Privacy Policy
Quick Navigation
Introduction
Choose section you want to read!
Quick Navigations
Introduction
Basis for Data Processing
Data We Collect
Purposes of Data Processing
Data Storage
Data Security
Sharing Data with Other Parties
Cross-Border Data Transfers
Cookies
Your Rights over Personal Data
Changes to the Privacy Policy
Contact Us
Last updated: May 23, 2026
Introduction
Golrox.com ("Golrox" or "We") respects and seeks to protect the privacy of its users. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our Platform.
This Privacy Policy is drafted under and subject to applicable personal data protection provisions.
This Privacy Policy constitutes an inseparable part of the Golrox Terms and Conditions. By using the Platform, you acknowledge that you have read, understood, and agreed to this policy.
Basis for Data Processing
We may process your personal data based on one or more of the following grounds:
1.
Consent: You provide consent when registering and agreeing to this Privacy Policy.
2.
Service Performance: Processing is necessary to fulfill your orders and provide the services you request, including the management of Balance, Cashback, Vouchers, and the Loyalty Program.
3.
Compliance: Processing is necessary to comply with applicable provisions.
4.
Legitimate Interest: Processing is necessary to maintain Platform security, prevent misuse, and improve our services.
Data We Collect
Data You Provide
When registering or transacting, you provide information such as:
1.
Email address.
2.
WhatsApp number.
3.
Destination username.
4.
Other information required to process orders.
Transaction and Account Data
To operate the service, we may process information related to your account activity, including:
1.
Order history and transaction status.
2.
Wallet (Balance) history and balance, including top-ups, payments, Cashback, and refunds.
3.
Loyalty Program data, such as points, membership tiers, and Voucher redemption history.
Automatic Technical Data
Our systems may record basic information when you access the Platform, including:
1.
IP address.
2.
Device type and operating system.
3.
Browser type and version.
4.
Pages visited and access times.
5.
General location data (based on IP).
Payment Data
We may receive payment status confirmations from third-party payment service providers to process your orders. Golrox generally does not directly store credit/debit card data or bank account information.
Purposes of Data Processing
We may use your data for the following purposes:
1.
Processing your orders according to the product category purchased.
2.
Verifying identity for transaction security.
3.
Managing your Balance, Cashback, Vouchers, and Loyalty Program.
4.
Providing assistance through customer service.
5.
Delivering order status updates and service information.
6.
Improving the user experience on the Golrox marketplace.
7.
Maintaining security and preventing misuse and activities that do not comply with the provisions.
8.
Complying with applicable provisions.
9.
Pursuing legitimate business interests and analysis for the development and improvement of services.
Data Storage
Your personal data is stored with reasonable protective measures. We retain your personal data for as long as necessary for the purposes described in this Policy and/or in accordance with applicable provisions. When data is no longer needed, it may be deleted or anonymized so that it can no longer identify an individual.
Data Security
We implement reasonable security measures to help protect your data, in line with generally accepted practices. Nevertheless, no method of data storage or transmission can be guaranteed to be absolutely secure. We continuously strive to improve our security measures as needs evolve.
Sharing Data with Other Parties
We do not sell or trade your personal data. Data may only be shared with the following parties on reasonable grounds:
1.
Payment service providers: to process your transactions, with an obligation to maintain data confidentiality.
2.
Technology service providers: to support Platform operations, with the same confidentiality obligation.
3.
Authorities: where required in accordance with applicable provisions.
4.
Professional advisors: who are bound by confidentiality obligations.
Cross-Border Data Transfers
In the event that your personal data needs to be transferred to another jurisdiction (for example through payment service providers or hosting), we endeavor to ensure that reasonable protective measures are in place to safeguard your data.
Your Rights over Personal Data
In accordance with applicable provisions, you may have rights over your personal data, including the right to access, correct, update, delete, restrict, or object to the processing of data, as well as to withdraw consent previously given, subject to applicable provisions.
To exercise the rights above, visit golrox.com/pusat-bantuan. We may respond to your request within a reasonable time in accordance with applicable provisions.
Changes to the Privacy Policy
This Privacy Policy may be updated from time to time to accommodate changes in services, technology, or applicable provisions. Material changes may be notified to Users via email or Platform notifications within a reasonable time before they take effect. The latest version is always available on this page.
Contact Us
For questions, requests, or complaints related to your personal data, visit our help center at golrox.com/pusat-bantuan. We may respond to requests regarding personal data within a reasonable time.