Privacy Policy

A. DEFINITIONS

Unless otherwise stated, the following terms shall have the meanings set out below:

1. Personal Data means any data about an identified or identifiable individual, either directly or indirectly, through electronic or non-electronic systems.
2. General Personal Data means Personal Data of a general nature, including but not limited to: full name, mother’s maiden name, gender, address, place and date of birth, telephone number, email address, occupation, IP address, geolocation data, device identifiers, photographs, identification numbers issued by competent authorities (e.g. KTP, SIM, Passport), citizenship, and signature.
3. Specific Personal Data means Personal Data that requires a higher level of protection under applicable laws, including but not limited to financial data, securities and investment data, biometric data used for identification and verification purposes, risk profile data, transaction confirmations, and periodic reports.
4. Personal Data Processing means any activity involving Personal Data, including collection, acquisition, recording, storage, processing, analysis, correction, updating, disclosure, transfer, dissemination, deletion, or destruction.
5. Services means all products, services, platforms, applications, websites, systems, and communication channels provided or operated by Mirae Asset.
6. Third Party means any party that has a legal or business relationship with Mirae Asset, including affiliates, service providers, vendors, outsourcing partners, and other parties appointed by Mirae Asset.

B. COLLECTION OF PERSONAL DATA

Mirae Asset collects Personal Data in a lawful, fair, and transparent manner for legitimate purposes related to the provision of its Services.

Data Collected Directly from You

Personal Data may be collected when You, inter alia:

1. Register, open, or manage an account on HOTS/Neo HOTS, M-Stock, NAVI, or other Mirae Asset registered platforms;
2. Contact Mirae Asset through branch offices, call centers, email, social media, or other communication channels;
3. Use Mirae Asset’s Services, including transaction activities;
4. Participate in surveys, webinars, seminars, or promotional activities;
5. Submit Personal Data for any other legitimate purpose.

Data Collected from Third Parties

Mirae Asset may collect Personal Data from third parties, including:

1. Authorized representatives or parties acting on Your behalf;
2. Government institutions, regulators, and financial authorities (including OJK, Dukcapil, SLIK);
3. Self-Regulatory Organizations (IDX, KPEI, KSEI);
4. Other lawful public or commercial sources, in accordance with applicable laws.

C. TYPES OF PERSONAL DATA PROCESSED

General Personal Data

Including identification data, contact information, family records, education, and employment data.

Specific Personal Data

Including financial data, securities account data, investment preferences, transaction data, biometric data used for regulatory identification (e.g. KYC), digital activity data, interaction recordings, and processed or derived data (profiling).

D. PURPOSE OF PERSONAL DATA PROCESSING

Mirae Asset processes Personal Data for legitimate purposes, including but not limited to:

1. Customer identification, onboarding, verification, and account management;
2. Provision, administration, and improvement of Services;
3. Implementation of KYC (Know Your Customer), CDD (Customer Due Diligence), AML-CMT (Anti Money Laundring-Countering the Financing of Terrorism), and CFTP (Countering the Financing of Proliferation of Weapons of Mass Destruction) obligations;
4. Fulfillment of regulatory, supervisory, and reporting obligations to OJK, SROs, and other authorities;
5. System security, fraud prevention, operational continuity, and risk management;
6. Communication regarding Services, system updates, and regulatory notices;
7. Marketing and promotional activities based on separate and explicit consent, where required.

E. LEGAL BASIS FOR PROCESSING

Personal Data Processing is conducted based on one or more of the following lawful bases under the UU PDP:

1. Explicit Consent from the Personal Data Subject;
2. Performance of a contract or pre-contractual measures;
3. Compliance with legal obligations;
4. Fulfillment of legitimate interests provided by such interests do not override the rights of the Personal Data Subject.

F. DISCLOSURE OF PERSONAL DATA

Mirae Asset does not sell Personal Data. Personal Data may be disclosed to Third Parties only where:

1. Required by laws, regulations, or lawful requests from authorities;
2. Necessary for the provision of Services (including IT, cloud, data processing, customer support);
3. Required for regulatory compliance in the capital market ecosystem;
4. Based on Your explicit consent.

All Third Parties are contractually bound to protect Personal Data and process it only for authorized purposes.

G. RIGHTS OF PERSONAL DATA SUBJECTS

In accordance with the UU PDP, You have the right to:

1. Obtain information regarding the processing of Your Personal Data;
2. Access and obtain a copy of Your Personal Data;
3. Correct, update, or complete inaccurate Personal Data;
4. Withdraw consent for processing based on consent;
5. Request deletion or destruction of Personal Data, subject to legal retention obligations;
6. Submit complaints regarding Personal Data protection.

Requests may be submitted through the contact details provided in this Privacy Policy.

H. DATA RETENTION AND DELETION

1. Personal Data is retained only for as long as necessary to fulfill processing purposes and legal obligations.
2. Certain data may be retained after account termination in accordance with capital market regulations and statutory retention requirements.
3. Personal Data will be deleted or anonymized when no longer required, unless retention is mandated by law.

I. DATA SECURITY

Mirae Asset implements administrative, technical, and organizational security measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.

J. MERGER, ACQUISITION, OR CORPORATE ACTION

In the event of a merger, acquisition, consolidation, spin-off, or liquidation, Personal Data may be transferred to the successor entity, subject to notification and continued protection in accordance with applicable laws.

K. COOKIES AND TRACKING TECHNOLOGIES

Mirae Asset’s platforms may use cookies or similar technologies to enhance user experience and system performance. Users may control cookie preferences through browser or device settings.

L. CHANGES TO THIS PRIVACY POLICY

Mirae Asset may update this Privacy Policy from time to time to reflect changes in laws, regulations, or data processing practices. Customers are encouraged to review this Privacy Policy periodically.

M. AMENDMENT HISTORY

N. CONTACT INFORMATION

For questions, complaints, or the exercise of Your rights under the UU PDP, please contact:

Customer Care

PT Mirae Asset Sekuritas Indonesia

📞 021-150350

📱 WhatsApp: 0811-1900-9000

📧 Email: cs@miraeasset.co.id

🕘 Working Days: Monday–Friday (08.00–17.00 WIB)