Bobocabin Kawah Ijen, Banyuwangi

Hi-tech stuff here and there was a unique accent, but it makes you feel like you're being watched like an episode of big brother. Not overly a feeling you want to have...

I had one of the most shocking, privacy-invading hotel experiences here. On arrival, they forced me to download an unknown app to check in. Despite my objections, they insisted on uploading my passport to a web-based system, with data routed to servers in Singapore. If I refused, I’d lose the room I had already booked. This intrusive demand may violate Indonesian law: 1. Consent Requirements (Law No. 27 of 2022 on PDP) • This law mandates clear, informed, freely given consent for data collection. I refused to upload my passport, but the hotel denied check-in unless I complied—hardly “freely given.” 2. Improper Cross-Border Data Transfer (PDP & GR No. 71/2019) • Storing data abroad requires safeguards at least equivalent to Indonesia’s. They provided no explanation or assurances about protecting my passport data once sent to Singapore. 3. Potential Breach of Data Minimization • Under Indonesia’s privacy framework (including Minister of Communication & Informatics Regulation No. 20 of 2016), data collection must be necessary. Forcing guests to use a single, invasive, app-based process—without a manual alternative—seems excessive. 4. Disregard for Consumer Protection (Law No. 8 of 1999) • Denying me accommodation (which I had already reserved) just because I wouldn’t agree to questionable data handling is unfair and exploitative. Why This Hotel Fails Guests: • Forced App Installation: No alternative—“use the app or leave.” • No Respect for Objections: They uploaded my data anyway or insisted I do it myself. • Zero Transparency: No clear info on data security or who might access it. • Possible Legal Violations: Their practices may conflict with Indonesian law, risking guest data. I left feeling violated, frustrated, and uneasy about how they handle personal information. Until they respect data-protection principles—and follow Indonesia’s own laws—I can’t recommend them to anyone who values privacy and fair treatment.