MaCloud
中文EnglishIndonesia
All defences active · 2026-11-02 13:59 UTC

Every digit,
locked.

Your data, your cards and every top-up sit behind seven layers of defence. We only use licensed Indonesian payment and card-issuing channels, and the card is a Mastercard corporate card. The system is built and guarded by a team from banking, cloud computing and big-tech delivery.

See how a top-up flows Meet the team
Mastercard Licensed payment channels Local team in Indonesia
7layersof defence, one behind another
0card PINs stored with us
24/7automated checks, instant alerts
1~2hQR top-up arrives
01 · Defense in depth

Seven layers, each deeper than the last

We don’t rely on one “master lock”. Each layer does one job, and if any layer is bypassed there are six more behind it. Exactly which technologies we use and how they are configured stays private — that is part of the defence too.

01

Network edge protectionEDGE

All traffic passes through an edge protection network first; abnormal traffic and automated scanning are identified and blocked before they reach our servers.

LOCKED
02

Identity checks at sign-inIDENTITY

Email codes, two-step verification and automatic lockout on unusual sign-ins. Every sign-in is logged and you can review it any time in your portal.

LOCKED
03

Layered encrypted storageSEALED

Sensitive data is encrypted in layers before it is stored, with keys kept apart from the data. Even someone holding the database would see only noise.

LOCKED
04

No plain-text passwordsONE-WAY

We keep only an irreversible “fingerprint” of your password. Nobody, including us, can recover the original.

LOCKED
05

End-to-end deliveryE2E

Viewing a card number or CVV needs email verification first; the details travel encrypted and are only opened on your own device.

LOCKED
06

Least-privilege staff accessZERO-TRUST

Staff see only what their job needs. Viewing sensitive data requires a one-time code, and every access leaves an audit trail.

LOCKED
07

Isolation & encrypted backupsISOLATED

The database is not exposed to the internet, and backups are kept fully encrypted so we can recover from anything.

LOCKED
02 · Privacy

Your data reads only to you

Data is sealed the moment it enters the system. Below, a sample record being sealed — what the database holds looks like that noise.

  record · sample dataSEALING
CardholderPT CONTOH DIGITAL
Card number5412 7500 0000 2026
CVV•••
Email[email protected]
Password••••••••••
0%
encrypted
What we never keep
Card PIN

Never stored, so it can never leak.

Your bank account and payment PIN

You pay inside your own bank or e-wallet app — we never touch them.

Your password in plain text

Only an irreversible fingerprint, which even we cannot reverse.

In your control
CVV can be auto-deleted after 7 days

Once deleted it is gone from our systems too; ask us if you need it again.

Every view is verified

An email code is required before showing a card number or CVV, and sign-in and activity logs are always available to you.

Your data serves you only

Used only for card verification and support. Never sold, never used for ads.

03 · Top-up flow

How a top-up reaches your card

From scan to balance, every leg runs on licensed channels, and every step is machine-checked and logged.

01

Choose card and amount

Open your card in the portal and enter an amount; the system works out the rupiah due at today’s rate.

02

Scan to pay

Scan the QRIS code with your own bank or e-wallet app. The payment is handled by a licensed payment gateway; we never see your bank account or PIN.

03

Automatic checks

When the gateway confirms the payment, the system checks amount, card and account one by one. Anything that doesn’t match stops for manual review.

04

Encrypted instruction

Once checked, an encrypted top-up instruction goes to the licensed Indonesian card-issuing channel, with no manual relay in between.

05

Balance arrives

Usually within 1–2 hours on your Mastercard card. Every top-up and charge is recorded in your portal.

Mastercard
Mastercard corporate card

Issued by a licensed Indonesian institution, accepted across the global Mastercard network, settled in rupiah.

QRIS
Licensed payment gateway

Top-ups use QRIS, Bank Indonesia’s national QR standard, collected by a licensed payment gateway and settled through regulated clearing.

Licensed end to end

Issuing, collection and clearing are all handled by licensed Indonesian institutions. No grey links anywhere in the chain.

04 · The team

The people who guard it

A team from banking technology, cloud computing and big tech, based in Jakarta, serving customers in Chinese, English and Bahasa Indonesia.

Rizky NugrahaVERIFIED · JAKARTA
Channels & technical support lead

Rizky Nugraha

Local channels & technical support · Jakarta

Seven years at one of Indonesia's leading local banks, where he is now a Senior Technical Manager. Banking holds systems to the strictest bar for security, stability and compliance, and that is the standard he builds and runs systems to every day. In our team he coordinates the licensed local channels in Indonesia and leads technical support. A graduate of BINUS University.

A leading Indonesian bankSenior Technical Manager · 7 years
Banking technologyLicensed channel coordinationTechnical supportLocal complianceBINUS
Santoso

Santoso

Founder · Cloud & system architecture · Jakarta

Works on cloud computing and system architecture in Indonesia. Previously served enterprises on Alibaba Cloud in Jakarta, and led DevOps and AI deployment at AIA and GE Healthcare. He owns our system architecture and security design.

Alibaba Group2025 – 2026
AIA2022 – 2023
GE Healthcare2018 – 2020
Chang Keqiang

Chang Keqiang

Co-founder · Product & deployment

Former product manager at Meituan and Alibaba, now a Forward Deployed Engineer. He leads product experience and customer onboarding, so every flow is both safe and easy.

Alibaba GroupProduct Manager
MeituanProduct Manager

Team members’ backgrounds are personal work history; the companies and institutions listed have no partnership with, or endorsement of, MaCloud.

05 · Responsible disclosure

Top up with confidence. We're here.

If you find a security issue, contact us directly — we will act on it right away and thank you. Unauthorised scanning, credential stuffing and attacks are detected automatically, blocked, and the evidence is kept.

About the corporate card Contact us