The following Privacy Notice will become effective on 21 July 2026.

This Privacy Notice describes how We, PT GoTo Gojek Tokopedia Tbk and/or its affiliates (“GoTo”, “We”, or “Us”) collect, analyze, use, store, transfer, or disclose Your Personal Data (“Process”, “Processed”, or “Processing”). For the avoidance of doubt, “Personal Data” means any data, whether true or not, regarding an individual who is directly identified based on the data itself and/or can be indirectly identified by combining the data with other data and/or information, through electronic or non-electronic systems. “Applicable Laws” shall refer to any laws, regulations, rules, regulatory policies, or official decisions made by government authorities or law enforcement bodies in Indonesia that are in effect on or after the effective date of this Privacy Notice, including but not limited to those governing the protection of Personal Data. In addition, when other data, including personal profiles and/or unique identifiers, are associated or combined with Personal Data, then that data is also considered as Personal Data.

This Privacy Notice applies to all users of the GoTo website (www.gotocompany.com) (“GoTo Website”).

This Privacy Notice is provided in a layered format so You can click through to the specific areas set out below. Please read this Privacy Notice thoroughly to ensure that You understand Our data protection practices. For Your ease of understanding, We have provided a Summary that highlights all the important points.

By agreeing to the Privacy Notice, You acknowledge that You have read and understood this Privacy Notice and agree to its terms. In particular, You agree and consent for Us to Process Your Personal Data in accordance with this Privacy Notice.

The Privacy Notice has been updated to improve clarity and transparency. The updates streamline and simplify the description of the categories of Personal Data collected, provide clearer information on the purposes for which Personal Data is processed, and update the contact details for inquiries and requests. These changes are intended to make the Privacy Notice easier to understand while ensuring individuals have accurate information about Our Personal Data handling practices.

Depending on how You interact with GoTo Website, below are the types of Personal Data We collect from You and the methods through which We collect it:

• Identity and Contact Information, such as Your name, email address, company name, telephone number, and the contents of your inquiry when you contact Us through the forms available on the GoTo Website or email.

• Technical Information, includes details about your usage of the GoTo Website, such as data on the web pages accessed, the duration of each visit/session, and the identity of the internet device used.

We may use the Personal Data collected for the following purposes, as well as for other purposes permitted by Applicable Laws (“Purposes”):

• to identify and follow up on the messages You sent through the forms provided on the GoTo Website;

• to send you Our newsletter and relevant updates;

• to maintain, develop, test, enhance, and personalize the GoTo Website to meet Your needs and preferences;

• to monitor and analyze Your activities and behaviors, including habits and usage of various features and/or services available on the GoTo Website;

• to comply with Applicable Laws; and

• to protect our rights, property, and the security of the GoTo Website, including detecting and preventing unauthorized or fraudulent activities.

We may use information that has been combined and anonymized to create statistics or reports, such as website usage trends. This information may be based on Personal Data, but it does not identify You because all identifying details have been removed and the data is combined with information from other users.

We may disclose, allow access to, or share Your Personal Data with other entities within the GoTo Group, which We will only do on a limited basis for the purpose of identifying and following up on the messages You convey, as well as other purposes outlined in this Privacy Notice. Apart from these purposes, We will not disclose and share your Personal Data unless required by Applicable Laws.

Where it is not necessary for the Personal Data to be associated with You, We will use reasonable endeavours to remove the means by which the Personal Data can be associated with You as an individual before disclosing or sharing such data.

We will not sell or lease Your Personal Data.

Other than as provided for in this Privacy Notice, We may disclose or share Your Personal Data if We notify You or We have obtained Your consent for the disclosure or sharing.

Your Personal Data will only be held for as long as it is necessary to fulfill the Purposes for which it was collected and/or as long as such retention is required or authorised under the Applicable Laws. We will delete or anonymize your Personal Data as soon as its retention is deemed no longer in accordance with the provisions governed herein.

Please note that some of your Personal Data may still be retained by other parties, including by the government institutions in some manner. In the event that We share Your Personal Data to the authorised government institutions and/or other institutions that may be appointed by the government authorities or cooperating with Us, You agree and acknowledge that the retention of Your Personal Data by the relevant institutions will follow their respective policy on data retention.

To the fullest extent permitted by Applicable Laws, You agree to indemnify, defend and release Us from and against any and all claims, losses, liabilities, expenses, damages and costs (including but not limited to legal costs and expenses on a full indemnity basis) resulting directly or indirectly from any activities conducted outside of GoTo Website.

The data We collect from You will be stored in Indonesia, in a private and secure environment managed by Us. In providing the GoTo Website to You, Our personnel in other countries may Process Your data outside of Indonesia. In such cases, We will ensure that they uphold a level of protection equivalent to Our commitments under this Privacy Notice.

The confidentiality of Your Personal Data is of utmost importance to Us. We will make all commercially reasonable efforts to protect and secure GoTo Website from misuse, destruction, loss, copying, alteration, disclosure, or unauthorized access. However, no internet transmission can be guaranteed to be completely secure and error-free. Therefore, You are responsible for deciding what information You choose to provide to the Services and must also ensure the security of the device You are using.

You may have certain rights under Applicable Laws to request Us for access to, correction of and/or deletion of Your Personal Data in Our control.

You may unsubscribe Our newsletter at any time using the link in Our emails or by contacting Us through details provided below.

We reserve the right to refuse Your requests for access to, correction of and/or deletion of, some or all of Your Personal Data in Our control if permitted or required under any Applicable Laws. This includes circumstances where the Personal Data may contain references to other individuals or where the request for access or request for the correction or deletion is for deemed to be irrelevant, frivolous or far-fetched by Us or is indicated to be related to violations of the terms of use or to any activity or violation of the law.

In accordance with Applicable Laws, We reserve the right to charge an administrative fee for each access and/or correction request.

We may review and amend this Privacy Notice at Our sole discretion from time to time, to ensure that it is consistent with Our future developments, and/or changes in legal or regulatory requirements. If We decide to amend this Privacy Notice, We will notify You of any such amendments by means of a general notice published on the GoTo website, or otherwise to Your e-mail address set out. You agree that it is Your responsibility to review this Privacy Notice regularly for the latest information on Our data processing and data protection practices, and that Your continued use of GoTo Website, communicating with Us, or access to and use of the services following any amendments to this Privacy Notice will constitute Your acceptance to this Privacy Notice and all of its amendments.

If You have any questions or inquiries regarding how We Process Your Personal Data, or if You wish to exercise Your rights under Applicable Laws, You can contact Us through email at customerservice@gojek.com or help menu of Gojek App and GoPay App.