Last Updated: 24 April 2026
This Privacy Policy is issued as a form of commitment by PT BPR Cerdas to protect the Personal Data of users of the Cerdas Cash E-Wallet service, in compliance with Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection (“PDP Law”) and applicable regulations issued by the Financial Services Authority (Otoritas Jasa Keuangan / “OJK”).
By registering for and using the Cerdas Cash E-Wallet, the User acknowledges and agrees to the collection, processing, storage, and disclosure of Personal Data as described in this Privacy Policy.
1. Definitions
“Personal Data” means any data concerning an identified or identifiable individual, whether directly or indirectly, in accordance with the PDP Law.
“User” means any individual who registers for and uses the Cerdas Cash E-Wallet service.
“Processing” means any activity performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
2. Principles of Personal Data Protection
PT BPR Cerdas processes Personal Data based on the following principles:
a. Lawfulness, fairness, and transparency;
b. Purpose limitation;
c. Data accuracy and relevance;
d. Data security and confidentiality; and
e. Accountability.
3. Types of Personal Data Collected
3.1 General Personal Data
- Full name;
- National Identification Number (NIK);
- Place and date of birth;
- Residential address;
- Telephone number and email address.
3.2 Specific and Sensitive Personal Data
- Biometric data, including facial images for electronic Know Your Customer (e-KYC) purposes;
- Copies of official identification documents.
3.3 Financial Data
- E-wallet account and/or bank account information;
- Balance and transaction history;
- Records of top-up, transfer, and payment transactions.
3.4 Technical Data
- Internet Protocol (IP) address;
- Device information and operating system;
- Application activity logs.
4. Purpose of Personal Data Processing
Personal Data is processed for the following purposes:
a. Customer identification, verification, and due diligence (KYC and CDD);
b. Account registration and management;
c. Processing of financial transactions;
d. Prevention of fraud, money laundering, and terrorism financing (AML/CFT);
e. System security, risk management, and service improvement;
f. Compliance with legal and regulatory obligations; and
g. Handling user inquiries and complaints.
5. Legal Basis for Processing
PT BPR Cerdas processes Personal Data based on one or more of the following legal grounds:
a. The User’s explicit consent;
b. Performance of a contract between the User and PT BPR Cerdas;
c. Compliance with legal and regulatory obligations;
d. Legitimate interests of PT BPR Cerdas in accordance with applicable laws.
6. Data Storage and Security
PT BPR Cerdas implements appropriate administrative, technical, and organizational measures to protect Personal Data against unauthorized access, misuse, alteration, or disclosure, in accordance with banking standards and OJK regulations.
Personal Data is retained only for as long as necessary to fulfill the purposes of processing and/or as required by applicable laws and regulations.
7. Disclosure of Personal Data
Personal Data may be disclosed on a limited basis to:
a. Regulatory authorities, including OJK, Bank Indonesia, PPATK, or other authorized government agencies;
b. Third-party service providers supporting the operation of Cerdas Cash, subject to confidentiality and data protection obligations.
PT BPR Cerdas does not sell or commercially exploit Personal Data.
8. Rights of Data Subjects
In accordance with the PDP Law, Users have the right to:
a. Obtain information regarding the processing of their Personal Data;
b. Access and obtain copies of their Personal Data;
c. Request correction or updating of inaccurate Personal Data;
d. Withdraw consent for data processing, subject to applicable consequences;
e. Request deletion or destruction of Personal Data in accordance with the law;
f. Object to certain processing activities as permitted by law.
9. Personal Data Breach
In the event of a Personal Data breach, PT BPR Cerdas shall take necessary mitigation measures and notify the User and relevant authorities in accordance with applicable laws and regulations.
10. Amendments to This Privacy Policy
PT BPR Cerdas may amend this Privacy Policy from time to time to reflect changes in regulations or services. Any amendments will be communicated through official channels.
11. Contact Information
For questions, requests, or complaints regarding Personal Data protection, please contact:
PT BPR Cerdas
Address: Jalan Raya Batubulan No. 11, Batubulan
Email: info@ptbprcerdas.com
Telephone: 0361296456
