Privacy Policy

Effective 25 October 2026

This policy explains what personal data Ersatix (ersatix.com) collects, why, with whom it is shared, and your rights over that data, in line with Indonesian Law No. 27 of 2022 on Personal Data Protection.

1. Who we are

Ersatix is an event ticketing and gate validation platform operated by PT. SAMBILAN GROUP INVESTAMA. Ersatix sells tickets on behalf of event organizers. For questions about personal data, contact [email protected].

2. Data we collect

Buyers: the name, email address and mobile number you enter when buying; your order and ticket history; verification codes sent to your email.

If you sign in with Google: your name, email address and Google account ID. We never receive your Google password.

Event organizers: organization name, contact details and bank account details for payouts. Gate officers: name, email and ticket scan records.

Technical data: IP address, device/browser type and activity logs for security, fraud prevention and service improvement.

Payments are processed by payment providers. We do not store your card number or PIN.

3. How we use your data

To process orders, issue e-tickets and validate tickets at the event gate.

To send transactional emails: sign-in codes, e-tickets, order status, refunds, event reminders, and notices of cancellation or rescheduling.

To prevent fraud and scalping (for example, ticket limits per buyer and a fair queue).

For customer service, payouts to organizers, and legal obligations such as transaction records and local entertainment tax (PBJT).

We do not sell your personal data and do not use it for third-party advertising.

4. Who we share data with

The organizer of the event you bought tickets for: your name and contact details as an attendee of that event, for running the event.

Service providers that help us: payment providers and banks, email delivery services, and server and network providers. They only process data on our instructions.

Authorities or government agencies, when required by law.

5. Data security

Email addresses and mobile numbers are stored encrypted. All connections use HTTPS. Staff access is limited by role and every admin action is logged. Database backups are encrypted.

6. How long we keep data

Account data is kept while your account is active. Transaction records are kept for as long as regulations require (including tax rules), then deleted or anonymized.

7. Your rights

You have the right to access and correct your data, delete your account from the Account menu, withdraw consent, and object to processing. Send requests to [email protected]; we respond within 3 × 24 business hours.

8. Cookies

We use cookies needed for the site to work: sign-in session, form security, and your theme and language choice. We do not use advertising cookies.

9. Changes to this policy

This policy may be updated. The latest version, with its effective date, is always available on this page.