lumi4d is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains exactly what we collect, why we collect it, how we use it, and the rights you hold over your information.
Last Updated: 1 January 2026Your Privacy Matters: lumi4d operates the Platform at https://lumi4d.cam and acts as the data controller for all personal information collected through it. This Privacy Policy is incorporated by reference into our Terms & Conditions. By registering an Account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any provision of this Policy, you must discontinue your use of the Platform immediately.
In this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Platform" | The lumi4d website at https://lumi4d.cam, including all subpages, features, games, and services. |
| "We", "Us", "Our" | lumi4d, the operator of the Platform and data controller of all personal data collected through it. |
| "You", "Player", "User" | Any natural person who visits, registers on, or uses the Platform for any purpose. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, phone number, financial details, device identifiers, and behavioral data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction. |
| "KYC" | Know Your Customer — the identity verification process requiring documentary evidence of a Player's identity and, in some cases, source of funds. |
| "Third Party" | Any natural or legal person other than lumi4d and the Player, including payment processors, game studios, analytics providers, and regulatory authorities. |
| "Cookies" | Small text files placed on a Player's device by the Platform or third-party services embedded within it, used to store session data, preferences, and behavioral tracking information. |
This Privacy Policy applies to all Personal Data collected by lumi4d in connection with the operation of the Platform, regardless of whether you access the Platform from Indonesia or from any other location. It covers data collected through:
This Policy does not apply to the data practices of third-party websites that may be referenced within the Platform's content. lumi4d is not responsible for the privacy practices of any third-party service provider beyond the data-sharing restrictions described in Clause 7 of this Policy.
When you create a lumi4d Account, we collect the following information directly from you:
To comply with our anti-money laundering (AML) obligations and to process withdrawal requests, we collect:
When you make deposits or withdrawals through Indonesian payment channels, we collect:
lumi4d does not store full card numbers or CVV codes. Where card payments are accepted, payment card processing is handled entirely by PCI-DSS compliant third-party payment processors and no card data is held on lumi4d's servers.
We collect detailed records of your activity on the Platform, including:
Our servers and analytics systems automatically collect technical information when you access the Platform:
When you contact our customer support team, we retain records of:
lumi4d collects Personal Data through the following mechanisms:
| Collection Method | Data Types Collected |
|---|---|
| Direct submission by you | Registration forms, KYC document uploads, deposit/withdrawal requests, support contact forms, and promotional opt-ins. |
| Automated collection | Server logs, cookies, web beacons, JavaScript tracking pixels, and session replay tools embedded in the Platform. |
| Third-party data providers | Identity verification bureaus and AML screening databases used to cross-reference KYC submissions. |
| Payment processors | Transaction confirmation data returned by Indonesian bank transfer gateways and e-wallet APIs (OVO, DANA, GoPay, ShopeePay, LinkAja). |
| Game providers | Game session outcome data, RNG audit logs, and player round history returned by licensed game studios via API. |
lumi4d processes your Personal Data on one or more of the following legal grounds:
We use your registration and profile data to create, maintain, and secure your lumi4d Account; to verify your identity at registration and during subsequent KYC checks; to communicate account-related notices such as password resets, security alerts, and Account status changes; and to enforce our single-account policy across the Platform.
Financial data is used to process deposit transactions from your nominated Indonesian bank account or e-wallet, to execute withdrawal payments to your verified payment method, to detect and investigate potentially fraudulent or anomalous transactions, and to maintain auditable financial records as required by our AML compliance framework.
Gameplay and behavioral data are used to deliver the betting, casino, and togel lottery services you access on the Platform; to settle wagers correctly and credit or debit your Account accordingly; to calculate and apply bonus wagering requirement progress; and to provide personalized game recommendations where you have not opted out of such features.
lumi4d uses gameplay, session, and financial data to monitor for behavioral indicators of problem gambling, including sudden increases in deposit frequency, extended unbroken play sessions, repeated maximum-limit deposits within short timeframes, and rapid escalation of average stake sizes. Where such patterns are detected, our responsible gaming team may contact you proactively to offer self-management tools or support resources. For more information about these tools, please visit our Responsible Gaming page.
We process Personal Data as required to meet our obligations under applicable law, including: conducting AML screening against international sanctions lists and PEP (politically exposed persons) databases; reporting suspicious transactions to competent authorities where legally required; responding to valid legal process including court orders, regulatory inquiries, and law enforcement requests; and maintaining records required by our licensing authority for the duration mandated by that authority.
Where you have consented to receive promotional communications, we use your contact details and gameplay history to send you personalized bonus offers, free bet allocations, and promotional news relevant to your betting interests (for example, BRI Liga 1 promotions for players who regularly bet on Indonesian football, or Idul Fitri seasonal bonuses during Ramadhan). You may withdraw marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting our support team.
Aggregated and anonymized behavioral data is used to analyze Platform performance, identify user experience issues, test new features, and optimize the layout and content of the Platform. Where analytics involve non-anonymized data, this processing is carried out under our legitimate interests basis (see Clause 5).
To facilitate deposits and withdrawals through Indonesian payment channels, we share the minimum necessary financial and identity data with our contracted payment processing partners. These partners include operators of bank transfer gateways serving BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI, and e-wallet integration providers for OVO, DANA, GoPay, ShopeePay, and LinkAja. All payment processors are contractually bound to use your data solely for payment processing purposes and are prohibited from using it for their own marketing or analytics.
We share identity documents and personal details with contracted KYC verification bureaus and AML screening services to fulfill our compliance obligations. These providers are engaged under data processing agreements that restrict their use of your data to the specific verification tasks for which they are engaged.
To deliver casino and slot gaming experiences from licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, we pass a session token and account identifier to the relevant game studio when you launch a game. Game studios receive only the data necessary to initiate and manage your game session and are not provided with your full personal profile, payment details, or KYC documents.
lumi4d will disclose Personal Data to law enforcement agencies, regulatory bodies, courts, and other competent authorities where required to do so by applicable law, a valid court order, or a regulatory directive from our licensing authority. We will endeavor to notify you of any such disclosure request, to the extent permitted by law.
In the event of a merger, acquisition, asset sale, or restructuring of lumi4d's business, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, lumi4d will notify affected Players via their registered email address prior to any transfer and will ensure that the recipient entity assumes data protection obligations at least equivalent to those set out in this Policy.
lumi4d does not sell, rent, or commercially trade your Personal Data to third-party marketers, data brokers, or advertising networks. Any data sharing with third parties is limited to the operational purposes described in this Clause and is governed by contractual data protection obligations.
| Cookie Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, load balancing, and fraud prevention. Without these cookies, core Platform functionality cannot operate. | No — essential for service delivery |
| Functional | Storing your language preference, remembered login state, and display settings between sessions. | No — legitimate interest basis |
| Analytics | Measuring page traffic, session durations, feature usage rates, and error frequencies to improve Platform performance. | Yes — consent required |
| Marketing | Tracking promotional campaign effectiveness and attributing Platform registrations to specific marketing channels. | Yes — consent required |
Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period, ranging from 30 days for analytics cookies to 12 months for preference and authentication cookies. You can view and manage cookies stored on your device through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.
The Platform currently does not respond to browser-level "Do Not Track" signals. If you wish to limit tracking, you may manage your cookie preferences directly through your browser settings or by contacting our support team to withdraw analytics and marketing consent.
lumi4d retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of Account plus 5 years post-closure | AML compliance and licensing obligations |
| KYC documents | Duration of Account plus 5 years post-closure | Regulatory and legal compliance |
| Financial transaction records | 7 years from transaction date | AML and financial record-keeping regulations |
| Betting and gameplay history | 5 years from event date | Dispute resolution and licensing audit requirements |
| Customer support records | 3 years from last interaction | Complaint handling and quality assurance |
| Analytics and behavioral data | 13 months from collection date | Platform improvement under legitimate interests |
| Marketing consent records | 3 years from consent event or withdrawal | Consent compliance documentation |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with our data destruction procedures. Where a legal hold is in place (for example, during an ongoing investigation or legal proceeding), data will be retained until the hold is lifted, regardless of the standard retention period.
lumi4d implements a multi-layered security framework to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our key technical and organizational security measures include:
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, lumi4d will notify affected Players without undue delay and will take all reasonable steps to contain and remediate the breach.
lumi4d's primary data processing infrastructure is located in secure data centers serving the Asia-Pacific region. However, some of our third-party service providers — including certain game studios, analytics platforms, and KYC verification bureaus — may process data in jurisdictions outside Indonesia. Where such transfers occur, lumi4d ensures that appropriate safeguards are in place, including:
By using the Platform and accepting this Privacy Policy, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia as described above.
As a data subject, you hold the following rights in relation to your Personal Data processed by lumi4d. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days of receipt:
| Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all Personal Data we hold about you, along with information about how it is being used. |
| Right to Rectification | You may request correction of any inaccurate or incomplete Personal Data we hold about you. |
| Right to Erasure | You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. |
| Right to Restriction | You may request that we limit the processing of your Personal Data in certain circumstances, such as while an accuracy dispute is being resolved. |
| Right to Data Portability | You may request a structured, machine-readable copy of Personal Data you have provided to us directly, where processing is based on your consent or a contract. |
| Right to Object | You may object to processing based on our legitimate interests, including behavioral analytics and marketing profiling. |
| Right to Withdraw Consent | Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. |
Please note that certain rights are subject to exemptions. In particular, we may be required to retain certain data notwithstanding an erasure request, where retention is mandated by our AML compliance obligations, licensing requirements, or an ongoing legal proceeding.
The Platform is strictly intended for adults aged 21 years and over. lumi4d does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that an Account has been registered by or on behalf of a person under 21, we will immediately suspend the Account, delete associated Personal Data to the extent not required for regulatory compliance, and return any deposited funds to the originating payment method.
If you believe that a minor may have registered an Account on the Platform, please notify us immediately at [email protected] so that we can take prompt action.
The Platform may embed or reference third-party services, such as game studios, live streaming providers, and sports data feed operators, whose own privacy policies and data practices are independent of lumi4d's. The presence of third-party content within the Platform does not constitute an endorsement of that third party's privacy practices. We encourage you to review the privacy policies of any third-party services you interact with directly.
lumi4d is not responsible for the privacy practices, data security standards, or content of any third-party service, except to the extent that lumi4d has engaged that third party as a contracted data processor subject to the obligations described in Clause 7 of this Policy.
lumi4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. Material changes will be communicated to registered Players via email at least 7 days before the revised Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease use of the Platform and may request Account closure in accordance with the Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your Personal Data has been handled, please contact our Data Protection team using the details below:
Email: [email protected] — use subject line "Privacy Inquiry" or "Data Rights Request"
Response Time: We aim to acknowledge all privacy inquiries within 48 hours and to provide a substantive response within 30 calendar days.
Support Languages: English and Bahasa Indonesia — native-speaking agents available 24/7.
If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in the jurisdiction governing lumi4d's data processing operations.
Six core principles that define how lumi4d handles your personal data — applied consistently across every product, payment, and support interaction on the Platform.
All data transmitted between your device and lumi4d servers is protected by 256-bit SSL/TLS encryption. KYC documents and financial records are stored with AES-256 encryption at rest, ensuring your most sensitive information remains inaccessible to unauthorized parties at every stage of its lifecycle.
lumi4d collects only the Personal Data that is genuinely necessary for the specific purpose it serves. We do not collect information speculatively or build personal profiles beyond what is required for account management, payment processing, regulatory compliance, and platform improvement.
Your Personal Data is never sold, rented, or traded to third-party marketers or data brokers. Any data sharing with external parties is strictly limited to contracted service providers — payment processors, KYC bureaus, and game studios — who are bound by the same data protection standards we hold ourselves to.
You hold meaningful rights over your Personal Data at all times: access it, correct it, request its deletion, limit its processing, or port it to another service. Submit a data rights request to our support team and receive a substantive response within 30 days — no bureaucratic runaround.
Our infrastructure is protected by 24/7 intrusion detection, regular independent penetration testing, and strict access controls enforcing the principle of least privilege. In the event of a breach, affected Players are notified promptly and remediation begins immediately — no delays, no cover-ups.
When this Privacy Policy changes in a material way, we send registered Players a notification email at least 7 days before the revised Policy takes effect. The "Last Updated" date on this page is always current, so you can verify at a glance whether the Policy has been revised since your last review.
Our support team is available 24/7 to address any data privacy questions or to assist you in exercising your data rights. You can also review our Terms & Conditions, visit our Responsible Gaming page, or browse our FAQ for quick answers.