bulan33 Casino & Sportsbook Data Care
This page describes what we collect when you use bulan33 and how we keep that data protected. We collect personal information only to verify your identity, process your deposits and withdrawals, and maintain your account security. We do not sell your data to advertisers, and we do not share your gaming history with third parties except where required by law.
Our data practices reflect our commitment to transparency. When you open an account on bulan33, you provide your email, name, and identity documents (KTP, passport, or driver's license). We use these to verify you are who you say you are—this is called Know Your Customer (KYC) verification, and it's a legal requirement for all financial services platforms in most jurisdictions.
We also collect transaction data—when you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer (mobile banking, Mandini, local payment, online payment), we record the amount, method, and timestamp. We collect your game activity (spins, tournament participation, results). This data is encrypted and stored securely. This policy explains what we collect, how we use it, and what rights you have.
What data we collect on bulan33
We collect information in three categories: account creation data, transaction data, and activity data. Account creation data includes your email, name, date of birth, address, and identity document (KTP or passport). We ask for this information only to verify your identity and comply with anti-money-laundering regulations. We do not store your identity document itself; we store only a verification record confirming that you've passed our checks.
Transaction data includes every deposit and withdrawal. When you deposit our welcome offer via DANA, we record the amount, method, date, time, and your account ID. When you request a withdrawal, we record the destination payment method, amount, and timestamp. This record-keeping is a legal requirement and protects you by creating an audit trail of all money movements on your account.
Activity data includes:
- Game sessions (which games you played, how long you played, outcomes)
- Tournament participation (which tournaments you joined, your leaderboard position, prizes won)
- Login history (when and where you logged in)
- Device information (device type, operating system, IP address)
- Chat and support interactions (messages you send our support team)
We do not ask for unnecessary information. We don't collect your phone number, your family connections, your employment history, or any data unrelated to account security and financial compliance. We collect only what we need to verify you, process payments, and detect fraud.
How we use your data and who we share it with
We use your data for five purposes: account verification, payment processing, fraud detection, legal compliance, and customer support. We verify your identity to ensure you're who you claim to be and that you're of legal age to use our services. We process payments by forwarding your deposit and withdrawal requests to payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or your bank). We monitor for fraud by analyzing unusual account activity (e.g., login from multiple countries within minutes, large withdrawals immediately after signup).
We comply with law by maintaining records that can be shared with Indonesian regulators or tax authorities if legally compelled. We support you by using your contact information to respond to your help requests or notify you of account changes. We do not use your data for marketing; we do not send you promotional emails unless you explicitly opt in.
We share your data only with essential third parties. Payment processors (local payment, online payment, e-wallet, mobile banking, local payment, banks) receive your name, account number, and transaction amount to complete transfers. Our hosting provider receives encrypted copies of your data to maintain our servers (our servers may sit outside your jurisdiction, but your data is encrypted both in transit and at rest). We do not share your data with advertisers, data brokers, or analytics companies. We do not sell your data.
Your rights and account security
You have the right to access, correct, and delete your data. You can log into your bulan33 account and update your personal information anytime. You can request a complete export of your data (in CSV or JSON format) by contacting our support team. We will provide it within 30 days. You can also request account deletion; we will delete your personal information within 90 days, subject to legal retention requirements.
We protect your data using industry-standard encryption (TLS 1.2+) for all data in transit, and AES-256 encryption for data at rest. We use secure password hashing (bcrypt) and never store your password in plaintext. We offer two-factor authentication (2FA) via SMS or authenticator apps; we recommend enabling 2FA to prevent unauthorized access. We regularly audit our security practices and conduct penetration testing.
If your account is compromised, you can reset your password immediately from the login page. If you believe your data has been breached, contact us without delay. We will investigate, revoke any compromised sessions, and notify you of remediation steps. We maintain cybersecurity insurance to cover losses from data breaches.
At bulan33, your data is a trust asset. We keep it encrypted, we share it only where necessary, and we delete it when you ask. We don't monetize your information, and we don't use it beyond account and payment operations.
Cookies and tracking
We use cookies to keep you logged in and to remember your preferences (language, bet size, game favorites). These are essential cookies; without them, our platform wouldn't function. We do not use cookies for tracking or behavioral advertising. We do not place third-party cookies (from Google Analytics, Facebook Pixel, or similar) on our platform.
Our servers log your IP address, device type, and browser to help us detect fraud and troubleshoot technical issues. This is standard practice for any online service. We do not use this data to profile you or build advertising segments. We do not share these logs with third parties except law enforcement (if legally compelled) or our technical support team (for debugging).
You can disable cookies in your browser settings, but this will log you out and prevent you from using bulan33. We do not use local storage (web storage) to circumvent cookie restrictions. If you have privacy concerns, you can contact us at [email protected] and request details about what specific data we hold on you.
International data transfers and jurisdiction
Our servers may be located outside Indonesia. This means your encrypted data passes through international networks and may be stored on servers outside your jurisdiction. We apply the same encryption and access controls regardless of server location. If our servers are in a jurisdiction with different privacy laws, we apply Indonesian privacy standards as the baseline—we never weaken protections based on lower standards elsewhere.
By using bulan33, you consent to international data transfer. We are committed to protecting your data under the same standards we would apply if all servers were in Jakarta, Surabaya, Bandung, Medan, or Semarang. If you do not accept international data transfer, you should not create a bulan33 account.
Our policy updates and your consent
We may update this policy from time to time as our services evolve or as regulations change. If we make material changes (e.g., we begin sharing data with a new third party), we will notify you by email and ask for your consent. If you don't agree with the new policy, you can delete your account. Your continued use of bulan33 after a policy update means you accept the new terms.
This policy is effective as of the date shown at the top of this page. We archive all previous versions for reference. If you have questions about our privacy practices, contact us at [email protected] or through the support panel in your account. We respond in English and local languages within one business day.
Our services are available only where local law permits. We are not responsible for ensuring your use of bulan33 complies with your jurisdiction's regulations. Members are responsible for verifying that their access and use comply with their own jurisdiction's law.