bulan123 Platform Privacy Notice

This page describes what data we collect when you use bulan123 and how we keep that information protected. We take your privacy seriously — your personal details, account credentials, and payment information are encrypted, stored securely, and shared only with processors and partners who help us operate our platform and comply with law. We do not sell your data to advertisers or marketing firms. Our privacy practices are transparent and centre on your control: you can request what we hold about you, ask us to correct inaccuracies, and contact us if you have concerns.

At bulan123, we collect data in three contexts: account creation (identity verification), platform use (wagers, game play, logins), and payments (deposits, withdrawals, payment method details). Each category serves a specific purpose — account security, legal compliance, fraud prevention, or service delivery. We store this data only as long as necessary to fulfil those purposes, and we apply industry-standard encryption and access controls to minimise risk of unauthorised access.

Our privacy policy reflects Indonesian data-protection principles and international standards. If you have questions about how we handle your data, contact our support team. If you believe we have misused your information, you can lodge a complaint with our data officer and, if applicable, with local regulatory authorities in your jurisdiction.

What data we collect on bulan123

Identity and contact information: When you create a bulan123 account, we collect your full name, date of birth, email address, and phone number. We also request a valid Indonesian identity document — KTP (national ID card), passport, or driver's licence — which we verify against government records to comply with Know Your Customer (KYC) requirements. This step ensures we know who holds the account and reduces fraud and money-laundering risk.

Account activity: We log every action you take on bulan123 — when you log in, which wagers you place, which games you play, how much you deposit and withdraw, and when your sessions end. This activity log helps us detect fraud (unusual patterns, account takeover attempts), resolve disputes, and understand platform usage. We retain these logs for a minimum of five years for compliance with financial regulations.

Payment information: When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we do not store your wallet credentials — the payment processor handles authentication. For bank transfers via mobile banking, local payment, online payment, or e-wallet, we receive your account details from your bank and store them encrypted. We never store your full credit-card or debit-card number (if applicable); we receive a token from the processor instead.

Device and location data: We collect your IP address, device type (mobile, desktop), browser type, and approximate location (city or region level, not exact street address) whenever you access bulan123. This helps us block access from prohibited jurisdictions, detect fraud, and optimise our platform for different devices and networks. We do not use GPS or request permission to access your precise location.

We do not collect data we do not need

bulan123 does not ask for your mother's maiden name, your children's names, your income, or your occupation unless required by specific regulatory requests. We collect only what is necessary to verify your identity, process your payments, and comply with law.

How we use your data at bulan123

Account verification and security: We use your identity information to verify you are who you claim, prevent account takeover, and reset your password if you forget it. Your 2FA (two-factor authentication) code is generated locally on your device or sent via SMS/email — we do not store the code itself, only a hash to validate it when you enter it.

Payment processing: We share your payment details with our processor partners (payment gateways, banks, digital-wallet operators) only to execute deposits and withdrawals. These partners are bound by confidentiality agreements and use your data solely to complete transactions and prevent fraud.

Compliance and legal obligations: Indonesian financial regulations require us to report suspicious activity, large transactions, and account patterns to authorities if warranted. We may also comply with requests from law enforcement or regulators if they provide a valid legal basis. We keep records of such disclosures and inform you where we are legally able to do so.

Fraud and abuse prevention: We analyse your account activity to detect and prevent fraud, money laundering, and misuse of our platform. If our system identifies unusual patterns (rapid deposits/withdrawals, wagers on impossible outcomes, account access from multiple continents in minutes), we may place your account under review or request additional verification. This is not punishment — it is a protective measure for you and our platform.

Payment processors and banks: We share your name, account number, and transaction amounts with mobile banking, local payment, online payment, e-wallet, and other payment partners to execute transfers. We also share data with mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment operators when you deposit or withdraw via those wallets.

KYC and identity verification providers: We may use third-party services to verify your identity document against government records. These providers are located in Indonesia and Asia-Pacific regions; they are bound by strict confidentiality agreements.

Compliance and fraud services: We may share account information with third-party fraud-detection and compliance services to screen for money-laundering risk and sanctions-list matches. These services operate under contract and are not permitted to use your data for marketing or other purposes.

Legal and regulatory authorities: We may disclose account information to law enforcement, tax authorities, or financial regulators if required by valid legal process (court order, warrant, regulatory demand). We do not volunteer information, but when legally compelled, we comply.

We do not sell your personal data to third parties, and we do not permit our processors to use your data for their own marketing purposes. Any processor that receives your data must agree in writing to use it only for the purpose we specified.

Cookies and tracking on bulan123

bulan123 uses cookies and similar technologies to keep you logged in, remember your preferences, and track how you use our platform. We use two types: essential cookies (required for login, security, and platform function) and analytics cookies (which track page views, button clicks, and feature usage to help us improve the interface).

You can control cookies via your browser settings — most browsers allow you to block cookies or be asked before they are stored. If you disable essential cookies, you may not be able to log in or use our platform. If you disable analytics cookies, we cannot track your usage patterns, but the platform will still function.

We do not use third-party cookies or cross-site tracking. Google Analytics is not enabled on bulan123. Our analytics are powered by our own logs — we do not share user behaviour data with external analytics firms unless you explicitly opt in (which we do not require for platform access).

How long we keep your data at bulan123

We retain your account and transaction data for a minimum of five years after your account is closed, in compliance with Indonesian financial regulations. If you request account closure, we stop using your data for marketing or platform improvement, but we continue to store it for legal, tax, and fraud-prevention purposes.

Device logs (IP address, login times, device type) are retained for one year. After that, older logs are deleted to free storage space. Payment records are retained as long as required by banking and tax law, typically five to seven years.

If we discover we have collected data beyond what we need, or if you request deletion of non-essential data, we will remove it unless legal obligations (anti-money-laundering rules, tax laws) require us to retain it. We will inform you of any legal barriers to deletion.

Your right to request access: You can ask bulan123 for a copy of all data we hold about you. Contact our data officer and we will provide a summary within 10 business days, subject to verification that you are the account holder.

How we protect your data on bulan123

We use AES-256 encryption to secure your data in transit (between your device and our servers) and at rest (stored on our servers). All communications with bulan123 use HTTPS — your browser will show a padlock icon confirming the connection is encrypted.

Our servers are hosted by trusted cloud providers in Asia-Pacific data centres. Access to stored data is restricted to authorised staff (engineers, compliance officers, support specialists) who have signed confidentiality agreements. We use multi-factor authentication for all internal systems.

We conduct regular security audits and penetration tests to identify and patch vulnerabilities. If we discover a data breach that affects your account, we will notify you and relevant authorities as soon as we determine the scope of the breach, in accordance with applicable law.

Your rights regarding data at bulan123

You have the right to:

Access: Request a copy of the data we hold about you.
Correction: Ask us to fix inaccurate information (e.g., if your phone number is wrong).
Deletion: Request deletion of non-essential data (subject to legal retention requirements).
Portability: Receive your data in a structured format (e.g., CSV) so you can transfer it to another service.
Restriction: Ask us to limit how we use your data (e.g., no analytics, only essential account functions).
Objection: Object to processing of your data if you believe it violates your privacy.

To exercise any of these rights, contact our data officer at the address in the contact section below. We will respond within 10 business days. If you believe we have violated your rights, you can lodge a complaint with the Indonesia's data-protection authority or other relevant regulators in your jurisdiction.

Contact bulan123 about privacy

If you have questions about our privacy practices, wish to request access to your data, or want to lodge a complaint, contact our data protection officer:

Email: [email protected] Phone: Available during standard business hours Mailing address: Contact details available via our support portal at bulan123.app

We aim to respond to privacy requests within 10 business days. If your request is complex or requires investigation, we may ask for a reasonable extension. We are committed to resolving privacy concerns transparently and fairly. Our privacy policy is subject to periodic review and update as our platform evolves. We will notify you of material changes and, where required by law, request your consent before processing your data in a new way.