PRIVACY POLICY & DATA PROTECTION

To deliver automated digital license dispatch, proxy bandwidth provisioning, and streamlined payment reconciliation, we process limited categories of customer data:

• Registered Member Accounts: Valid email addresses, cryptographically salted password hashes, and historical order manifests stored within your Member Area.
• Guest Checkout Accounts: Destination email addresses provided on order configurators solely for digital invoice generation and credential delivery.
• Transactional Metadata: Order Identifiers (Order ID), invoiced balances, randomized transaction keys, and payment gateway confirmation statuses. Sensitive financial authentication assets (such as card CVVs, bank PINs, or private banking passwords) are never stored or processed on Seciko Store servers.
• Technical Telemetry & Anti-Fraud Logs: Originating IP addresses, browser User-Agent headers, session access timestamps, and cryptographic payload signatures used to enforce system integrity and thwart fraudulent transactions.

All collected data is processed strictly within lawful commercial parameters for the following dedicated objectives:

• Reconciling inbound payments and authenticating transaction settlements automatically via real-time gateway webhooks.
• Provisioning digital credentials, software licenses, proxy gateway endpoints, or server access parameters directly to your inbox and dashboard.
• Transmitting secure One-Time Password (OTP) verification tokens during registration or password recovery procedures.
• Displaying synchronized order manifests, subscription validity counters, and top-spender gamification ranks within your Member Area.
• Detecting malicious scraping, brute-force exploits, automated tariff tampering (*Seciko Shield Block*), and unauthorized system access.

3.1 High-Grade Cryptographic Hashing: All member account passwords are stored using one-way cryptographic algorithms (`bcrypt / PASSWORD_DEFAULT`). Our engineers and customer support agents have zero visibility into your plaintext passwords.

3.2 Session Fixation Defense: We implement robust session protection mechanisms, including runtime session regeneration (`session_regenerate_id`), local memory purging upon sign-out, and strict no-cache HTTP headers across checkout and authentication checkpoints.

3.3 Guest Order Isolation: Purchases finalized through Guest Checkout bind transactional records purely to order invoices without instantiating persistent browser authorization sessions, protecting one-time shoppers from unauthorized access vulnerabilities.

Seciko Store NEVER SELLS, LEASES, OR TRADES customer contact details or purchase histories to marketing aggregators or third-party advertisers. Data disclosures are restricted solely to the following operational scenarios:

• Licensed Payment Gateways: Forwarding verified invoice sums and Order IDs via encrypted API payload signatures to validate incoming settlements.
• Statutory Legal Compliance: Complying with binding court subpoenas, statutory discovery requests, or official regulatory directives issued by law enforcement bodies within the Republic of Indonesia.

Our web infrastructure utilizes native PHP session cookies strictly to maintain authenticated Member Area states and enforce order concurrency limits during multi-step checkout. These cookies do not track cross-site browsing activity across external domains and can be cleared instantly via your browser settings or by utilizing the local session reset utility.

As a valued user of Seciko Store, you possess full autonomy to:

• Inspect, rectify, and update your personal email credentials or access passwords through the Member Area.
• Request automated re-dispatch of historical license vouchers and invoice records to your registered email address.
• Request permanent account deactivation or deletion of non-statutory personal identifiers by contacting our technical helpdesk.