lumba Platform Privacy Notice and Data Handling Guidelines

This page describes what we collect when you use lumba and how we keep that data protected while operating in jurisdictions where local law permits our services.

We explain the categories of personal data we process. Our explanation covers account registration, deposits and withdrawals, identity verification, session logs, and support interactions.

We outline how we use payment integrations such as DANA and e-wallet and how those integrations affect the data flows for transactions from cities such as Jakarta

Our data we collect and why

We collect contact details when you provide an email address or phone number to create or verify an account on lumba.

We collect identity documents when you submit KYC documents for account verification and withdrawal processing.

We collect session and device data when you access lumba to help secure accounts, detect abuse, and support troubleshooting.

Our use of data

We use contact details to send transactional messages about account verification, deposit confirmations, and support ticket updates on lumba.

We use identity documents to verify identity for account access and to meet legal and payment-provider obligations before processing withdrawals.

We use transaction records to reconcile payments with our payment partners and to validate withdrawal instructions through supported payment rails such as mobile banking and local payment.

Our third-party processing and storage

We share necessary data with payment processors and banking partners to complete deposits and withdrawals for lumba accounts.

We engage third-party identity verification vendors to compare submitted documents against public records when required for KYC checks.

We use cloud hosting and backup services. Our servers may sit outside your jurisdiction depending on operational needs and service availability for lumba.

Our security measures

We apply technical controls to protect data in transit and at rest for lumba systems.

We enforce access controls and regular audits for service accounts that handle sensitive information.

We run monitoring to detect and respond to suspected incidents affecting lumba data.

Our policy on rights, cookies and contact

We provide mechanisms for you to request access to and correction of your personal information held by lumba.

We respond to verifiable requests to update or delete personal data in accordance with applicable local law and our retention schedules.

We describe the main categories of cookies below:

• We use essential cookies to maintain authentication and secure sessions on lumba.
• We use preference cookies to save language and display settings.
• We use analytics cookies to gather anonymous usage data for improving lumba services.

We provide a simple account-recovery flow for users who lose access. Our support team handles KYC review and will outline required documents and expected response windows for lumba support tickets.

We publish our contact channels for privacy queries and support. Our team is reachable through the support section in your account and through the lumba help centre.

We highlight local context where relevant to operations. Our handling practices may reflect public holidays such as Idul Fitri or Idul Adha and scheduled events like Liga 1 or Piala Indonesia when operational staffing for lumba support may vary.

Our summary recap follows.

We collect only the data needed to verify identity, process payments, and provide support for lumba accounts.

We share data with payment partners and processors only as required to process transactions and to comply with legal obligations.

• We operate where local law permits lumba services and we apply local compliance requirements accordingly.