kumbang Platform Privacy Notice

This page describes what we collect when you use kumbang and how we keep that data protected. We process personal information to verify your identity, process your deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and other methods, provide customer support, and comply with local regulations. Our privacy practices apply equally to all users, regardless of location within supported jurisdictions.

We recognize that your trust is essential. This notice outlines what data we collect, who can access it, how long we retain it, and what rights you have. We do not sell your data to third parties. Our servers may sit outside your jurisdiction, but data access is restricted to staff who need it to deliver kumbang services.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

What data we collect on kumbang

We collect your email address when you register on kumbang. This is mandatory and used for login, account recovery, and support communication. We collect your legal name, date of birth, and government ID photograph during KYC verification (before your first withdrawal). We collect your phone number optionally if you choose to add it to your profile.

We collect payment information when you deposit via DANA, e-wallet, mobile banking, local payment, or bank virtual accounts (online payment, e-wallet, mobile banking, local payment). This includes transaction IDs, timestamps, amounts, and payment method identifiers. We do not store full card numbers or e-wallet credentials—payment processors handle those securely and we receive only confirmation data.

We collect your game history automatically. Every spin on Gates of Olympus, every bet on Liga 1, every live blackjack hand is logged with timestamps, stakes, and outcomes. We collect your IP address and device information (operating system, browser, app version) to detect fraud and support technical troubleshooting.

How we use your data on kumbang

We use your email to send account notifications (login alerts, withdrawal confirmations, support replies). We use your name, date of birth, and ID to verify your identity and comply with anti-money-laundering regulations. We use your payment information to process deposits and withdrawals and to reconcile your account balance.

We use your game history to settle payouts, investigate disputes, and detect fraud. We use your IP address and device information to flag suspicious logins or account takeover attempts. We use your support interactions to resolve issues and improve our service. We do not use your data for marketing unless you explicitly opt in.

We may process your data in aggregate (never individually) to understand usage patterns—for example, which payment methods are most popular during Piala AFF tournaments or how many users access kumbang from Jakarta versus Surabaya. This helps us scale our infrastructure and improve performance.

Who has access to your data on kumbang

Your data is accessed by kumbang staff who need it to deliver services. This includes our customer support team (to resolve account issues), our finance team (to process payments), and our compliance team (to verify identity and detect fraud). Your data is not shared with third parties except where legally required or where you explicitly authorize sharing.

We work with payment processors (for online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment transactions) and hosting providers. These third parties are bound by data protection agreements and access your information only to perform their specific function. Payment processors receive transaction details; hosting providers receive anonymized usage statistics.

We may disclose your data if required by law enforcement, court order, or regulatory authority. We will attempt to notify you of such requests unless legally prohibited from doing so. If you dispute a transaction or report a problem, we may share relevant data with your payment provider or bank to investigate.

Payment processors

Receive transaction data only. Do not see your full name or ID photo.

Hosting providers

Receive anonymized usage data only. Cannot see personal or payment information.

Customer support team

Access your account, history, and KYC documents to resolve issues.

Compliance team

Access your KYC data and transaction history to verify identity and prevent fraud.

Data retention and your rights on kumbang

We retain your account data (email, name, ID photo) for as long as your kumbang account is active plus seven years after closure (to comply with financial and anti-money-laundering regulations). We retain your game history and transaction records for seven years. We retain your support tickets for one year after your issue is resolved. We delete anonymized usage statistics after twelve months.

You have the right to request a copy of your data that we hold. Send a request to our support team with your account email and we will provide a data export within 30 days. You have the right to correct inaccurate data—update your name, email, or phone number in your kumbang account settings. You have the right to request data deletion, though we may retain some data to comply with legal obligations (for example, KYC records for anti-money-laundering purposes).

You cannot opt out of essential data collection (email, payment information, game history) because these are necessary to provide kumbang services. However, you can opt out of non-essential data—for example, you can choose not to add a phone number to your profile, or you can request that we do not send marketing communications (though we do not send marketing by default unless you subscribe).

Cookies and tracking on kumbang

We use cookies to keep you logged into kumbang and to remember your preferences (for example, your last-used payment method). These cookies are essential to platform function. We use session cookies (deleted when you close your browser) and persistent cookies (stored for up to 30 days to let you stay logged in). We do not use cookies to track you across other websites or for third-party advertising.

We may use analytics tools to measure page load times, crash rates, and feature usage (for example, how many users accessed Liga 1 markets today or how many played Gates of Olympus). These analytics are anonymized and do not identify you personally. You can disable cookies in your browser settings, but doing so may limit kumbang functionality (for example, you may need to log in every time you visit).

Security and data protection on kumbang

We encrypt all data transmission between your device and our servers using TLS/SSL. Your password is hashed and never stored in plain text. We use firewalls, intrusion detection, and regular security audits to protect our servers. We limit staff access to your data using role-based permissions—only people who need your information to do their job can see it.

While we implement industry-standard security, no system is completely secure. We cannot guarantee that your data will never be compromised. If we discover a data breach affecting kumbang users, we will notify affected users promptly and work with relevant authorities. You are responsible for keeping your kumbang password confidential and for logging out on shared devices.

Our servers may be located outside your country. Data transfer across borders is subject to our data protection agreements, which require that your data receives equivalent protection regardless of storage location.

Contact us about your kumbang data

If you have questions about our privacy practices, want to request your data, or wish to exercise your rights on kumbang, contact our support team. Provide your account email and a clear description of your request. We will respond within 30 days.

If you have a complaint about how we handle your data or believe we have violated privacy regulations, you may file a complaint with your local data protection authority. We encourage you to contact us first so we can attempt to resolve your concern.