Effective 18 July 2026. This policy explains what personal data BOGO collects, why it is used, how it is protected, and the choices available to you.
BOGO.place is responsible for personal data processed to operate the platform. Privacy questions, correction requests, objections, or complaints may be submitted through the contact page so the request can be verified and routed securely.
Depending on your relationship with BOGO, we may collect your name, email, mobile and WhatsApp number, birth date, city, required member profile photograph, venue and branch information, verification records, payment references, membership history, redemption records, uploaded bills or media, support messages, device information, security logs, and consent records.
With browser or device permission, registration forms may use coordinates to suggest a city, address, district, postal code, latitude, and longitude. Suggested values remain editable. Coordinates are sent to the configured mapping provider to obtain an address and are cached to reduce repeated requests. You may deny permission and enter the information manually.
Data is used to create and verify accounts, provide membership and venue services, process payments and redemptions, display approved venues, support users, send service notices, prevent fraud, secure the platform, keep required records, improve operations, and comply with law. Optional marketing is used only where consent or another lawful basis permits it.
Relevant identity and profile-photo information may be shown to authorized venue staff to confirm a member during redemption. Data may also be shared with payment, communications, hosting, security, mapping, analytics, and professional service providers; approved venue partners where necessary; and authorities where legally required. We do not sell personal data.
Data is retained only as long as reasonably needed for the stated purpose, contractual administration, security, dispute handling, tax or accounting duties, and legal claims. Retention periods vary by record type. Data that is no longer required is deleted, anonymized, or securely archived.
BOGO uses access controls, password hashing, verification, audit records, private media storage, rate limits, backups, and other safeguards appropriate to the risk. No system is completely secure. Suspected incidents are assessed and notifications are made where required by applicable law.
Some service providers may process data outside Indonesia. Where this occurs, BOGO will assess the provider and use contractual or other safeguards appropriate to applicable data-protection requirements.
Subject to applicable law and verification, you may request access, a copy, correction, completion, deletion, restriction, withdrawal of consent, or information about processing. Some requests may be limited where records must be retained for fraud prevention, contractual, tax, security, or legal reasons.
BOGO may use essential cookies and local storage for sessions, language, security, and user preferences. Optional analytics or marketing technologies will be described and controlled where consent is required. Browser settings may block cookies, but essential functions may then stop working.
BOGO is not intended for children and does not knowingly create accounts for people who cannot legally use the relevant service. This policy may be updated as services or legal requirements change. Material changes will be communicated through the platform or direct notice where appropriate.