation of services, fulfillment obligation regulation , supervision , management risks , and other purposes permitted by law .

Legal Basis for Data Processing

We process your Personal Data based on One or more base law following , depending on the context and purpose data collection :

• 1. Implementation Service Agreement
  Processing done For operate Our obligations to you as Users , as arranged in Terms & Conditions , implementation Service Agreement , as well as document other relevant matters ;
• 2. Legitimate Interests
  In a number of situation , We can processing data on base interest legitimate RupiahCepat or party the third legitimate , as long as matter the No put aside rights your basis as Data Subject and accordingly with provision applicable law from time to time ;
• 3. Your Consent
  For goals certain things that need agreement , we will request permission to you first first . You have the right For interesting return agreement the When only , with still subject to the provisions applicable regulation ;
• 4. Compliance to Legal Obligations
  We can also processing Personal Data For fulfil obligation laws and regulations , including obligation reporting , prevention fraud , and solicitation from legitimate authority .

Purpose of Data Processing

Personal data will used For various legitimate purposes among others:

• 1. Processing Service
  For facilitate the registration and verification process identity , service request , matching Funders with Fund Recipient , assessment score credit Users , analysis risk , processing disbursement , settlement , and activities billing .
• 2. Service Customer
  For facilitating Service units Customer to Users and functions processing questions , requests , complaints , handling complaints , providing help technical , as well as inform every changes to the Platform or Our services .
• 3. Activity Marketing ( Based on Agreement )
  For send information , promotions and updates about Our relevant services with your interests and preferences .
• 4. Analysis and Improvement Platform Services and Services
  For support operational Platform technical , understanding patterns and preferences use Users , as well as increase experience Users in a way comprehensive .
• 5. Compliance to Applicable Regulations and Laws
  For fulfil condition regulations , including verification and assessment processes mandatory risk in frame prevention money laundering and financing terrorism , and obligations other based on applicable regulations and laws from time to time .
• 6. Request from Authorized Authority / Agency /Institution
  For respond request from authorized authority / agency / institution like Financial Services Authority (OJK), court , or authorized regulator other in accordance with applicable law .
• 7. Detection and Prevention Abuse
  For detect , monitor , and investigate suspicious activity or potential violate law , as well as take action corrective to ensure security .
• 8. Population Data Verification and Validation
  We process Personal Data For do matching , verification , validation , and/ or updating identity data and population data Users through Directorate General Population and Registration Civil Service of the Ministry of Home Affairs, Population and Registration Service Authorized civil servants , and/ or parties who are legitimate get authority For provide access utilization of population data . Processing the done For ensure truth and accuracy identity Users , carry out identification and verification processes Users , prevent fraud or abuse identity , do evaluation risks , as well as fulfil obligation applicable laws and regulatory provisions .
• 9. Transaction Data Reporting Funding
  We process Personal Data and Transaction Data Funding For fulfil obligation data submission and reporting to Financial Services Authority through system information managed by the Financial Services Authority , including System Fintech Lending Reporting and/ or Data Center (“Pusdafil”). Processing the done For needs supervision , monitoring and validation of transaction data funding , assessment risk , provision service information in the field finance , fulfillment data requests by the Financial Services Authority , as well as implementation other obligations based on regulation legislation .
• 10. We can also use information from applications installed on your device to needs analysis risk , credit limit measurement , or prevention abuse account . Information the will sent through safe mechanism to Our internal system .

Disclosure of Personal Data to Party Third

RupiahCepat committed For guard confidentiality and security of your Personal Data . We guarantee No There is disclosure , sale , transfer , distribution and/ or lending your Personal Data to party wherever For without base valid law .

However , in connection with with provision Our Services and Compliance to applicable regulations , we can share your Personal Data to party third certain in coverage limited and for legitimate purposes , including For organize Service , do verification identity , maintaining integrity and accuracy of data, preventing fraud , as well as fulfil obligation laws and regulatory provisions . RupiahCepat can and/ or must convey , reveal , match , request , receive , and/ or give access regarding Personal Data and Transaction Data Funding to parties following :

• 1. Funders and Fund Recipients
  For allows interaction between parties in ecosystem funding in accordance provision agreement , including for the disbursement and settlement process loan .
• 2. Partner or Provider Service Party Third
  In frame provide safe , reliable and compliant services regulations , RupiahCepat can Work The same with party the third one who acts as provider service above and help in operate functions following , including However No limited to:
  • • Verification identity , inspection Number Parent Population (NIK) and validation document Granted users to Us;
  • • Data storage and processing system information based Cloud Computing , provider service technology information ;
  • • Analysis risk , modeling evaluation credit , credit bureaus , and fraud prevention , providers sign hand electronics , telecommunications operators , insurance companies ;
  • • Service system payment , management fund accounts , and partners finance
  • • Service customers , Chatbots, and tools communication
  • • Audit, data security , and monitoring activity users

  In things said , we can give access limited of your Personal Data to partners or provider services that are contractual must subject to applicable provisions and / or Agreement Binding Personal Data Protection in a way law .

• 3. Management , Employees , and Affiliates or Subsidiaries
  If required For implementation services , merger business , internal restructuring , or objective other legitimate and appropriate strategies regulation .
• 4. FDC and/ or Official Association
  As part from obligation credit data reporting and monitoring ;
• 5. Competent Legal Authority
  We can Disclosing Personal Data on request official from legitimate authority , request law , order court , prosecutor , or agency government other based on provision legislation or For protect right or Our security .
• 6. Agency Population and Registration Civil
  RupiahCepat can convey and/ or Matching Personal Data Users with data managed by the Directorate General Population and Registration Civil Service of the Ministry of Home Affairs, Population and Registration Service Authorized civil servants , and/ or parties who are legitimate appointed or given right access against population data . Data submitted limited to the required data For do verification , validation , matching , and/ or update identity Users , including Number Parent Population , name, date birth , address , and/ or identity data or document other required population in accordance applicable provision .

  RupiahCepat can receive and process results matching , verification status , and/ or information relevant population For :

  • • do identification and verification User ;
  • • ensure accuracy as well as validity of the data and documents provided ;
  • • prevent fraud , forgery , or abuse identity ;
  • • do assessment and management risk ;
  • • processing application and provision of Services; and
  • • fulfil obligation based on regulation legislation .
  • • Service utilization of NIK, population data , and e-KTP can done through Directorate General Civil Registration Department as well as population and registration units authorized civil servants in accordance room scope his authority .
• 7. Financial Services Authority and System Reporting
  RupiahCepat can and/ or must submitting Personal Data and Transaction Data Funding to Financial Services Authority through System Reporting managed by the Financial Services Authority , including the Fintech Lending Data Center or Pusdafil , according to data coverage , frequency , format, procedures , and standards security requirements set by the Financial Services Authority . The data submitted can includes identity data User , application data funding , agreement funding , disbursement , payment , settlement , position obligation , quality or funding status , as well as other required data based on provision Financial Services Authority . Submission of the data done For :
  • 8. fulfil obligation Reporting and Submission of Transaction Data Funding ;
  • 9. support implementation regulation and supervision by the Financial Services Authority ;
  • 10. do monitoring , auditing , reconciliation and validation data quality ;
  • 11. provide information in the field finance in accordance authority Financial Services Authority ;
  • 12. support management risk , protection consumers , and integrity LPBBTI industry ; and
  • 13. fulfil data request or other obligations stipulated by the Financial Services Authority and regulations legislation .

  OJK can manage , use , and/ or give access on the data that has been delivered the throughout in accordance with authority and provisions regulation applicable laws and regulations .

• 14. Personal Data Outside the Territory of the Republic of Indonesia
  In condition certain , RupiahCepat can transfer Personal Data to Personal Data Controller and/ or Personal Data Processors located outside the jurisdiction of the Republic of Indonesia as long as done in accordance with provision regulation legislation .

  In make the transfer , RupiahCepat will :

  • 1. ensure that the country where party recipient of Personal Data is at own level Equal Personal Data Protection or more tall from level Personal Data Protection applicable in Indonesia ;
  • 2. If level Personal Data Protection as referred to in letter a does not fulfilled , ensuring there is Adequate and effective protection of personal data binding , including through arrangement contractual or mechanism protection other permitted based on law ; or
  • 3. if condition as referred to in letters a and b not can fulfilled , obtained agreement from Personal Data Subject in accordance with provision regulation legislation .

  Any transfer of Personal Data to outside the territory of the Republic of Indonesia is also carried out with notice objective Data Processing , the need for Personal Data to be transferred , security of Personal Data , restrictions use and obligations party recipient of Personal Data .

• 15. Restrictions and Security Disclosure
  Every disclosure , delivery , giving access , and/ or transfer of Personal Data to other parties do in a way limited in accordance with objective Data Processing and with notice principle data minimization , accuracy , security , confidentiality , transparency , and accountability .

  In matter Disclosure of Personal Data to other parties require agreement Users based on provision regulation legislation , RupiahCepat will get agreement Users in a way written and/ or recorded as well as documenting agreement the .

  Agreement separated No required if Disclosure of Personal Data done based on obligation or exceptions that are firm allowed based on provision regulation legislation , including submission of data to regulators, authorities , agencies government , or other authorized parties .

  In Personal Data matters given to provider service or other parties who do Data Processing for or on instructions RupiahCepat , RupiahCepat will set restrictions Use of Personal Data through agreement and/ or mechanism control other parties . the No permitted use or Disclosing Personal Data For other purposes outside goals that have been determined or agreed .

Security, Storage , and Deletion of Personal Data

• 1. Security Measures
  RupiahCepat apply steps and procedures security certain For prevent access , use , modification , disclosure , or destruction of Personal Data that is not legitimate , such as firewalls, encryption , use of passwords and / or OTP (One Time Password), restrictions access , as well as internal procedures that follow ISO/IEC 27001 standard . Our team also regularly performs monitoring and evaluation risk on systems that handle data.
• 2. Storage and Potential Overseas Processing
  Your Personal Data may saved or processed by partners provider services that we designate , including those located outside the territory of the Republic of Indonesia. In matter Thus , RupiahCepat will ensure that party third the subject to commitment equal data protection in accordance provision applicable law , both through agreement contractual and mechanism security addition as arranged in the PDP Law.
• 3. Retention Period and Data Deletion
  We store Personal Data during required For fulfil the objectives outlined in Policy Privacy this . After you don't Again using Our Platform, Personal Data will saved at least for 5 (five) years required by law .

  After that period , we will delete or anonymize your data, if :

  • • data no Again required For needs processing ; and/ or
  • • No required For saved based on provision law

  However , you can submit application Deletion of Personal Data When just with method submit request to our Customer Service. We can limit or refuse deletion of Personal Data ( account ) in matter Still there is obligation contractual Services that have not been provided fulfilled .

  Please note that Deletion of Personal Data can impact on closure account and not influence validity processing and not cancel obligation law or the obligation that arises previously ( if Still There is ).

• 4. Restrictions Responsibility
  Although RupiahCepat has do effort best For To protect your Personal Data , please understood that No There is system data transmission via the internet or method storage fully electronic free risk . Therefore that , every Disclosure of Personal Data by Users in a way direct to other parties outside system we are officially not quite enough answer personal Users the .

Cookies and Technology Tracking

When you access or using Our Platform, We can uses Cookies and technology tracking similar For keep preference Users , We use essential Cookies For ensure function Platform base . Currently We do not using tracking cookies or analytic from party third other .

Cookies also help us in recognize you when return to the Platform, as well as allows us to improve your experience in overall .

you can manage your Cookie preferences through browser settings on your device ( if available ).

Personal Data Subject Rights

• 1. Data Accuracy
  RupiahCepat always make an effort guard the accuracy and completeness of the Personal Data that We process. Users appealed to For in a way active to inform to us if there is changes , inaccuracies , or incompleteness in the data that has been given .
• 2. Rights of Access and Correction
  Users entitled For access and/ or submit request correct regarding Personal Data stored by RupiahCepat . For needs said , User must convey request written and given proof adequate identity . We have the right For reject request , okay as or even all of it in accordance with applicable law , if :
  • • Request the No relevant , not proportional , or No in accordance with obligation Our laws ;
  • • Related data another individual ; or
  • • Request No can verified in a way worthy .

  Request We will process it accordingly with term reasonable time as arranged in provision regulation legislation .

• 3. Withdrawal Agreement
  Personal Data processed based on your consent , you have the right For interesting agreement the When just with submit request via Customer Service ( or channel Our other official ones ). However , it is necessary noticed that :
  • • Withdrawal agreement No impact on validity processing previously done before agreement drawn ;
  • • Personal Data required For implementation Agreement Services in progress walk so withdrawal agreement can influence continuation Service the or Possible Users No own option For interesting agreement on processing of Personal Data Because is an integral part of fulfillment implementation Agreement Service the ;
  • • RupiahCepat will stop processing of your Personal Data in accordance with with room the requested scope , unless if we are required save it For objective law or regulation .

  Implementation right Personal Data Subject can restricted or excluded if there is permissible basis based on provision regulation legislation .

Announcement Personal Data Breach

If it happens threatening data breach security of your Personal Data , and regulations legislation mandatory , RupiahCepat will notify you and/ or competent authority without unnecessary delays reasonable, no later than 3x24 hours since known occurrence incident the .

Announcement will includes :

• • Explanation short about characteristic data breach
• • of Personal Data affected
• • Estimation impact potential for Users
• • Steps mitigation and recovery that has been or We will take it

We will take all actions that required For limit impact violation the as well as prevent incident similar later day . If needed , we can also do further internal investigation and work The same with party authorized in accordance provision law .

Limitation of Liability

With use Service RupiahCepat , User agree For release and set free RupiahCepat ( including affiliates , directors , and employees ) of claims , demands , or losses incurred in a way direct or No direct consequence :

• 1. Lost or misuse of Personal Data that occurs Because interception , access No valid , or processing by third parties third others outside control RupiahCepat ;
• 2. Leakage or misuse of Personal Data caused by acts , omissions , or carelessness Users Alone ;
• 3. Risks that originate from device , application , network , or third party internet services third used by the User For access or manage account ;
• 4. User Decision For Disclosing Personal Data in a way open or to other parties without control or instructions from RupiahCepat .

RupiahCepat No responsible answer on loss or abuse accounts resulting from negligence or action Users Alone .

Marketing and Communication

you can choose For No accept communication marketing from RupiahCepat with Contact our Customer Service via email : cs@rupiahcepat.co.id and number telephone : (021) 30006000.

However so , please noticed that even if you choose go out from communication marketing , We remain can send notification of a nature important and related Services and Platforms, such as information transactions , updates account , or policy applicable operations .

Change on Policy Privacy

Policy Privacy This can updated from time to time For reflect change in practice Data Processing , regulations legislation , or Our internal policies . Every material changes will occur informed through the official platform RupiahCepat .

We encourage Users For review Policy Privacy This in a way periodically to keep know how we manage and protect your Personal Data .

Delivery Complaint

• 1. If you have concerns , questions , or object related with How we process or handle your Personal Data , you can contact Customer Service via email: cs@rupiahcepat.co.id and number telephone : (021) 30006000, accompanied by with sufficient information For identify yourself and explain complaint the .
• 2. We will investigate every complaint in a way reasonable and effortful give response in term decent time after accept request the . If needed , we can also Work The same with competent authority For finish problem the .

Compliance to Regulation Applicable Legislation

Every things that have not been done or No in a way explicit arranged in Policy Privacy This will follow provision laws and regulations applicable in the jurisdiction of the Republic of Indonesia. RupiahCepat committed For comply all over obligation relevant laws and subject to supervision authority authorized For ensure protection rights Users in a way full .

If there is mismatch between content Policy This with regulation applicable laws and regulations, then provision in regulation the will applicable and prioritized.

Merger

As addition on Policy Privacy these things the following also applies to Services and Platforms and are considered as One unity :

• 1. General Terms and Conditions ;
• 2. Terms and Conditions in Agreement Loans and Agreements Funding ;
• 3. Agreement other with us who will arrange about Your Use of the Services.