Privacy Policy

Effective Date: June 1, 2026

1. Introduction

Welcome to MDP MERCHANT. We are fully committed to protecting your privacy and safeguarding your personal data. This Privacy Policy outlines our practices regarding the collection, use, disclosure, processing, and security of your information when you use our official website available at https://mdppulsa.my.id and our mobile application for Android platforms.

2. Acceptance of Policy

By downloading, installing, registering, accessing, or otherwise using the MDP MERCHANT application or website, you explicitly acknowledge that you have read, understood, and agreed to be bound by all the terms and conditions outlined in this Privacy Policy. If you do not agree with any part of this policy, you must immediately cease all access and use of our application and website.

3. Information We Collect

To provide reliable payment processing, merchant onboarding, and comply with regulatory requirements, we collect the following types of information:

A. Personal Identification Information

  • Full Name: To legally identify the user and account holder.
  • Email Address: For account verification, transaction notifications, and official communications.
  • Phone Number: Used as a unique identifier for account security, multi-factor authentication, and critical updates.
  • Password: Collected during registration and securely stored using advanced, non-reversible cryptographic encryption (hashing).

B. QRIS Merchant KYC & Verification Data

In accordance with applicable financial regulations, Know Your Customer (KYC), and anti-money laundering (AML) standards for electronic payment systems, we require comprehensive validation data, which includes:

  • National Identity Card (KTP): For formal identification and legal compliance.
  • Tax Identification Number (NPWP): Optional, processed for tax compliance or commercial merchant tier upgrades.
  • Selfie Image & Identity Verification: A photograph of the user holding their identity document to prevent identity theft and fraud.
  • Business Information: Including legal business name, category, and exact operational address.
  • Business Location Photo: Visual proof of physical business operations.
  • Bank Account Details: Bank name, account holder's name, and account number required solely for financial settlement and disbursement of transaction funds.

4. Permissions Used (Android Permissions)

The MDP MERCHANT Android application requires explicit access to specific hardware and system features. Each permission requested serves a precise, justified function to enable core features:

INTERNET
Required to establish secure communication between the application and our remote servers to process real-time transactions and load application services.
ACCESS_NETWORK_STATE
Required to detect current network connectivity status to optimize application response, manage offline states, and prevent data loss during network disruptions.
CAMERA
Required for capturing the user's identity document, facial verification (KYC processing), and scanning QR codes for payment transactions.
READ_EXTERNAL_STORAGE
Required to access and allow the user to select and upload necessary registration, business, and KYC documents from the device's storage.
WRITE_EXTERNAL_STORAGE
Required to generate and save local copies of invoices, transaction receipts, and accounting documents directly onto the user's device.
ACCESS_FINE_LOCATION
Required to access precise GPS-based location data to verify the physical location of the business entity during onboarding and to adhere to location-based risk assessments.
ACCESS_COARSE_LOCATION
Required to obtain approximate location coordinates via network or Wi-Fi data for risk management, security auditing, and localized security parameters.
ACCESS_MEDIA_LOCATION
Required to access metadata of uploaded images to verify the geographical authenticity of business location photographs during the onboarding phase.
BLUETOOTH
Required to discover, pair with, and send print commands to external thermal Bluetooth invoice printers for physical receipt printing.
FINGERPRINT / BIOMETRIC
Required to integrate with device-level biometric authentication systems, allowing secure, swift, and authorized application access and transaction verification.

5. How We Use Information

The collected information is processed solely for legitimate business operations and compliance purposes, specifically to:

  1. Verify the identity of our users and maintain security integrity.
  2. Facilitate the mandatory onboarding and activation process for the QRIS Merchant ecosystem.
  3. Provide, maintain, and execute financial transaction services, payment processing, and bank settlements.
  4. Monitor and detect fraudulent activities, unauthorized access, and other malicious conduct to enforce security protocols.
  5. Comply with statutory legal obligations, financial regulations, and administrative mandates issued by relevant government and regulatory authorities.

6. Data Sharing

We respect your privacy. We do not sell, rent, trade, or share user personal data with third parties for marketing or commercial purposes.

Data sharing is strictly restricted to essential business integration and legal requirements, limited to the following parties:

  • Authorized banking institutions and integrated payment gateways to execute fund settlements.
  • Official QRIS payment providers to register, issue, and maintain merchant payment codes.
  • Law enforcement, judiciary bodies, or regulatory authorities when compelled by a valid legal order, statute, or official regulatory framework.

All associated third parties are contractually bound to maintain strict data confidentiality, implement appropriate security measures, and are prohibited from using your data for any ancillary purposes.

7. Data Retention

We retain your personal information only for as long as your account remains active or as required to fulfill the operational requirements of the MDP MERCHANT platform. Additionally, certain transaction logs and legal identity documents may be retained for extended periods to satisfy regulatory audits, compliance laws, financial records retention statutes, and resolution of legal disputes.

8. Data Deletion

Users maintain full control over their personal data. You have the right to request the permanent deletion of your account and associated personal records:

  • Account deletion can be requested directly through the Account Settings section within the MDP MERCHANT application.
  • If you encounter technical issues or require manual data erasure, you may submit an official deletion request to our customer service channel via WhatsApp:
Customer Support (WhatsApp): 085142792660

Please note: Transaction histories, financial statements, and ledger records cannot be instantly deleted and will be securely archived for the mandatory period required under prevailing financial transparency and corporate accounting laws.

9. Security

We utilize comprehensive security mechanisms to prevent unauthorized access, disclosure, alteration, or destruction of your personal data. All network traffic between our application and servers is strictly encrypted using Hypertext Transfer Protocol Secure (HTTPS) over Secure Sockets Layer/Transport Layer Security (SSL/TLS). Internal server storage is strictly regulated, monitored, and protected behind enterprise-grade firewalls.

10. Cookies and Logging

We implement standard tracking cookies and systematic logging protocols to analyze platform performance. Collected diagnostic data—such as Internet Protocol (IP) addresses, device hardware models, operating system variants, and general application telemetry—is used collectively to enhance security, detect multi-accounting exploits, troubleshoot performance bugs, and continuously improve overall service efficiency.

11. Children Policy

MDP MERCHANT provides business-to-business payment tools intended strictly for individuals who possess full legal capacity to run commercial enterprises and enter into legally binding contracts. Our services are not intended for, nor directed towards, children under the age of 13. We do not knowingly gather information from children under 13 years of age. If we discover that such data has been unintentionally recorded, we will promptly purge it from our systems.

12. Consent

By continuing to download, register, access, or utilize the MDP MERCHANT mobile application or the official website https://mdppulsa.my.id, you provide your unequivocal and explicit consent to the collecting, processing, archiving, and sharing of your data strictly in accordance with the provisions detailed in this Privacy Policy.