bukumimpiPrivacy Policy

This page describes what we collect when you use bukumimpi and how we keep that data protected. When you create an account, deposit funds, or play on our platform, you provide information to us. We treat that information with care—it is encrypted, stored securely, and shared only where necessary to run our service or comply with law. This privacy policy explains our data practices in plain language so you understand what happens to your information.

We collect personal data (name, email, identity documents), account data (login history, balance, transactions), and usage data (which games you play, timestamps, device type). We use this information to verify your identity, process deposits and withdrawals, prevent fraud, and improve our platform. We do not sell your data to third parties. We do not use your information for marketing without your consent. Our commitment is transparency—you know what we collect and why.

Our servers may be located outside your jurisdiction. Your data may be processed in multiple locations depending on our infrastructure. We apply the same encryption and protection standards everywhere. This policy is current as of today's date; we may update it as our practices evolve. We notify users of material changes via email.

What data we collect on bukumimpi

We collect three types of information: account information, transaction information, and usage information. Account information includes your email address, password (encrypted), full name, date of birth, nationality, residential address, and phone number. We require this to verify your identity and comply with financial regulations. Transaction information includes your deposits, withdrawals, game stakes, payouts, and tournament entries. We collect this to maintain your balance, settle game outcomes, and detect fraud. Usage information includes which games you play, when you play, what device you use, your IP address, and browser type. We collect this to improve performance, troubleshoot technical issues, and understand how our platform is used.

We also collect identity documents (national ID card, passport) and proof of residence (utility bill, bank statement) before your first withdrawal. These documents are required by financial regulations to prevent money laundering and fraud. We store these documents encrypted on our servers and delete them according to legal retention timelines—typically 5–7 years after your account closes.

How we use your data on bukumimpi

We use your account information to verify your identity (KYC), prevent account takeover, and comply with financial regulations. We use transaction information to maintain accurate balances, settle game outcomes, process deposits and withdrawals, and detect suspicious activity. We use usage information to improve our platform, fix technical bugs, and understand player behaviour. We do not use your data for purposes beyond these without asking your permission first.

We may use your email to contact you about account security (login alerts, password changes, KYC verification status), service updates (maintenance windows, new games, tournament announcements), or to respond to your support requests. We do not send marketing emails unless you opt in. You can manage email preferences from your account settings anytime.

Our fraud detection system analyzes your account data automatically to spot suspicious patterns—multiple rapid withdrawals, unusual login locations, uncommon game behaviour. If we flag activity as suspicious, we may restrict your account and require additional verification. This protects your account and prevents unauthorized use. Users across Jakarta, Surabaya, Bandung, Medan, and Semarang are subject to the same fraud checks regardless of location.

Our third-party data processors

We share your data with third parties only where necessary to operate bukumimpi. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive transaction information to process deposits and withdrawals. Our email service provider receives your email address and name to send you transactional messages (password resets, KYC status updates). Our hosting provider stores our server infrastructure and may store encrypted copies of your data for backup and disaster recovery.

We do not share your data with advertisers, analytics firms, or data brokers. We may disclose information if required by law—for example, if a government agency requests your records to investigate fraud or money laundering. In such cases, we provide only the information legally required and notify you when legally permitted to do so.

Our processors are contractually obligated to protect your data using encryption and access controls equivalent to ours. They are not permitted to use your information for their own purposes.

Your rights and our security practices

You have the right to access your data anytime via your account dashboard. You can download a copy of your personal information, transaction history, and game records. You can request correction of inaccurate information—contact our support team with details and we will update your records. You can request deletion of non-essential data; we will remove information where legally permitted, though we retain transaction records and KYC documents as required by regulations.

We protect your data using encryption (TLS for data in transit, AES-256 for data at rest), secure password storage (salted hashing), and restricted server access (only authorized personnel can view unencrypted data). We undergo annual third-party security audits. If we discover a data breach, we notify affected users within 30 days and report to relevant authorities as required by law.

Our use of cookies and tracking

We use essential cookies to maintain your session (keep you logged in, remember your account) and functional cookies to improve your experience (remembering your language preference, game volume settings). We do not use tracking cookies or third-party analytics that follow you across the internet. Your session cookie expires after subject to verification of inactivity; you must log in again for security.

We do not use pixel tracking, beacons, or device fingerprinting. We do not integrate with social media trackers or advertisement networks. Your browsing behaviour on bukumimpi is not shared with external parties.

How long we keep your data

We retain transaction records (deposits, withdrawals, game histories, tournament entries) for at least 7 years to comply with financial regulations. Account information (name, email, address, phone) is retained while your account is active. If you close your account, we keep transaction records for the legal retention period but delete other personal information after 90 days, unless we are legally required to retain it longer.

Identity documents (KYC) are typically deleted 5–7 years after your account closes, depending on jurisdiction. Backup copies may persist on our archived servers for up to 1 year to support disaster recovery; these are encrypted and inaccessible for normal operations.

Contact us about privacy

If you have questions about our privacy practices, want to access your data, or believe your privacy has been violated, contact our support team via the account dashboard. Our multilingual team responds to privacy inquiries within 48 business hours. For complex requests (data export, deletion appeals), we may take up to 10 business days to process and respond. All privacy inquiries are handled confidentially and logged for audit purposes.

Your privacy matters to us

We design bukumimpi with privacy in mind. We collect only what we need, use it only where necessary, and protect it rigorously. Your account data, game history, and transaction records are encrypted and accessible only to you and authorized staff. We do not profit from selling your information, and we do not share it with third parties beyond what is essential to run our platform.

We update this policy periodically as our practices evolve or regulations change. Material changes are notified via email; minor clarifications are posted without explicit notice. Your continued use of bukumimpi after a policy update means you accept the revised version. If you disagree with our privacy practices, you may request account closure anytime; we will delete non-essential data within 90 days as outlined above.