Privacy Policy | Bali 99 Tours & Travel

1. Introduction

Bali 99 Tours & Travel (“Bali 99”, “we”, “us” or “our”), a brand of PT Kreasi Langit Sembilan, respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, request a quotation, make a booking, communicate with us or use our travel services.

This policy is intended to support compliance with applicable Indonesian personal data protection requirements, including Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection.

2. Information We Collect

Identity and contact information such as name, email address, telephone/WhatsApp number and nationality.
Travel and booking information such as travel dates, destinations, passenger details, accommodation information and special service requests.
Transaction information such as invoice details, payment status and booking reference. Full payment-card credentials are handled by the authorized payment gateway and are not intentionally stored by Bali 99.
Technical information such as browser, device, IP address, website activity and security logs where collected through normal website operation, analytics or security tools.

3. How We Use Personal Data

To respond to inquiries and prepare quotations.
To process, confirm and administer bookings.
To arrange tours, transportation, accommodation, activities and related supplier services.
To process payments, refunds and transaction reconciliation through authorized payment service providers.
To communicate booking updates, operational notices and customer support information.
To prevent fraud, misuse, unauthorized transactions and security incidents.
To comply with legal, accounting, tax and regulatory obligations.
To improve our website, products and customer experience, subject to applicable law.

4. Legal Basis and Consent

Depending on the circumstances, personal data may be processed because it is necessary to perform a contract or take steps at the customer's request, comply with legal obligations, pursue legitimate business interests, protect security and rights, or because the customer has provided consent where consent is required.

5. Payment Information

When you pay by Visa or Mastercard, payment information may be collected and processed directly by our authorized payment gateway. We do not request or intentionally retain your full card number or CVV/CVC through ordinary email, WhatsApp or website forms. Customers should never send complete card credentials through chat or email.

6. Sharing of Personal Data

We may share relevant information where necessary with trusted service providers and business partners, including guides, drivers, hotels, activity operators, transportation providers, payment processors, technology providers and professional advisers. We require appropriate handling of personal information and only disclose information reasonably necessary for the relevant service or legal purpose.

7. International Transfers

Some technology, payment or service providers may process information outside Indonesia. Where applicable, we will take reasonable steps required by applicable law to ensure appropriate safeguards for personal data.

8. Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, misuse, loss or destruction. No internet transmission or electronic storage system can be guaranteed to be completely secure.

9. Data Retention

We retain personal data only for as long as reasonably necessary for booking administration, customer support, accounting, legal, tax, dispute-resolution and security requirements. When data is no longer required, it will be deleted or securely disposed of where appropriate and permitted by applicable law.

10. Your Rights

Subject to applicable law and its conditions, you may have rights relating to access to your personal data, correction of inaccurate information, withdrawal of consent, restriction or objection to certain processing, deletion where legally available, and other rights provided by applicable data-protection law.

11. Cookies and Similar Technologies

Our website may use cookies or similar technologies for essential functionality, preferences, analytics and security. You may adjust browser settings to control cookies, although disabling certain cookies may affect website functionality.

12. Third-Party Websites

Our website may contain links to third-party websites, social media platforms, payment pages or other services. Their privacy practices are governed by their own policies. We encourage customers to review those policies before submitting personal information.

13. Children's Information

Our website is intended for general travel customers and is not directed specifically to children. Where a booking involves minors, the relevant parent, guardian or authorized adult should provide the required information and ensure that it is appropriate to share.

14. Contact and Privacy Requests

For privacy questions or requests concerning your personal data, contact:
Bali 99 Tours & Travel
A Brand of PT Kreasi Langit Sembilan
Jalan Tukad Banyusari GG/VII No 5, Panjer, Denpasar Selatan, Denpasar, Bali, Indonesia 80225
Email: bali99explorer@gmail.com
WhatsApp: +62 813-5380-5083

15. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal requirements or business practices change. The latest version will be published on this page.