Golf Platform Privacy Policy Makamura Indonesian Senior Golfer Communtiy
This policy explains how Makamura Indonesian Senior Golfer Communtiy (a PGI member club) handles the personal data of
members and guests on its golf platform (website, /my/golf portal, app and WhatsApp),
in line with Indonesian Law No. 27 of 2022 on Personal Data Protection (PDP Law).
1. Data we process
- Identity & membership: name, member number, date of birth, gender, region, WhatsApp number, email, dues status.
- Golf: IGA number (PGI ID), Handicap Index, scorecards & round statistics, tournament results, bookings.
- Community: reviews, posts, comments, classified ads, photos you upload.
- GPS location while using the distance-to-green feature (processed on your phone, not stored on our server).
- Specific data (with consent only): emergency contact & health notes, with restricted and logged access.
2. Purposes & legal basis
| Purpose | Basis (PDP Law Art. 20) |
|---|---|
| Membership administration | Performance of the membership agreement |
| Handicap administration & score posting to PGI (CHS) | Consent; obligation as a PGI member club |
| Tournaments & publication of results | Performance of a contract (tournament entry) |
| Community profile & activity | Consent |
| Emergency contact & health notes | Explicit consent; vital interest |
| Promotions & information via WhatsApp | Consent |
| Location (GPS) while playing | Consent |
3. Recipients
- PB PGI (Course Handicap System) for score posting and official Handicap Index.
- WhatsApp service provider for notifications & OTP codes.
- Bank Indonesia licensed payment provider for online payments (we do not store card data).
- Partner golf courses for bookings you make (player names & schedule).
- Map providers (OpenStreetMap/CDN) loading maps in your browser.
4. Retention
- Scorecards & rounds: 7 years.
- WhatsApp message log: 2 years.
- Membership data: while membership is active and afterwards as required by law. [to be completed by the board]
Data past its retention period is reviewed periodically by the board and then deleted or anonymised.
5. Your rights
You may access, correct, obtain a copy of, delete, or restrict processing of your data and withdraw consent. Use the My Data page or contact us. Requests are answered within 3 x 24 hours.
6. Security & incidents
Access is role-based, access to specific data is logged, and backups run daily. In case of a personal data breach we notify you and the competent authority within 3 x 24 hours.
7. Data Protection Officer (PIC/DPO) contact
Name: [to be completed by the board]
Email / WhatsApp: [to be completed by the board]
Address: [to be completed by the board]