tumi Casino & Sportsbook Data Care

This page describes what we collect when you use tumi and how we keep that data protected. We are transparent about the information we need—your name, ID, address, email, phone, and payment details—because we are required by law to verify your identity and prevent money laundering.

When you access tumi via Android app, iOS browser, or desktop, we log certain activity (login times, bets placed, withdrawals requested) so we can resolve disputes and detect fraud. We do not sell your information to advertisers. We share it only with payment processors, identity-verification services, and (if required by law) enforcement agencies.

Read this policy fully to understand your rights and what happens to your data while you use tumi for sportsbook (football, badminton, MotoGP), live dealer (blackjack, roulette, baccarat, Dragon Tiger), slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile).

What Data We Collect and Why

Account and identity data on tumi

When you create a tumi account, we collect your email address, password, full name, date of birth, and national ID number. We ask for proof of address (utility bill, bank statement, or government-issued document) to verify where you live. This information is required under anti-money-laundering (AML) regulations that apply to all online gaming platforms.

We verify your identity using an automated KYC (Know Your Customer) service. This service checks your ID number and photo ID against government databases and fraud lists. Once we verify you, your account is approved and you can deposit and withdraw. If verification fails, we will contact you for additional documents.

Payment and transaction data on tumi

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank (mobile banking, local payment, online payment, e-wallet), we receive confirmation of the deposit amount, date, and payment method. We store this information in your tumi account to confirm your balance and process withdrawals. Your bank account number or wallet ID is encrypted and stored securely.

When you withdraw, we log the withdrawal amount, date, and destination payment method. We retain these records for seven years to comply with Indonesian tax and AML regulations.

Gaming and activity data on tumi

We log every action you take on tumi: bets placed, game rounds played, results, amounts won or lost, and withdrawals requested. This history helps us resolve disputes (if you claim a payout was missed, we can show you the exact transaction), detect fraud, and comply with regulations. Your complete transaction history is available in your tumi account settings.

We also log your login date and time, device type (Android app or iOS browser), IP address, and approximate location (derived from your IP). This helps us detect unauthorized access and protect your account.

Data scope: We do not collect your browsing history outside tumi, your contacts, your location in real time, or any biometric data. We collect only information necessary to operate tumi and comply with law.

Cookies and tracking on tumi

When you access tumi on your phone or desktop, we use cookies (small text files stored on your device) to keep you logged in and remember your preferences. These are functional cookies—they make tumi work, not to track you across the internet.

We do not use third-party advertising cookies. We do not track your activity on other websites. You can delete tumi cookies anytime through your browser settings, but this will log you out of your account.

How We Use and Protect Your Data

Our data processors and third parties

We do not sell your data to advertisers or data brokers. We share your data only with:

Payment processors: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks (mobile banking, local payment, online payment, e-wallet) receive deposit and withdrawal requests with your account details.
KYC providers: Third-party identity-verification services check your ID and address documents.
Law enforcement: If we receive a legal order (subpoena, court order, search warrant), we comply and share relevant account data.
Fraud detection services: We use tools to identify suspicious account behavior and money-laundering patterns.

Our payment processors and KYC providers are bound by confidentiality agreements. They may store your data outside Indonesia (for example, in regional data centers). By using tumi, you consent to this international data transfer.

Data retention and deletion on tumi

We keep your account data indefinitely while your account is active. After you close your tumi account, we retain your personal data for seven years (to comply with Indonesian financial regulations). After seven years, we delete or anonymize most of your data.

Transaction logs (deposits, withdrawals, game activity) are retained for seven years even after account closure. This is a legal requirement. You may request deletion of non-essential data (such as phone number) by contacting us, but we cannot delete transaction records.

Your rights regarding data on tumi

You have the right to:

Request a copy of all personal data we hold about you. We provide this within 30 days.
Correct inaccurate data (for example, if your name is misspelled). Contact us with proof of correction.
Request deletion of non-essential data (subject to legal retention requirements).
Lodge a complaint with the Indonesian Personal Data Protection Authority (BPDI) if you believe we misused your data.

You may not request deletion of transaction records, ID verification documents, or payment history—these are legally required to retain. If you want your tumi account fully deleted, close your account and request purge of non-essential data; we will complete this within 90 days (subject to legal holds).

Security measures we take for tumi

We encrypt your password using strong cryptographic standards. We do not store your password in plain text; we store only a cryptographic hash. Even our staff cannot see your password. If you forget your password, we send you a reset link via email.

We encrypt all communication between your phone (or browser) and our servers using TLS (Transport Layer Security). This means data in transit cannot be intercepted. We maintain firewalls, intrusion-detection systems, and regular security audits. If we detect a data breach, we will notify you within 72 hours.

TLS encryption: Secure connection protocol. All data between your device and tumi travels through an encrypted tunnel.
KYC verification: Know Your Customer check. We verify your identity with government documents before approving your account.
AML compliance: Anti-Money Laundering regulations. We monitor transactions to detect and prevent illegal fund movement.
Data retention: We keep your data for seven years after account closure to comply with Indonesian law.

Data access during investigations

If we suspect your tumi account is involved in fraud, money laundering, or violation of our terms, we may freeze your account and review your full transaction history. We may contact you for explanation. If we confirm breach of terms, we may close your account and forfeit your balance.

If you are in Jakarta, Surabaya, Bandung, or Medan and believe we have wrongly frozen your account, you may contact our support team or request escalation to our legal team via the legal notice contact channels.

Updates to this policy

We may update this privacy policy at any time. If we make material changes (such as sharing your data with new third parties), we will notify you via email or in-app message at least 30 days before the change takes effect. Your continued use of tumi after the notification means you accept the updated policy.

We respect your privacy. Our approach is: collect only what we legally must, encrypt it, keep it secure, and share it only with payment processors and law enforcement (if required). You can access your data anytime through your tumi account. If you have questions, contact us via in-app support or email at the address in our legal notice

Our service is available only where local law permits. If you have concerns about data privacy in your jurisdiction or believe tumi's practices violate your local regulations, contact our legal team. We are committed to complying with all applicable data protection laws, including Indonesian regulations on personal data.

Legal and Jurisdiction Information

Service availability

Our tumi service is available only in jurisdictions where online gaming is legally permitted under applicable local law. We do not operate in regions where our services are prohibited by statute, regulation, or government directive. Our availability determination is based on your declared jurisdiction during account registration and verified against our compliance database.

During account creation, we request your country and state/province. If our automated system identifies a jurisdiction where we do not operate, account creation is declined. We do not publish a list of permitted or restricted jurisdictions; instead, our compliance system makes this determination at the point of registration. If you believe our determination is incorrect, you may contact our legal team for review of your specific circumstances.

Our payment partners (DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, and Indonesian banks) are also subject to their own jurisdictional restrictions. If a payment method is unavailable to you, your payment provider has restricted it for your location. We respect these restrictions and cannot override them. tumi is offered only where applicable law permits our operation and payment partners accept transactions.

Account eligibility

All tumi account holders must meet the minimum age and legal capacity requirements of their jurisdiction. During KYC verification, we collect your date of birth and cross-reference it against our age-validation database. If your declared age does not meet the legal minimum for your jurisdiction, we reject your account and do not permit deposits or gaming activity.

We do not display age warnings, account controls options, or deposit-limit tools because your responsibility to verify your own eligibility and compliance with local law is not reduced by the presence or absence of these notices. You assume full responsibility for confirming that you meet all legal requirements before creating a tumi account and accessing our sportsbook, live dealer, slot, or esports offerings.

If an account is created while ineligible (under the legal minimum age, lacking legal capacity, or in a prohibited jurisdiction), we may freeze or cancel the account at any time, with or without notice. We reserve the right to conduct eligibility checks at any point during your account lifecycle, especially before processing withdrawals. If you become ineligible after account creation, we will notify you and provide a window to withdraw your remaining balance before account closure.

Local-law responsibility

You are solely responsible for verifying that your access and use of tumi complies with the laws of your jurisdiction. We provide tumi only in jurisdictions where we determine it is legally permissible; however, we cannot guarantee that every local regulation, municipal ordinance, or future law change is reflected in our availability checks. Your use of tumi constitutes your acknowledgment that you have reviewed your local law and confirmed your eligibility to participate.

If your jurisdiction restricts or prohibits online gaming, or if a law enforcement agency in your jurisdiction sends us a legal notice of prohibition, we will comply with local legal process. We may freeze your account, decline your withdrawal request, or permanently close your account in response to legal process, without notice or compensation to you. You assume all risk associated with the legal status of online gaming in your jurisdiction.

We strongly recommend consulting a local legal advisor if you are uncertain whether tumi is available and lawful in your location. We do not provide legal advice, and our support team cannot advise you on the legality of our service in your jurisdiction. If you have questions about the legal status of tumi in your area, contact a lawyer licensed in your jurisdiction or reach out to our legal team through the contact channels listed in our legal notice.

Data and privacy scope

We collect personal data during account creation, KYC verification, and ongoing tumi activity. This includes your full name, date of birth, national ID number, proof of address, email address, phone number, IP address, and payment method details. We collect this data to verify your identity, comply with anti-money-laundering (AML) regulations, process your deposits and withdrawals, detect fraud, and resolve disputes about game outcomes or payouts.

We do not sell your personal data to third parties. We share your data only with our payment partners (who process deposits and withdrawals), our KYC verification provider (who validates your identity documents), fraud-detection services, and law enforcement agencies (if legally required by court order or government notice). We retain your data for at least seven years after account closure to comply with AML and tax regulations. For full details on how we handle your data, see the privacy policy section above or contact our support team.

When you create a tumi account and access our sportsbook, live dealer, slots, and esports markets, you consent to the data collection and processing described in this privacy policy. If you do not consent, you cannot use tumi. You may request a copy of your personal data or ask us to delete your account (subject to legal retention requirements) by contacting our support team through your account or via the address in our legal notice. We typically respond to data requests within 30 days.

Contact for legal inquiries

If you have legal, privacy, or compliance questions about tumi, you can reach our legal team through the support chat in your account or via email at the address published in our legal noticeWe respond to legal inquiries during business hours (Monday through Friday, 09:00–17:00 Indonesia Standard Time). Response times may extend during holidays (Idul Fitri, Idul Adha, Imlek) or if your inquiry requires document review and investigation.

If you are a legal representative, regulator, or law enforcement officer requesting information about a tumi account or user activity, please include your official title, agency affiliation, and the account holder's name or account ID. We will respond within five business days. If your request comes with legal process (subpoena, court order, search warrant), we comply in accordance with applicable law and may require a certified copy of the legal instrument.

Our legal and compliance contact information is also available in our legal noticeWe do not provide legal advice on matters outside our operations. If you require guidance on the legality of tumi in your jurisdiction or on your personal obligations under local law, consult a licensed attorney in your area. For Liga 1, Piala Indonesia, or Piala AFF sportsbook inquiries, contact our sportsbook support team separately through your account.