Privacy Policy — tumi23

1 Introduction

tumi23 is committed to protecting the privacy and security of every individual who accesses or interacts with our platform. This Privacy Policy has been prepared to provide a clear and transparent account of the personal data practices of tumi23, including the categories of data we collect, the purposes for which that data is used, the legal basis on which we process it, and the rights that you hold as a data subject.

This Policy applies to all personal information collected through the tumi23 website (tumi23.cam), related mobile-optimized interfaces, customer support communications, promotional campaigns, and any other service channel operated by tumi23. Our primary market is Indonesia; however, our data protection practices are aligned with internationally recognized standards to ensure robust protection for all users regardless of their location within the Indonesian archipelago — including users in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and across the wider region.

This Privacy Policy should be read in conjunction with tumi23's Terms & Conditions, which govern the overall use of the platform.

2 Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person. This includes, but is not limited to, names, identification numbers, location data, online identifiers, and factors specific to the physical, economic, or social identity of that person.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — tumi23, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — any third party that processes Personal Data on behalf of tumi23 pursuant to a contractual arrangement and in accordance with tumi23's instructions.
• "Cookies" — small text files placed on your device by the tumi23 platform to enable certain technical and analytical functions.
• "KYC" — Know Your Customer: the identity verification process required of all registered Members before certain account actions (such as withdrawals) are permitted.
• "Member" / "User" — any individual who has registered a verified account on the tumi23 platform.

3 Data We Collect

tumi23 collects the following categories of personal and technical data in the course of providing our betting and gaming services:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used strictly for age verification — all users must be 21 years of age or older).
• Indonesian national identity number (NIK from your KTP — Kartu Tanda Penduduk) or passport number.
• Residential address within Indonesia.
• Gender (collected as part of the KYC process to match identity documents).

3.2 Contact Data

• Email address (used for account communications, security alerts, and promotional messages where opted in).
• Mobile phone number (used for SMS verification and account security).

3.3 Financial Data

• Bank account name and account number for withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata).
• E-wallet identifiers for GoPay, OVO, DANA, ShopeePay, and LinkAja transactions.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and associated payment reference numbers — all denominated in Indonesian Rupiah (IDR).

3.4 Gameplay & Betting Data

• Betting activity records, including markets wagered on (e.g., football, togel, live casino), stake amounts, odds accepted, and outcomes.
• Game session logs, including session duration, games accessed, and in-game actions.
• Bonus claim history and wagering progress toward rollover requirements.

3.5 Technical & Device Data

• IP address, geolocation data (country and city level), and internet service provider information.
• Device type, operating system version, browser type and version.
• Cookies, session tokens, and similar tracking identifiers (see Section 11).
• Platform interaction logs, including pages visited, features used, click paths, and error reports.

3.6 Support & Communications Data

• Content of live chat conversations, emails, and other support communications submitted to tumi23.
• Records of complaints, disputes, and their resolutions.

4 How We Collect Data

tumi23 collects personal data through the following channels and mechanisms:

• Direct submission: Information you actively provide during account registration, KYC verification, deposit or withdrawal requests, contact forms, or live chat interactions.
• Automated collection: Technical data collected automatically when you access the tumi23 platform, including via cookies, server logs, and browser fingerprinting technologies.
• Payment providers: Transaction confirmation data shared with tumi23 by our integrated payment partners (local banks and e-wallet operators) upon completion of a deposit or withdrawal.
• Identity verification partners: Data received from third-party KYC and identity verification services used to confirm the authenticity of documents you submit.
• Game studios: Aggregated gameplay logs and session data received from certified game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PGSoft, and Spribe) whose games are hosted on the tumi23 platform.

5 How We Use Your Data

tumi23 processes your personal data for the following specific and legitimate purposes:

6 Legal Basis for Processing

tumi23 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations under the tumi23 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations and identity verification requirements.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving our services — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the legality of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

tumi23 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

7.1 Payment & Banking Partners

We share your name, account number, and transaction details with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet provider (GoPay, OVO, DANA, ShopeePay, LinkAja) solely for the purpose of processing your deposit or withdrawal transaction. These partners operate under their own privacy policies and applicable Indonesian banking regulations.

7.2 Identity Verification Providers

To fulfill our KYC obligations, we share identity document data with certified third-party verification services. These providers are contractually bound to process your data exclusively for verification purposes and may not use it for any other purpose.

7.3 Game Studio Providers

Certain gameplay session data is shared with our certified game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PGSoft, and Spribe — to facilitate game delivery, resolve disputes, and audit game outcomes. Studios receive only the minimum data necessary for these purposes.

7.4 Legal & Regulatory Authorities

tumi23 may disclose personal data to competent governmental or regulatory authorities where required by applicable law, a valid court order, or a lawful regulatory directive. We will notify you of any such disclosure to the extent permitted by law.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of tumi23's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections. You will be notified of any such transfer via a prominent notice on the tumi23 platform.

8 Data Retention

tumi23 retains your personal data for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

9 Data Security

tumi23 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the tumi23 platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), ensuring that your personal and financial data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data fields — including identity document numbers, bank account details, and password hashes — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within tumi23's internal systems is governed by strict role-based access controls. Only personnel with a verified operational need are permitted to access identifiable member data.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their tumi23 accounts. Internal staff access to data systems requires mandatory multi-factor authentication.
• Penetration Testing & Audits: tumi23 commissions independent security audits and penetration tests on a regular basis to proactively identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that may affect your rights and freedoms, tumi23 will notify affected Members and relevant authorities within the timeframes required by applicable law.

10 Your Privacy Rights

As a data subject, you hold the following rights with respect to your personal data held by tumi23. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected] (plain text — not a clickable link).

• Right of Access: You may request a copy of the personal data tumi23 holds about you, along with information about how it is processed.
• Right to Rectification: If you believe that personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that tumi23 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations that require us to retain certain records.
• Right to Restriction of Processing: You may request that tumi23 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is under dispute.
• Right to Data Portability: You may request that tumi23 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You may object to the processing of your data where tumi23 relies on legitimate interests as the legal basis, including processing for direct marketing purposes. We will honor such objections unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

tumi23 will respond to all valid privacy rights requests within thirty (30) days of receipt. In complex cases, the response period may be extended by a further two (2) months, of which you will be informed within the initial thirty-day window. We do not charge a fee for reasonable rights requests.

11 Cookies & Tracking Technologies

tumi23 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, to improve user experience, and to analyze usage patterns. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the tumi23 platform and may prevent you from logging in or completing transactions.

12 Children & Minors

The tumi23 platform is strictly intended for adults aged 21 years and over. tumi23 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and we apply additional KYC checks to confirm eligibility where there is any uncertainty.

If tumi23 becomes aware that personal data has been collected from an individual under 21 years of age — whether through an error in the registration process or any other means — we will take immediate steps to delete that data and close the associated account. Any deposits made by underage users will be returned to the originating payment source.

If you are a parent or guardian and believe that your child under the age of 21 has accessed or registered on the tumi23 platform, please contact our support team immediately via live chat or at [email protected] (plain text — not a clickable link).

13 Cross-Border Data Transfers

tumi23 primarily processes and stores Member data within secure data center infrastructure serving the Southeast Asian region. In certain operational contexts — for example, when using internationally headquartered game studio providers or KYC verification platforms — your personal data may be transferred to and processed in countries outside Indonesia.

Wherever such transfers occur, tumi23 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy. These safeguards include contractual data processing agreements with all third-party recipients, binding corporate rules where applicable, and other transfer mechanisms recognized under applicable data protection frameworks.

14 Policy Updates

tumi23 reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, we will provide advance notice to registered Members via in-platform notification or email prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this page periodically to remain informed of how tumi23 handles your personal data. Continued use of the platform following any update constitutes acceptance of the revised Privacy Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by tumi23, please reach out to our dedicated support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the tumi23 platform.
• Email: [email protected] (displayed as plain text only — this is not a clickable mailto link).
• Support Hours: 00:00–24:00 WIB (Western Indonesia Time, UTC+7), including all public holidays.

We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a full response within thirty (30) calendar days. For time-sensitive account security matters, Live Chat is the recommended contact channel.