Dukkung
HomeLegalPrivacy Policy

Privacy Policy

How Dukkung collects, processes, stores, and protects your personal data in compliance with Indonesian UU PDP and global privacy standards.

Last updated: August 2026•Applies to: Indonesian & Global Users

1. Overview and Commitment

Dukkung ("we", "us", or "our") values the privacy of every creator, supporter, and visitor. This Privacy Policy explains our practices regarding personal data collection, use, disclosure, and protection in accordance with Law No. 27/2022 on Personal Data Protection of the Republic of Indonesia (UU PDP) and general international privacy frameworks.

2. Information We Collect

We collect information depending on how you interact with our platform:

A. Information Provided by Creators

  • Account Registration: Username, email address, display name, profile avatar, and biographical info.
  • Financial & Payout Data: Bank account name, bank account number, bank name, Indonesian tax ID (NPWP / NIK where required), and e-wallet identifiers.
  • Content & Products: Uploaded articles, digital asset files, product descriptions, cover artwork, and pricing configurations.

B. Information Provided by Supporters and Buyers

  • Donations & Purchases: Supporter nickname / handle, optional email address for receipt delivery, donor message, and media share URLs (YouTube / TikTok links).
  • Order Fulfillment: Shipping recipient name, phone number, and physical mailing address (for physical merchandise orders only).

C. Automated and Technical Information

  • Device IP address, browser user agent, operating system, and system timestamp.
  • Session tokens, authentication cookies, and theme display preferences.
  • Aggregated analytics such as page view frequency and anonymized conversion funnels.

3. Purpose of Data Processing

We use your personal data exclusively for lawful purposes:

  • To process transactions, generate cashier slips, and disburse creator payouts via Indonesian banking partners.
  • To authenticate accounts, prevent fraudulent payments, and enforce platform security.
  • To deliver automated digital downloads (presets, e-books, templates) to buyer receipts and email addresses.
  • To broadcast real-time live stream overlay alerts (donor name, message, amount) to creator OBS browser sources.
  • To comply with regulatory obligations under Indonesian financial, taxation, and electronic commerce laws.

4. Data Sharing and Third-Party Processors

We do not sell, rent, or monetize personal data to advertising brokers. We only share necessary data with trusted service providers under strict confidentiality agreements:

  • Payment Gateway Partners: Bank Indonesia licensed payment switches and aggregators (e.g., Midtrans, Xendit, QRIS acquirers) to process transactions.
  • Infrastructure & Storage Providers: Cloud storage providers (e.g., Cloudflare R2 / D1 / Workers) for encrypted file hosting.
  • Law Enforcement & Regulators: When strictly required by valid subpoena, court order, or formal Indonesian legal process.

5. Data Retention and Security

We implement industry-standard technical safeguards, including TLS 1.3 in-transit encryption, bcrypt/Argon2 password hashing, strict database access controls, and rate limiting. Financial transaction logs are retained for a minimum of 5 years to comply with statutory accounting and tax regulations.

6. Your Rights Under UU PDP

Under Indonesian Personal Data Protection law, you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction or updating of inaccurate personal data.
  • Request deletion or anonymization of your account data (subject to statutory financial retention requirements).
  • Withdraw consent for optional non-essential marketing communications.

7. Privacy Inquiries and Data Protection Officer

To exercise your data privacy rights or submit a privacy complaint, please contact our Data Protection Office at privacy@dukkung.com.