Privacy Policy

This Privacy Policy applies to the Kemenangan Masindo Group website (“KMG”, “we”, “us”) and all the forms on it, including the contact form and the job application portal. It has been drawn up with reference to Indonesia’s Personal Data Protection Law (Law No. 27 of 2022, “UU PDP”) and its implementing regulations.

By using this site and submitting data through our forms, you confirm that you have read and understood this policy. If you do not agree, please do not submit personal data through this site.

The personal data controller for this site is CV. Kemenangan Masindo Kowis, the parent of the brands Kemenangan Gold, Kemenangan Signature, Signature Gold & Jewellery, Jakarta Signature and LUXO Media Creative.

Job application data can be accessed by the group-level human resources (HR) team and by the HR team of the brand that posted the relevant job opening, each within its own authority.

We collect only the data you knowingly provide through our forms, plus a minimum of technical data:

We process your personal data only for the following clear and limited purposes:

• Responding to and following up messages, questions, partnership requests or media enquiries.
• Processing job applications: document screening, interview scheduling, communication about application status, through to job offers.
• Keeping the profiles of potential candidates in a talent pool for other relevant job openings during the retention period.
• Sending confirmation emails and notifications directly related to your message or application.
• Keeping the site secure and preventing spam, fraud and misuse of the forms.
• Understanding how the site is used, in aggregate, in order to improve our services (only if you consent to analytics cookies).

We do not sell, rent or trade your personal data to any party.

The legal basis for processing your personal data is explicit, valid consent as provided for in the PDP Law. Consent is given when you submit the contact form and, for job applications, through the personal data processing consent box, which must be ticked before an application is submitted.

You can withdraw your consent at any time (see the Your rights section). Withdrawing consent does not affect the validity of processing already carried out, but it may mean that we cannot continue with your application or follow up your message.

Your data can be accessed only by parties who need it for the purposes above:

• KMG internal teams: the group HR team and the HR team of the relevant brand (for applications), and the team that handles contact messages, with role-based access.
• Service providers (data processors): providers of database and file storage infrastructure, a transactional email delivery service, an anti-spam verification service (Cloudflare Turnstile), and Google Analytics if you consent to analytics cookies. These providers process data on our instructions and are bound by confidentiality obligations.
• Competent authorities: where required by laws and regulations or by a valid legal order.

Some service providers may process data outside Indonesia. In that case we ensure that the transfer is carried out with an equivalent or higher level of data protection, in accordance with the provisions of the PDP Law.

You can ask for earlier deletion at any time. Data may be kept for longer only where required by laws and regulations.

We apply reasonable technical and organisational measures to protect your personal data, including:

• Encrypted connections (HTTPS) for all data transmission.
• CV and passport-style photo files are kept in private storage that is not publicly accessible; every download requires an active HR admin session and the appropriate access rights.
• Access to the admin panel requires a password, two-factor authentication (2FA) and an active session, and is restricted by role.
• IP addresses are stored as hashes, not as raw addresses.
• Submission limits, anti-bot verification and file type checks to prevent misuse.

No system is entirely free of risk. If a personal data protection failure occurs, we will notify you and the competent authority within the time limits and under the provisions of the PDP Law.

As a personal data subject, you have a number of rights under the PDP Law, including the right:

• Information & access

  To know what data we process and for what purpose, and to obtain a copy of it.

• Correction

  To update or correct data that is inaccurate or incomplete.

• Erasure

  To ask for your personal data, including application data, to be erased or destroyed.

• Withdrawal of consent

  To withdraw your consent to processing at any time, without affecting earlier processing.

• Restriction & objection

  To ask for processing to be suspended or restricted, and to raise an objection.

• Complaints

  To raise a complaint with us or with the competent authority, in accordance with the regulations.

To exercise these rights, send a request through the contact form under the “Other” category. For requests about an application, include your application number (format KMG-YYMMDD-XXXX) so that we can verify it. We will respond to your request within the period set by the PDP Law.

This site stores your cookie consent choice in your browser’s local storage (localStorage) under the key kmg-consent. Cookies that are needed for the site to work do not require consent.

Analytics cookies (Google Analytics 4) are loaded only after you choose “Accept” on the cookie banner. If you decline, the analytics script is not loaded at all. You can change your choice at any time.

This site is generally not intended for children. The exception is the job application portal, which accepts applicants aged 17 to 60. Applicants who are not yet 18 are still classed as children under the laws and regulations, so processing their personal data requires the consent of a parent and/or guardian, as provided for in Article 25 of the PDP Law.

If you are not yet 18, please submit an application only with the knowledge and consent of your parent or guardian. The application form will ask you to declare that this consent has been given, and we may ask for confirmation of it before processing the application further.

Outside the job application portal, we do not knowingly collect children’s personal data. If you are a parent or guardian and become aware that a child’s data has been sent to us without your consent, please contact us so that the data can be reviewed and deleted.

We may update this Privacy Policy from time to time to follow changes in our services or in regulations. The latest version is always available on this page, with the “Last updated” date adjusted accordingly. We will communicate material changes clearly on this site.

Questions, requests or complaints about personal data can be sent to CV. Kemenangan Masindo Kowis through the contact form on this site.

Beware of anyone claiming to act on behalf of KMG who asks for personal data, passwords or any payment during the recruitment process. KMG does not charge any fee in the recruitment process.