bundle Privacy Policy
This page describes what we collect when you use bundle and how we keep that data protected. We at bundle collect personal information only to verify your identity, process payments, comply with anti-money-laundering law, and improve our service. Your privacy is a core responsibility, and we handle all data with encryption, access controls, and clear retention limits.
Our bundle privacy policy applies to all users across Jakarta, Surabaya, Bandung, Medan, Semarang, and other supported regions. We comply with applicable data protection law in each jurisdiction where we operate. If you have questions about how we use your data, contact our support team and we will provide detailed answers.
We do not sell your personal information to third parties. We share data only with payment processors, fraud-prevention services, and law-enforcement agencies when legally required. This policy explains exactly what we collect, who we share it with, and what rights you have to access or delete your information.
What data we collect on bundle
When you create a bundle account, we collect your email address, name, date of birth, and chosen password. These details are required to set up your account and verify your identity before you can withdraw funds.
Before your first withdrawal, we at bundle require Know Your Customer (KYC) verification. You must upload a government-issued ID (national identity card, passport, or driving licence) and proof of address (utility bill, bank statement, or recent lease agreement). We store these documents securely and use them only to confirm your identity and detect fraud.
We also collect transaction data: every deposit, bet, withdrawal, and tournament entry on bundle is logged with timestamps and amounts. This data helps us detect unusual activity, resolve payment disputes, and comply with anti-money-laundering regulations. Payment information (wallet identifiers for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank account numbers for mobile banking, local payment, online payment, e-wallet) is stored separately from your account profile and encrypted at rest.
Our bundle system records your IP address, device type, and browser information when you log in. This helps us detect unauthorized access and protect your account. We also store your preferences—such as preferred payment method and game settings—to improve your experience.
We do not collect unnecessary personal details
On bundle, we ask only for information needed to verify your identity, process payments, and comply with law. We do not collect your phone number, social media profiles, or employment details unless you voluntarily provide them.
How we use your data on bundle
We at bundle use your personal information for five main purposes: account verification, payment processing, fraud prevention, legal compliance, and service improvement.
Identity verification is mandatory before withdrawal. We compare your uploaded ID and address proof against public databases and our internal fraud checks. This process typically takes one business day. Once approved, we retain your verified identity for the life of your bundle account.
Payment processing requires us to share your banking details with our payment partners. When you deposit via mobile banking, local payment, online payment, or e-wallet, those wallet providers receive your transaction request. For bank virtual accounts (mobile banking, local payment, online payment, e-wallet), our partner bank receives your transfer instructions. We do not store your wallet passwords or banking credentials—only the account identifiers needed to confirm completed transfers.
Fraud prevention and anti-money-laundering (AML) compliance require us to analyze your account activity. We flag unusual patterns—such as rapid deposits followed by immediate withdrawals, or large transactions from newly verified accounts—for manual review. We may contact you to confirm activity or temporarily hold a withdrawal pending verification.
We also use your data to improve bundle. Aggregated, anonymized data helps us understand which games are popular, which payment methods work best, and where support issues occur most often. We never use individual account data for marketing or analytics without your consent.
Who we share your data with
We at bundle share your personal information only when necessary and always with protections in place. Our primary data-sharing partners are:
- Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment providers, and online payment, e-wallet, mobile banking, local payment for processing your deposits and withdrawals
- Fraud and KYC services: third-party verification companies that check your ID and address against public records
- Law enforcement: we may disclose account information to government agencies, tax authorities, or courts if legally compelled
- Service providers: cloud hosting, email, and customer-support platforms that help us operate bundle
All data-sharing partners are contractually bound to protect your information and use it only for the stated purpose. We do not permit them to sell, merge, or re-disclose your data.
Key takeaways
- We collect email, name, date of birth, ID, and address proof for account verification
- Payment and transaction data are used only for processing, fraud detection, and compliance
- We share data with payment partners, fraud services, and law enforcement when legally required
- We do not sell your personal information to marketers or third-party advertisers
- You can request a copy of your data or ask us to delete your account at any time
How long we retain your data
We at bundle retain your account information for as long as your account remains open. If you close your bundle account, we keep your KYC documents (ID, address proof) and transaction history for seven years to comply with anti-money-laundering and tax regulations. After seven years, we delete all personal data except aggregated, anonymized transaction counts required for financial audits.
Temporary data—such as login IP addresses and device information—is retained for 90 days and then deleted automatically. Email communications are archived for two years for dispute resolution and quality assurance.
Your rights and choices on bundle
We respect your control over your personal information. You have the right to:
- Access: request a full copy of your data at any time by contacting our support team
- Correct: update inaccurate information through your bundle account settings or by contacting support
- Delete: request account closure and deletion of your personal data (subject to legal retention requirements)
- Withdraw consent: opt out of marketing communications by adjusting your notification preferences
Our bundle support team responds to data-access requests within five business days. We provide a portable file containing all information we hold about you in a standard format.
Security measures we use
We at bundle encrypt all personal information in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption. Your password is hashed and never stored in plain text. Payment details are held in payment processor vaults, not on our servers.
Our bundle infrastructure uses firewalls, intrusion detection, and regular security audits. Access to personal data is restricted to authorized staff with documented need. We conduct penetration testing annually and respond to any identified vulnerabilities within 48 hours.
If a data breach occurs, we will notify all affected users within 72 hours, describe what happened, and explain steps we are taking to secure your information.
Cookies and tracking on bundle
We use cookies to keep you logged into your bundle account and remember your preferences. These are functional cookies, not tracking cookies. We do not use third-party analytics or retargeting pixels that follow your activity across other websites.
You can disable cookies in your browser, but this will prevent you from accessing your bundle account. We do not honour "Do Not Track" signals because they would break essential account functionality.
How to contact us about privacy
If you have questions about our bundle privacy policy, want to request your data, or believe we have mishandled your information, contact our support team via the Help Center or your account settings. We respond to privacy inquiries within five business days.
If you are unsatisfied with our response, you may file a complaint with the data protection authority in your jurisdiction.