At umi55, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains exactly what personal data we collect from members in Indonesia, why we collect it, how we use and protect it, and what rights you have over your own information. We have written this document in clear, plain English so that every member can understand it without a legal background.
This Privacy Policy ("Policy") applies to all personal data collected by umi55 ("we", "us", "our") through the website accessible at https://umi55.app (the "Platform"), including all subpages, mobile-optimized views, and any associated applications. umi55 operates as an online sports betting, live casino, slot gaming, and daily togel (Indonesia's traditional numbers lottery) Platform, serving members primarily based in Indonesia.
By registering an Account on the Platform, depositing funds, placing wagers, or otherwise interacting with umi55's services, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree to this Policy, you must not register for or continue using the Platform.
This Policy should be read alongside umi55's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of the contractual framework governing your relationship with umi55.
Scope Notice: This Policy covers data collected directly through the Platform and through our customer support channels. It does not cover third-party websites, payment processors, or game providers that operate under their own independent privacy policies. Where umi55 engages such third parties, we require contractual data-protection commitments from them as a condition of engagement.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual — including name, email address, phone number, device identifiers, IP address, financial account details, and betting history when linked to an identifiable person. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure by transmission, dissemination, combination, restriction, erasure, or destruction. |
| "Controller" | umi55, the entity that determines the purposes and means of processing your personal data. |
| "Processor" | A third party engaged by umi55 to process personal data on umi55's behalf and under umi55's documented instructions — for example, a payment gateway provider or cloud infrastructure supplier. |
| "KYC" | Know Your Customer — the identity verification process required to confirm a member's identity, age, and source of funds before withdrawal requests are approved. |
| "Member" | Any individual who has completed registration and whose Account has been activated on the umi55 Platform. |
| "Sensitive Data" | A subset of personal data warranting heightened protection, including copies of government-issued identification documents submitted during KYC, financial account details, and any health or welfare information voluntarily shared in connection with responsible gaming self-exclusion requests. |
umi55 collects personal data through several distinct channels. The categories below describe the data we collect, along with the typical source for each category.
A. Registration Data. When you create an Account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address in Indonesia (including city — for example Jakarta, Surabaya, Bandung, or Bali). This information is required to verify your eligibility, enforce the 21+ age policy, and configure your Account.
B. Identity Verification (KYC) Data. Before we approve your first withdrawal, we require a copy of a valid government-issued photo identification document — typically a national identity card (KTP) or passport. We may also request a recent utility bill or bank statement as proof of address, and confirmation of ownership of the payment method used for deposits. KYC documents are treated as Sensitive Data and are subject to the heightened security measures described in Section 8.
C. Financial Transaction Data. We record all deposit and withdrawal transactions associated with your Account, including transaction amounts in Indonesian Rupiah (IDR / Rp), timestamps, payment method types (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction reference identifiers assigned by payment processors. We do not store full bank account numbers or card numbers on our servers; these are tokenized by our payment processor partners.
D. Gameplay & Betting Data. We record your wagering activity on the Platform, including bet amounts, selected markets and games (sportsbook, live casino, slots, togel draws, Domino QQ, Roulette), game session durations, and win/loss outcomes. This data is used for account management, dispute resolution, bonus tracking, and responsible gaming monitoring.
E. Technical & Device Data. When you visit the Platform, our servers automatically collect your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, referring URL, and pages visited. This data is used for security monitoring, fraud detection, and Platform performance optimization.
F. Communications Data. If you contact our support team via live chat or email, we retain records of that communication, including the content of messages and any attachments you provide. These records are used to resolve your inquiry and for quality assurance purposes.
G. Responsible Gaming Data. If you use our responsible gaming tools — such as requesting a deposit limit, cooling-off period, or self-exclusion — we record those preferences and any information you voluntarily share about your reasons for the request. This data is handled with the highest level of confidentiality and is not used for marketing purposes.
umi55 uses the personal data we collect exclusively for the following documented purposes. We do not use your data for purposes incompatible with those listed below without first obtaining your explicit consent or as required by applicable law.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration Data, KYC Data |
| Age and identity verification (KYC) | Registration Data, KYC Data |
| Processing deposits and withdrawals | Financial Transaction Data, KYC Data |
| Providing betting, casino, and gaming services | Gameplay & Betting Data, Financial Transaction Data |
| Fraud detection and security monitoring | Technical & Device Data, Financial Transaction Data, Gameplay Data |
| Anti-money laundering (AML) compliance | Registration Data, KYC Data, Financial Transaction Data |
| Responsible gaming monitoring | Gameplay & Betting Data, Responsible Gaming Data |
| Customer support and dispute resolution | Communications Data, Gameplay Data, Financial Transaction Data |
| Platform performance and improvement | Technical & Device Data (aggregated and anonymized) |
| Promotional communications (where consented) | Registration Data (email, phone) |
umi55 does not use automated profiling to make decisions that produce legal or similarly significant effects on members without human review. Where automated systems flag an account for potential bonus abuse or AML concerns, a member of our compliance team reviews the flag before any account action is taken.
umi55 processes your personal data on one or more of the following recognized legal grounds:
umi55 does not sell, rent, or trade your personal data to any third party. We disclose personal data only in the limited circumstances described below:
No Third-Party Marketing: umi55 does not share your contact details or behavioral data with advertising networks, data brokers, or unaffiliated marketing companies. Any promotional communications you receive from umi55 are sent directly by umi55 on the basis of your own consent.
umi55 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to the following retention schedules:
| Data Category | Retention Period |
|---|---|
| Registration & Account Data | Duration of Account activity, plus 5 years after Account closure |
| KYC / Identity Documents | Duration of Account activity, plus 5 years after Account closure (AML obligation) |
| Financial Transaction Records | 7 years from the date of the transaction (standard financial audit requirement) |
| Gameplay & Betting History | 3 years from the date of the bet, or the duration of any pending dispute |
| Customer Support Communications | 3 years from the date of last contact |
| Technical & Device Logs | 13 months (rolling), then automatically purged |
| Responsible Gaming Records | Duration of Account activity, plus minimum 5 years (to enforce self-exclusion) |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year thereafter for audit purposes |
Upon expiry of the applicable retention period, personal data is either securely deleted or anonymized so that it can no longer be linked to an identifiable individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.
umi55 implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures in place include:
Your Responsibility: The security of your Account also depends on the strength and confidentiality of your login credentials. umi55 strongly recommends using a unique, complex password for your umi55 Account and enabling any available two-factor authentication. Never share your credentials with a third party. If you believe your Account has been compromised, contact us immediately at [email protected].
The umi55 Platform uses cookies and similar tracking technologies to maintain session state, improve Platform performance, and detect fraudulent activity. We do not use third-party advertising cookies or cross-site behavioral tracking technologies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery, enable secure checkout and deposit flows. These cookies are essential and cannot be disabled without breaking Platform functionality. | Session / up to 30 days |
| Functional | Remember your language preference, display settings, and responsible gaming notification preferences. These enhance your experience but are not strictly required. | Up to 1 year |
| Analytics | Collect anonymized, aggregated data about Platform usage — such as page visit counts and average session duration — to help us improve the Platform. No individual member is identifiable from this data. | Up to 13 months |
| Security / Fraud Detection | Detect unusual login patterns, multiple-account creation attempts, and other potentially fraudulent activity. These work alongside our server-side security systems. | Session / up to 90 days |
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or completing transactions on the Platform. Disabling functional or analytics cookies will not affect access to core services but may reduce the quality of your user experience.
umi55 respects your rights as a data subject. Subject to applicable law and our legal retention obligations, you may exercise the following rights at any time by contacting us at [email protected]:
The umi55 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under 21. Age is verified at the point of registration through a date-of-birth declaration and is subsequently confirmed through the KYC process, which requires submission of a valid government-issued photo identification document.
If umi55 discovers that an Account has been registered by or on behalf of an individual under 21, we will immediately suspend the Account, void any unsettled wagers, return any deposited funds that can be verified as originating from the underage individual, and permanently delete all personal data associated with the Account beyond what is legally required to be retained for AML and fraud prevention purposes.
Parents and guardians are encouraged to use device-level parental control software to prevent underage individuals from accessing online gambling platforms. If you suspect that a minor has accessed the Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.
umi55's infrastructure and some of its third-party service providers operate across multiple countries. As a result, your personal data may be transferred to, stored in, and processed in countries outside Indonesia. These transfers are necessary to provide the Platform services described in this Policy.
Where personal data is transferred internationally, umi55 ensures that appropriate safeguards are in place, including:
By registering an Account and using the Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.
umi55 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — defined as changes that significantly affect how we collect, use, or share your personal data — we will notify you by sending an email to your registered address at least 14 days before the changes take effect, and by displaying a prominent notice on the Platform.
Non-material changes, such as editorial corrections or clarifications that do not alter the substance of the Policy, may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the Platform following the effective date of any material change constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you should cease using the Platform and contact us to request Account closure.
We recommend bookmarking this page and reviewing it periodically. The version of this Policy in force at the time of any given data collection event shall be the version applicable to that event.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way umi55 handles your personal data, please contact our Privacy team using the details below. We are committed to responding to all privacy-related inquiries promptly and transparently.
Privacy Inquiries: Email: [email protected] | Response time: within 48 hours (Monday–Sunday, 24/7, WIB)
When submitting a data rights request or privacy inquiry, please include your registered email address, your Account username (if applicable), and a clear description of your request. This allows us to locate your records accurately and respond without unnecessary delay.
All privacy communications should be submitted in English to ensure accurate and timely handling by our compliance team. If you require assistance drafting your request, our 24/7 live support team — including Indonesian-speaking agents — can assist you via the Platform's live chat channel.
Six principles that guide how umi55 handles your personal data — every day, across every service.
Every interaction between your device and umi55's servers is protected by TLS 1.3 with 256-bit AES encryption — the same standard used by international financial institutions.
umi55 never sells, rents, or trades your personal data to advertising networks, data brokers, or any unaffiliated third party — period. Your information stays within the umi55 ecosystem.
Access, correct, export, or request deletion of your data at any time. Submit your request to [email protected] and receive a substantive response within 30 calendar days.
Your BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay credentials are tokenized by PCI-DSS-compliant processors. Full account numbers are never stored on umi55 servers.
We retain your data only as long as legally required or operationally necessary. Our published retention schedule tells you exactly how long each category of data is kept and why.
In the unlikely event of a confirmed data breach, we will notify all affected members by email within 72 hours and take immediate steps to contain and remediate the incident.
Your privacy is protected by design at umi55. Explore our full range of games — from live sports betting and slots to daily togel draws and live casino tables — with confidence that your data is secure.