Your privacy matters to us. This Privacy Policy explains exactly what personal data Bumi365 collects, why we collect it, how we use and protect it, and what rights you have as a player based in Malaysia or elsewhere.
Bumi365 ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses, registers on, or interacts with the Bumi365 platform, accessible at bumi365.cam and its associated subdomains. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
This Policy applies to all players, visitors, and users of the Bumi365 platform, including persons who browse the site without registering an account. It covers all personal data collected through our website, mobile interface, live chat support system, email communications, and any promotional or marketing activities associated with the Bumi365 brand.
We process personal data in accordance with applicable data protection legislation and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. By using the Bumi365 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.
Scope: This Policy is written in English and covers all data processing activities relating to the Bumi365 platform. If you have any questions about how your data is handled, please contact our Data Protection team at [email protected] before using the platform.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, date of birth, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | Bumi365 — the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Subject" | Any natural person whose personal data is processed by Bumi365 — including registered players and website visitors. |
| "Third Party" | Any natural or legal person other than the Data Subject, Bumi365, or persons authorised to process personal data under Bumi365's direct authority. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for one or more specified purposes. |
| "KYC" | Know Your Customer — the identity and address verification process required before a Player may deposit or withdraw funds from the Platform. |
Bumi365 collects personal data through several channels in the ordinary course of operating an online gaming platform. The categories of personal data we collect are described below.
When you create a Bumi365 account, we collect:
As part of our mandatory KYC process, we may collect:
We collect and retain records of all financial transactions conducted through the Platform, including:
We automatically collect certain technical information when you access the Platform:
When you contact our support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments provided. This data is used to resolve queries, improve our support processes, and maintain compliance records.
Bumi365 processes the personal data described in Section 3 for the following purposes:
| Processing Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your player account, including authentication and access control. |
| Identity Verification | Verifying your identity and age (21+) in compliance with KYC and AML obligations before permitting withdrawals. |
| Payment Processing | Facilitating deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major banks. |
| Regulatory Compliance | Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations. |
| Responsible Gambling | Monitoring gambling patterns to identify potentially problematic behaviour and enforcing self-exclusion, deposit limits, and cooling-off periods where requested or required. |
| Customer Support | Handling, resolving, and recording player queries, complaints, and disputes via live chat and email. |
| Platform Improvement | Analysing aggregated usage data to improve platform performance, game offerings, and user experience. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates where consent has been provided. You may opt out at any time. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, bonus abuse, collusion, and other forms of platform misuse. |
Bumi365 processes your personal data only where a valid legal basis exists. Depending on the specific processing activity, we rely on one or more of the following legal grounds:
Bumi365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share personal data with the following categories of recipients where necessary and proportionate:
We engage trusted third-party service providers who process personal data on our behalf, including payment processors, KYC and identity verification providers, cloud hosting infrastructure providers, customer support software vendors, and analytics platforms. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to Bumi365.
We may disclose personal data to regulatory bodies, law enforcement agencies, or other government authorities where required by applicable law or where we have a good-faith belief that disclosure is necessary to prevent or investigate suspected criminal activity, fraud, or serious harm.
In accordance with our anti-money laundering obligations, certain transaction and identity data may be shared with financial intelligence networks, shared fraud databases, or industry-wide responsible gambling registries, where participation is required or permitted by law.
No Data Sales: Bumi365 will never sell your personal data to advertisers, data brokers, or any third party for commercial purposes unrelated to the operation of the Platform.
The Bumi365 Platform uses cookies and similar tracking technologies to operate certain essential functions and to improve your experience. A cookie is a small text file placed on your device when you visit a website.
You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Detailed instructions for managing cookies are available in the help documentation of your browser.
Bumi365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data disposal procedures.
Bumi365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
Security Incident Reporting: If you suspect that your Bumi365 account has been compromised or that your personal data has been accessed without authorisation, please contact our support team immediately at [email protected] or via live chat.
As a Data Subject, you have a number of rights in relation to your personal data held by Bumi365. We are committed to honouring these rights promptly and without undue delay. The following rights are available to you:
You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
In certain circumstances, you may request the deletion of your personal data — subject to our legal retention obligations under AML regulations.
You may request that we restrict the processing of your data in specific circumstances, such as while a data accuracy dispute is under review.
Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data.
You have the right to object to processing based on legitimate interests, including profiling and direct marketing communications.
To exercise any of the rights listed above, please submit a written request to [email protected]. We will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. In cases of complexity or volume, this period may be extended by a further two (2) months with prior notice.
The Bumi365 Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in our KYC process and is applied to all accounts before any withdrawal activity is permitted.
If we discover or have reasonable grounds to believe that personal data has been collected from a person under the minimum age requirement, we will immediately suspend the relevant account, void any associated transactions or winnings, and delete all collected personal data as quickly as our legal retention obligations permit.
Parental Notice: If you are a parent or guardian and have reason to believe that a minor in your care has registered on the Bumi365 Platform, please contact us immediately at [email protected] so that we may take prompt action.
The Bumi365 Platform does not contain links to external third-party websites, and we do not embed third-party advertising or affiliate tracking technologies that would transfer your personal data to unrelated external parties. All payment processing integrations — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX — are governed by separate data processing agreements with those service providers.
Where you interact with a payment provider's interface in the course of a deposit or withdrawal, that interaction is subject to the privacy policy of the respective payment provider. Bumi365 does not have visibility into or control over the data practices of third-party payment processors beyond what is governed by our service agreements.
Bumi365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. Where amendments are material — meaning they substantially affect your rights or our obligations in relation to your personal data — we will notify registered players via the Platform or by email prior to the changes taking effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed of how we handle your personal data. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Bumi365, please contact our Data Protection team through the following channels. All contact details are provided as plain text only.
For responsible gambling support, please visit our Responsible Gambling page. For general platform questions, visit our FAQ page.
Every privacy decision at Bumi365 is guided by these six core principles — transparency, proportionality, security, and respect for your rights as a player.
All data transmitted between your device and Bumi365 is protected by 256-bit SSL/TLS encryption. Sensitive data fields are also encrypted at rest within our secure infrastructure.
We collect only the personal data that is strictly necessary for the purpose at hand. We do not harvest data speculatively or retain it beyond the periods required by law and operational need.
Access, correct, export, or request deletion of your personal data at any time. Our Data Protection team responds to all verified requests within 30 days and acknowledges within 5 business days.
Bumi365 will never sell your personal data to advertisers, data brokers, or any third party for purposes unrelated to the Platform's operation. Your data is not a commercial product.
Internal access to your personal data is restricted to authorised personnel with a verified business need. Role-based access controls and audit logging are enforced across all internal systems.
Independent penetration tests and vulnerability assessments are conducted regularly to identify and remediate potential weaknesses before they can affect player data or Platform security.
Your personal data is handled with care, processed lawfully, and protected by enterprise-grade security. Bumi365 is built for Malaysian players who deserve a platform they can trust — with MYR payments, local support, and genuine data transparency. For players aged 21 and above only.