Privacy Policy
Last updated: 2026-11-14
Hunian123 (“we”, “us”) runs the property marketplace at https://hunian123.fortune.my.id. This policy explains which personal data we collect, why, who can see it, how long we keep it, and the choices you have.
1. Who is responsible
Hunian123 is responsible for the personal data processed on this website. For any privacy question or request, write to info@hunian123.fortune.my.id.
2. What we collect
- Account data: name, email address, phone or WhatsApp number, country, language, timezone, currency and area-unit preferences, profile photo and bio if you add them, and your password (stored only as a one-way hash). Agencies and advertisers also give a company name, logo and city.
- Listings, projects and ads: the property details, photos and contact details you publish. Uploaded photos are resized and their embedded metadata (such as camera details and GPS location) is removed.
- Messages and enquiries: the name, phone, email, message and, for site visits, the preferred date you send through a contact, brochure or visit form.
- Favorites and reports: listings you save, and the reason and details of a listing you report.
- Auctions and NUP (priority numbers): your ID card or passport number, full name, phone, email, the sender bank and account name if you give it, the proof of your deposit or NUP transfer, your bids and maximum auto-bid, and the result.
- Ad statistics: how many times each ad was shown and clicked, as totals per ad. To avoid counting repeat clicks, a click is remembered in your session for 30 minutes. We do not build visitor profiles.
- Technical data: your IP address is recorded for failed sign-in attempts to stop password guessing. Our web server also keeps standard access logs (IP address, date and time, page requested, browser type).
3. Why we use it
- To run your account and provide the service you ask for: publishing listings, sending your enquiry to an advertiser, running auctions and NUP sales (to provide the service).
- To keep the site safe: blocking password guessing, reviewing listings and reports, preventing fraud (our legitimate interest in a safe marketplace).
- To send emails you need, such as account confirmation, password reset and notifications you can turn off in your profile (to provide the service).
- To show Google Maps and detect your timezone automatically, only if you choose “Accept all” (your consent).
- To meet legal obligations where they apply.
We do not sell personal data, and we do not use advertising trackers or analytics services.
4. Who can see your data
- Advertisers: when you send a message or enquiry, the owner, agent or agency of that listing receives your contact details and message. For new projects, the developer and its marketing team receive them.
- Auction organisers and developers: your ID number and transfer proof are visible only to you, the auction organiser (or, for an NUP, the developer and its marketing team) and the site administrators. Other bidders see only an anonymous bidder number; public selection screens show only NUP numbers.
- Public visitors: listings, projects, ads, agency profiles and the contact details you choose to publish with them.
- Site administrators: to moderate content and handle reports and requests.
- Hosting provider: the website and database run on a server rented from DigitalOcean in Singapore. Fonts, styles and scripts are served from our own server.
- Google: only if you accept, maps on property and project pages are loaded from Google Maps, which receives your IP address and may set its own cookies under Google’s privacy policy.
- WhatsApp: only when you click a WhatsApp button, which opens WhatsApp with a prepared message.
- Authorities: when the law requires it.
5. Cookies
| Name | Purpose | Kept for | Type |
|---|---|---|---|
| RKSESSID | Keeps you signed in and protects forms | Until you close the browser | Essential |
| consent | Remembers your cookie choice | 12 months | Essential |
| lang, currency, unit | Remember a language, currency or area unit you pick | 12 months | Essential (set when you choose) |
| tz | Shows dates in your local timezone, detected by your browser | 12 months | Optional (“Accept all”) |
| Google Maps | Map on property and project pages | Set by Google | Optional (“Accept all”) |
With “Essential only”, maps are replaced by a “Show map” button and dates are shown in UTC until you pick a timezone in your profile. You can change your choice at any time with “Cookie settings” at the bottom of every page.
6. How long we keep it
- Account data, listings and projects: until you or an administrator delete the account or the content.
- Failed sign-in records: 24 hours.
- Email confirmation and password reset links: deleted 7 days after they expire.
- Copies of sent emails in our mail queue: 30 days.
- Messages you sent to an advertiser stay with that advertiser; if your account is deleted, the link to your account is removed.
- Server access logs: about four weeks. Server backups are overwritten as new backups are made.
7. Security
The site is served over HTTPS only. Passwords are stored as one-way hashes. ID numbers and transfer proofs are stored outside the public web folder and are shown only to the people listed in section 4. No system is completely secure, so please use a strong password and never send money before checking the property and the seller.
8. Your choices and rights
- See and correct most of your data yourself in your profile and dashboard.
- Turn off email notifications in your profile (security emails are always sent).
- Withdraw your consent for optional cookies at any time with “Cookie settings”.
- Ask us for a copy of your data, to delete your account and listings, or to restrict or object to a use of your data, by writing to info@hunian123.fortune.my.id. We may ask you to confirm the request from the email address of your account.
- If you think we handle your data unlawfully, you can complain to the data protection authority in your country.
9. Changes
We will update this page when our practices change and show the new date at the top.