Data Handling

Policy.

1. Purpose and Scope

This document outlines the strict technical and operational protocols PT PAGII DIGITAL KREATIF employs to secure data across all our interactive campaigns, loyalty platforms, and AI integrations. This policy applies to all systems developed and maintained by PAGII.

2. Development and Security Standards

• OWASP Top 10 Compliance: All web applications and interactive mechanics are developed with front-to-back defenses against standard web vulnerabilities, including SQL Injection, Cross-Site Scripting (XSS), and Broken Access Control.
• Managed Cloud Environments: Campaign infrastructures are deployed on isolated, highly scalable cloud environments designed to ensure data integrity and high availability during traffic surges.

3. PII-Safe Protocols and AI Isolation

We enforce strict data sanitization pipelines. Personally Identifiable Information (PII)—such as names, phone numbers, and financial identifiers—is anonymized or stripped before being processed by any analytics engine. We strictly prohibit feeding client PII into unauthorized public AI models.

4. Data Lifecycle and Archiving

• Active Campaigns: Data is encrypted at rest and in transit (via TLS/SSL). Access to live dashboards is restricted via multi-role authentication.
• Decommissioning: Upon the conclusion of a campaign and the expiration of the SLA, PAGII executes secure data extraction for the client, followed by the permanent deletion and safe archiving of the project environment from our active servers.

5. Business Continuity

PAGII maintains a robust Business Continuity Plan (BCP) and redundant operational protocols to ensure that unexpected disruptions do not compromise data security or campaign uptime.

6. Contact for IT & Security Audits

For detailed security architecture reviews or IT procurement inquiries, enterprise clients may request our full Security Assessment documentation by contacting hello@pagii.id.