Privacy Policy

Introduction

bumi14 ("we", "us", "our") operates the online betting and gaming platform accessible at https://bumi14.cam (the "Platform"). As part of delivering our services to Members across Indonesia and internationally, we necessarily collect, process, and store certain categories of personal data. We take this responsibility seriously and are committed to handling your data with transparency, integrity, and in accordance with internationally recognised data protection principles.

This Privacy Policy sets out the basis on which personal data collected from you — or provided by you — will be processed by bumi14. It applies to all visitors to the Platform, all registered Members, and all individuals who interact with bumi14's customer support channels. By registering an account, making a deposit, or using any feature of the bumi14 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and bumi14.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

bumi14 collects personal data across several categories, depending on how you interact with the Platform. The specific data points we collect include, but are not limited to, the following:

3.1 Registration & Account Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province)
• Username and encrypted password
• Preferred language and communication preferences

3.2 KYC & Identity Verification Data

• Scanned or photographed copy of your Indonesian National Identity Card (KTP), passport, or SIM driver's licence
• Selfie photograph (in some cases, for liveness verification)
• Proof of payment method ownership (e.g., a screenshot of your BCA, BRI, BNI, or Mandiri mobile banking app showing your name, or your OVO, DANA, or GoPay account profile)

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method identifiers
• Withdrawal amounts, dates, destination account details (bank name, masked account number)
• Bonus and promotional credit history
• Full wagering history across all product verticals (sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery))
• Account balance at each transaction point

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end times, session duration
• Pages visited within the Platform, clicks, and navigation path
• Connection type and network provider

3.5 Communications Data

• Records of all communications with bumi14's customer support team, including live chat transcripts, email correspondence, and support ticket contents
• Responses to surveys, feedback forms, or promotional participation

How We Collect Data

bumi14 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit, place a wager, submit a withdrawal request, or contact customer support.
• Automatically via the Platform — through cookies, web beacons, and server logs that record technical and usage data each time you access or interact with the Platform.
• From third-party payment providers — when you initiate a transaction via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay, transaction confirmation data is shared with bumi14 by the relevant payment processor to reconcile your account balance.
• From identity verification services — bumi14 may use third-party KYC service providers to assist with document verification. These providers return a verification outcome and a risk score, which bumi14 uses to determine account eligibility.
• From fraud prevention and AML screening services — bumi14 uses automated screening tools to assess whether an account or transaction presents indicators of fraudulent activity, money laundering, or sanctions exposure.

How We Use Your Data

bumi14 processes personal data for the following specific purposes:

Legal Basis for Processing

bumi14 processes y our personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing your registration data, KYC documents, transaction records, and wagering history is necessary for bumi14 to perform its contractual obligations to you as a Member under our Terms & Conditions.
• Legal Obligation: Certain processing activities — including AML screening, sanctions checks, age verification, and the retention of transaction audit trails — are required by applicable law or by the conditions of bumi14's operating licences.
• Legitimate Interests: bumi14 processes technical and usage data to detect fraud, prevent multi-accounting, secure the Platform, and improve service quality. These activities serve bumi14's legitimate business interests and do not override your fundamental privacy rights.
• Consent: Where processing is not required by contract or law — most notably, the sending of direct marketing communications — bumi14 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting our support team.

Data Sharing & Disclosure

bumi14 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

7.1 Payment Processors

When you initiate a deposit or withdrawal, the minimum data necessary to execute the transaction — including your name, account reference, and transaction amount in Indonesian Rupiah — is shared with the relevant payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay). These providers act as data processors under contractual data protection agreements and are not permitted to use your data for any purpose other than executing the transaction.

7.2 Identity Verification & KYC Providers

bumi14 engages certified third-party identity verification services to assist in processing KYC documents. These providers receive your identity documents and return a verification outcome. They are contractually prohibited from retaining your documents beyond the period required to complete verification.

7.3 Fraud Prevention & AML Screening

bumi14 uses automated fraud detection and AML screening platforms. Certain transaction data and account identifiers may be processed by these systems to generate risk scores. No personally identifiable output from these systems is shared with unrelated third parties.

7.4 Legal & Regulatory Authorities

bumi14 may disclose personal data to law enforcement agencies, regulatory bodies, or licensing authorities where we are legally compelled to do so by a valid court order, regulatory directive, or statutory obligation. In such cases, bumi14 will disclose only the data that is strictly required by the legal instrument in question.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bumi14's assets, Member data may be transferred to the acquiring entity as part of that transaction, subject to the same data protection obligations set out in this Privacy Policy. Members will be notified of any such transfer in advance where practicable.

Cookies & Tracking Technologies

The bumi14 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies we deploy are as follows:

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your bumi14 account and may cause other Platform features to malfunction. Disabling analytics or functional cookies will not affect your ability to place wagers or process transactions.

Data Retention

bumi14 retains personal data for the periods necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and licensing obligations. The following retention schedule applies as a general guide:

• Account & Registration Data: Retained for the duration of your active membership and for a minimum of five (5) years following permanent account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later, as required by international AML standards.
• Transaction & Wagering Records: Retained for a minimum of five (5) years from the date of each transaction, for audit trail and regulatory compliance purposes.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical & Usage Logs: Retained for ninety (90) days in active logs, then aggregated and anonymised for statistical analysis. Anonymised aggregate data may be retained indefinitely.
• Marketing Consent Records: Retained for as long as your marketing consent remains active, and for three (3) years following any withdrawal of consent, as evidence of compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data sanitisation methods.

Data Security

bumi14 implements a multi-layered security framework to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the bumi14 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher), preventing interception by third parties.
• Encrypted Data Storage: Sensitive personal data — including KYC documents and payment account identifiers — is stored in encrypted form at rest using AES-256 encryption. Plain-text storage of sensitive credentials is strictly prohibited.
• Access Controls: Access to personal data within bumi14's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and subject to periodic audit.
• Two-Factor Authentication: bumi14 strongly encourages all Members to enable two-factor authentication (2FA) on their accounts. Internal staff with access to Member data are required to use 2FA at all times.
• Penetration Testing: bumi14's Platform and supporting infrastructure are subject to regular security assessments, including periodic penetration testing by independent cybersecurity specialists.
• Incident Response: In the event of a confirmed data security incident that is likely to result in a risk to your rights and freedoms, bumi14 will notify affected Members without undue delay and will take immediate remedial action.

Your Rights

As a data subject, you hold a set of rights in relation to the personal data that bumi14 processes about you. bumi14 is committed to upholding these rights in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with a clear description of your request.

bumi14 will respond to all valid data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it. We reserve the right to verify your identity before processing any data rights request.

Third-Party Services

The bumi14 Platform integrates with a number of third-party service providers to deliver its full range of features. These integrations include game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft), payment gateway operators, and analytics platforms. Each of these providers operates under its own privacy policy and data protection standards.

bumi14 does not control the data practices of third-party game studios or payment providers once data leaves our Platform boundary. We strongly recommend that you review the privacy policies of any third-party service you interact with directly. For the avoidance of doubt, bumi14 is not responsible for the privacy practices of any third party, and this Privacy Policy does not apply to any website, application, or service not operated by bumi14.

When selecting third-party data processors, bumi14 conducts due diligence to ensure that they maintain security and data handling standards consistent with our own obligations. All third-party processors are engaged under written data processing agreements that restrict their use of Member data to the specific purposes for which it is shared.

Children & Minors

The bumi14 Platform is strictly intended for adults aged 21 years and above. bumi14 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or use any feature of the Platform in any capacity.

If bumi14 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through age misrepresentation during registration or any other means — we will immediately suspend the relevant account, void any associated transactions, and delete the minor's personal data from our active systems within 30 days, subject to any overriding legal retention obligations.

Parents and guardians who believe that a minor in their care has registered on the bumi14 Platform are encouraged to contact us immediately at [email protected] so that we can take swift remedial action. bumi14 employs age verification controls as part of its mandatory KYC process precisely to prevent underage access to the Platform.

Amendments to This Policy

bumi14 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify Members by posting a prominent notice on the Platform homepage and, where practicable, by sending a notification to your registered email address. The "Last Updated" date at the top of this page will be revised to reflect the date on which the current version took effect.

Your continued use of the bumi14 Platform after any amendment to this Privacy Policy constitutes your acceptance of the revised version. If you do not agree with the updated policy, you must cease using the Platform and may request account closure by contacting our support team. We encourage you to review this page periodically to stay informed of how we handle your personal data.

Contact & Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way bumi14 handles your personal data, please contact our Data Protection team using the details below. We take all privacy-related inquiries seriously and will respond within the timeframes set out in Section 11.

If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. bumi14 is committed to co-operating fully with any supervisory authority investigation and to implementing any remedial measures required.