Privacy Policy
Last updated: 29 September 2026
This Privacy Policy explains how PT. Anak Radja Kreasindo, operating as What’s On Bali (“What’s On Bali”, “we”, “us”), collects, uses and protects your personal data when you use whatsonbali.com (the “Website”), buy tickets or vouchers, subscribe to our newsletter, or apply to list your business with us.
We process personal data in line with Indonesia’s Law No. 27 of 2022 on Personal Data Protection and other laws that apply to us.
1. Who we are
What’s On Bali is operated by PT. Anak Radja Kreasindo, Bali, Indonesia.
For any privacy question, contact us at halo@whatsonbali.com or WhatsApp +62 817 141 811.
2. What we collect
When you book tickets, vouchers or a reservation
- Your name, email address and phone or WhatsApp number.
- What you booked, the amount, the order status and the payment deadline.
- The payment proof you upload for a bank transfer (for example a screenshot of your transfer receipt).
- Your tickets or vouchers (each with a QR code) and, at the venue, the time your ticket was checked in.
- The IP address used when the order was placed, to help prevent fraud.
When you create an account or sign in
- Your name, email address, phone number and password (stored in encrypted form, we cannot read it).
When you subscribe to our newsletter
- Your email address.
When you apply as a partner or use the Partner Dashboard
- Business name, contact person, email address, phone or WhatsApp number and the business details you submit.
- The events, deals and listings you create, including photos and locations.
When you contact us
- The messages you send us by email or WhatsApp and our replies.
Technical and security data
- IP address and browser information, used to limit abuse of forms and sign-in (for example blocking repeated failed login attempts) and to keep the Website secure.
- A count of how often a page is shared through our share buttons. This count is not linked to you.
3. Why we use your data
- To take and confirm your booking, check your payment and send your tickets or vouchers.
- To send you emails about your order (for example “order received”, “payment confirmed”, “payment rejected”, “order expired”).
- To let event organisers and venues check you in and honour your booking.
- To answer your questions and give support.
- To send you our newsletter, only if you subscribed. You can unsubscribe at any time using the link in every newsletter email.
- To review and manage partner applications and partner content.
- To protect the Website, our customers and partners against fraud and misuse.
- To meet legal, tax and accounting obligations.
We process your data because it is needed to provide the service you asked for, because you gave your consent (for example for the newsletter), because of our legitimate interest in running a safe service, or because the law requires it.
4. Who we share it with
We do not sell your personal data.
We share only what is needed with:
- Event organisers, venues and other partners whose event, deal or service you booked: your name, what you booked and your ticket or voucher status, so they can admit you and honour your booking.
- Service providers that help us run the Website, such as our web hosting and email delivery provider.
- Authorities, when the law requires it.
Third-party content on the Website
- Maps on event, deal, listing and destination pages are shown with Google Maps. Our area and event maps use OpenStreetMap. When you view these maps, your browser connects to those services.
- Our Instagram feed is loaded from Instagram.
- Some listings link to partner websites (for example ticketing or booking sites). When you leave our Website, the privacy policy of that website applies.
5. Cookies
We use cookies that are needed for the Website to work, for example to keep you signed in, to remember your cookie choice and to protect forms. Maps, the Instagram feed and other embedded content may set their own cookies. You can manage your choice through the cookie banner on the Website and in your browser settings.
6. How long we keep it
We keep personal data only as long as it is needed for the purposes described in this policy, and as long as Indonesian law (for example tax and accounting rules) requires us to keep it.
- Newsletter email: until you unsubscribe.
- Security logs of staff activity: 180 days.
7. How we protect it
We use HTTPS encryption, restricted access by role (for example partners only see their own bookings), encrypted passwords, a firewall, and limits on failed sign-in attempts. Payment proof files are stored in a private folder that is not publicly accessible.
8. Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, when we are not required to keep it;
- stop or limit certain processing, or withdraw your consent (for example for the newsletter).
Send your request to halo@whatsonbali.com. We may need to confirm your identity first. We will reply within the period required by applicable law.
9. Children
The Website is not intended for children. Some events have their own age limits, which are shown on the event page.
10. Changes to this policy
We may update this Privacy Policy. The date at the top shows when it was last changed. Important changes will be announced on the Website.
11. Contact
PT. Anak Radja Kreasindo (What’s On Bali)
Bali, Indonesia
Email: halo@whatsonbali.com
WhatsApp: +62 817 141 811