Reference

How tumi88 Handles Your Personal Data

At tumi88, your personal data belongs to you — we collect only what is needed to operate your account, process transactions via DANA, OVO, GoPay or QRIS, and…

Encrypted account dataDANA, OVO, GoPay, QRIS transaction recordsCookie consent controlsRight to request deletion24/7 privacy contact channel
tumi88 How tumi88 Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Our Privacy Team

If you want to review the data we hold on your account, request a correction, or ask us to remove your information, our privacy team is…

Live Chat Open the chat widget from your account dashboard at any hour.
Email Support Send your privacy request to our dedicated address at [email protected].
In-App Help Desk Navigate to Account → Help → Privacy Request inside the tumi88 app.
DATA HANDLING STANDARDS

Six Ways We Protect Your Privacy

Privacy protection at tumi88 is not a single checkbox — it is a set of operational practices applied at every layer of your account.

End-to-End Encryption

All data transmitted between your device and our servers — including QRIS payment tokens and account credentials — is encrypted using TLS 1.3. No payment detail travels in plain text at any stage of your session.

Cookie Consent Control

When you first visit tumi88.xyz, a cookie banner lets you accept, reject or customise non-essential cookies. Your choice is saved to your browser and respected on every return visit without further prompts.

Account Security Alerts

Any login from an unrecognised device triggers an automatic email alert to your registered address. If you did not initiate the login, a single tap on the alert link locks your account and notifies our security team immediately.

Data Retention Schedule

We keep active account data for as long as your account is open. After closure, personal identifiers are anonymised within 90 days, while transaction records tied to DANA, OVO or GoPay payments are archived for five years per standard practice.

Third-Party Data Sharing Limits

We share data with payment processors, fraud-detection partners and our hosting provider only. Each third party signs a data-processing agreement that prohibits them from using your information for any purpose beyond the contracted service.

Right to Access and Correction

You can request a full copy of the personal data we hold on your account at any time via the in-app help desk or [email protected]. Corrections to inaccurate details are applied within 14 calendar days of a verified request.

Your Privacy Questions Answered

Below are the questions we receive most often about how tumi88 handles personal data, cookies and account security. If your question is not covered here, reach out through live chat or email — our privacy team is available 24 hours a day, every day of the week, including public holidays in Indonesia.

We collect your name, email, phone number, and the wallet or QRIS reference tied to your payment method. Device identifiers and session timestamps are also logged purely for account security and fraud-prevention purposes.

We retain only the transaction reference numbers provided by DANA or OVO — not your full wallet credentials. Those reference numbers are stored in our encrypted transaction logs for a minimum of five years, as required by standard financial practice.

Yes. Submit a data-access request via Account → Help → Privacy Request in the app, or email [email protected]. After we verify your identity, we will send a full data export to your registered email within 14 calendar days.

Send a deletion request to [email protected] or use the in-app help desk. We will anonymise your personal identifiers within 90 days of account closure, though transaction records are retained for five years where local law requires.

We use essential cookies (session, authentication) and optional analytics cookies. You can reject or customise optional cookies through the consent banner that appears on your first visit. Your preference is stored and honoured on all future visits.

No. We do not sell, rent or share your personal data with any marketing or advertising company. Data is only passed to payment processors like GoPay or DANA, our fraud-detection partner, and our hosting provider, under strict data-processing agreements.

Tap the lock link in the security alert email you receive automatically, which freezes your account instantly. Then contact our live chat team — available 24/7 — so our security team can investigate and restore access safely after verification.