bumi22 com Privacy Policy

This page describes what we collect when you use bumi22 com and how we keep that data protected. Our privacy practices apply to all users who access our platform from Android, iOS, or desktop browsers. We handle your information in accordance with data protection principles and local law where applicable.

We recognize that your trust is essential. We do not sell your personal data to third parties for marketing. We do not share your account credentials or payment details with unrelated services. When we work with processors—such as payment partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) or cloud hosting providers—those relationships are contractual and subject to strict confidentiality terms.

Our policy applies from the moment you create an account on bumi22 com through your entire relationship with us. If you have questions about how we handle your data, contact us via the support channels listed at the end of this page.

What data we collect on bumi22 com

Account registration

When you open an account on bumi22 com, we collect your email address, phone number, and a password you create. We ask for your full name, date of birth, and residential address so we can complete identity verification (KYC). You upload a photo of your ID document—a national identity card (KTP) or passport. We store this information on our secure database servers.

We collect this data because we are obligated by law to verify account holders. We also use your email and phone to send you account notifications, password reset instructions, and withdrawal confirmations. Our mobile app keeps you logged in between sessions on Android; on iOS Safari, we do not persist your session (standard browser behavior).

Identity verification on bumi22 com

We do not keep copies of your ID document after verification is complete. We store only a verification flag in your account record. Your original image file is deleted from our systems within 30 days of approval.

Payment and transaction data

When you deposit money into your bumi22 com account, we record the date, time, amount, and payment method you chose (QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer). We store your bank account or e-wallet identifier in encrypted form. We do not store your full bank account number, CVV, or password; your payment provider (mobile banking, local payment, online payment, e-wallet, or the e-wallet operator) handles that data separately.

When you withdraw, we record the same information: date, amount, and destination payment method. These records are kept for accounting, audit, and fraud prevention purposes. We may need to verify that the withdrawal account matches your identity documents during your first withdrawal.

Gameplay and account activity

We log your gameplay activity—when you start a session, which games you play (football markets on Liga 1, Piala AFF, slots like Aviator or Sweet Bonanza, live-dealer tables, esports markets), your stake amounts, and your outcomes. We track your account balance in real time. These logs help us prevent fraud, settle disputes, and improve our platform.

We also record your IP address, device type (Android, iOS, or desktop), and browser or app version when you log in. This helps us detect unauthorized access and ensure your account remains secure.

Cookies and similar tracking

Our website uses cookies to keep you logged in, to remember your preferences (such as language or theme settings), and to analyze how players use bumi22 com. We use Google Analytics to see which pages are visited most often and from which regions (Jakarta, Surabaya, Bandung, Medan, etc.). Google Analytics does not directly collect your name or payment details; it only tracks your navigation pattern across our site.

You can disable cookies in your browser settings. Disabling cookies will log you out of bumi22 com and may slow your experience, but it will not affect your account balance or data security. Our Android app does not use traditional cookies; instead, it uses local storage tokens to maintain your login session.

We do not track your behavior across other websites; we only track what happens on bumi22 com and related services.

bumi22 com privacy team

Push notifications and communication

If you enable push notifications on our Android app, we track which notifications you receive and whether you open them. This helps us understand which tournaments (Piala Indonesia, Piala AFF, Liga 1) or game releases (new slot variants, live-dealer tables) generate the most interest. You fully control notification settings in your phone's Settings menu or in our app preferences.

We send email notifications for account actions: password resets, withdrawal requests, deposit confirmations. We may also send promotional emails about new games or tournaments, but only if you have not opted out. You can unsubscribe from promotional emails at any time via a link at the bottom of each message.

How we use and protect your data on bumi22 com

Data retention on bumi22 com

We keep your account data—email, name, address, verification status—for the lifetime of your account and for a minimum of seven years after account closure for legal and regulatory compliance. We retain your transaction history (deposits, withdrawals, gameplay) for the same period. We delete gameplay logs and payment records after seven years unless law requires otherwise.

If you request account deletion, we anonymize your personal identifiers but retain transaction records (without your name attached) to fulfill legal obligations. We cannot fully erase transaction data because it is required for anti-money-laundering and tax compliance in many jurisdictions.

Third-party processors

We work with payment processors to handle QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers. These processors see your name, phone, email, and transaction details to complete payments. We have contracts with them that require them to keep your data confidential and to use it only for payment processing.

We use cloud hosting providers (server infrastructure) that may be located outside Indonesia. Your data in transit is encrypted using HTTPS; our databases are encrypted at rest. If you are concerned about data residency, contact our support team—we can discuss options.

Your rights and account control

You have the right to request a copy of the data we hold about you. You can request corrections to your name, address, or phone number by logging into your account or contacting support. You can request account closure, in which case we will disable your login and withdraw access.

You have the right to object to marketing communications; we will stop sending promotional emails if you request it. You do not have the right to erase transaction records because we are legally required to keep them, but you can request that we stop processing your data for analytics or marketing purposes.

What we protect
  • Password hashed and never stored in plaintext
  • Payment credentials handled by payment providers
  • HTTPS encryption in transit
  • Database encryption at rest
Limitations
  • Transaction data retained for 7 years legally
  • Cloud servers may be geographically distributed
  • We cannot guarantee standard security practices against breaches

Data breach notification

If we discover unauthorized access to your personal data, we will notify you via email and SMS within 72 hours of discovery. We will also contact the relevant regulatory authorities if required by law. We maintain cybersecurity insurance and incident-response protocols to minimize risk.

You should never share your password with anyone, including bumi22 com staff. If you believe your account has been compromised, change your password immediately via the "Forgot Password" flow on our login page. We will send a reset link to your registered email.

Contact and updates to this policy

If you have privacy questions or wish to exercise your data rights, email us at our support address or use the contact form on our contact pageWe typically respond within five business days.

We may update this policy to reflect new features, legal requirements, or security improvements. Changes take effect 30 days after we post them. We will notify you via email if a material change affects how we handle your data. Your continued use of bumi22 com after the 30-day notice period means you accept the updated policy.

Last updated: May 2026. This policy applies to all users of bumi22 com regardless of location. Services are available only where local law permits.