Home

Privacy Policy

How we handle your data

Last updated: April 2026

1. Who we are

Mobile Airtime Services is a sole proprietorship registered in the Netherlands. Mobile Airtime Services is the data controller responsible for your personal data.

Business nameMobile Airtime Services
KvK number42019808
AddressParnassiaveld 120, 1115 EL Duivendrecht, Netherlands
Emailsupport@indonesia-topup.com
Websiteindonesia-topup.com

2. What personal data we collect

We do not use tracking cookies or third-party analytics that collect personal data.

3. Why we use your data

DataPurposeLegal basis
EmailOrder confirmations, supportContract fulfillment (Art. 6(1)(b) GDPR)
Meter/phone numbersFulfilling ordersContract fulfillment
Payment dataProcessing paymentsContract fulfillment
IP addressFraud preventionLegitimate interest (Art. 6(1)(f))
Browser languageLanguage detectionLegitimate interest

We do not send marketing emails unless you explicitly opt in.

4. Who we share data with

PartyData sharedPurposeLocation
Payment providerPayment detailsPayment processingNetherlands
Our wholesale fulfillment providerMeter/phone number + denominationOrder fulfillmentIreland
AWSEncrypted transaction dataCloud hostingFrankfurt, Germany (EU)
Email service providerEmail addressTransactional emails (order confirmations)United States
Crisp (live chat)Chat messages, IP address, browser/device infoLive chat supportFrance (EU)

We do not sell personal data. Most processors are within the EU/EEA. Our email service provider is based in the United States; transfers are protected by EU Standard Contractual Clauses (SCCs) in accordance with Article 46(2)(c) GDPR.

5. How long we keep data

6. Your rights

Under the GDPR, you have the right to access, correct, delete, restrict, port, and object to the processing of your personal data.

To exercise any of these rights, contact us at support@indonesia-topup.com. We will respond within 30 days.

If you are not satisfied with our response, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

7. Security

All data is encrypted in transit (TLS) and at rest (AES-256). Our application and databases are hosted in EU data centers. Some sub-processors (such as our email service provider) may operate outside the EU; such transfers are protected by Standard Contractual Clauses as noted in Section 4. Access to personal data is restricted to the business owner only.

8. Changes to this policy

Material changes to this privacy policy will be communicated via email to registered users.