Legal

Privacy Notice

Last updated 22 October 2026

This notice explains what personal information Bunku collects, why, who it is shared with, how long it is kept, and the rights you have. It applies to bunkuentertainment.com, our account emails and our membership.

1. Who is responsible

Abraxas Technologies (Pty) Ltd (registration number K2025597811), 50 Long St, Cape Town City Centre, Cape Town, 8000, South Africa, telephone +27 63 874 5569, is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) and the controller under the EU and UK General Data Protection Regulation (GDPR), where they apply.

Our Information Officer is Wendy Morency. Her registration with the Information Regulator is pending. Contact: privacy@bunkuentertainment.com.
Where Bunku is offered. Bunku accounts and membership are not yet offered to people who live in the European Union, the European Economic Area or the United Kingdom. If you tell us at sign-up that you live there, we do not open an account and we do not keep the details you entered.
Visitors from the EU, EEA or UK. Although we do not offer accounts or membership there, the website remains technically reachable. If you visit without an account from those regions, our servers log your IP address and related technical data as described in section 2 (server logs). We process that limited data on the basis of our legitimate interests in site security and stability, keep it only for the short period in section 7, and do not use it for marketing or profiling. We may block access from those regions in future.

2. What we collect

Account: email address, username, display name, password (stored only as a one-way hash), the country you live in, profile details you choose to add, and whether you confirmed your email.
Consent records: the version of the terms you accepted, when, and your confirmation that you are 18 or older.
Sign-in and security: the devices you sign in from (IP address and browser type) and a record of sign-ins, used to keep your account safe.
What you do on Bunku, where you use those features: titles you watch and how far you got, likes, comments, follows, playlists and watch-later lists, and live chat messages.
Membership and billing (when Bunku+ opens): your plan, invoices, amounts, and whether and when they were paid. Card details go straight to our regulated payment provider; we never see or store your full card number.
Creators: the titles, audio, images and live streams you upload, and the details you give about them.
Messages: what you write to us, for example to support.
Technical: server logs of requests (IP address, page requested, time, browser), kept briefly for security and to fix faults.

We do not collect special personal information (such as health, religion or biometric data) on purpose. Please do not include it in comments or messages.

What you must give us. To open an account you must give us an email address, a username, a password, the country you live in and confirmation that you are 18 or older; without them we cannot open an account. Everything else in your profile is optional. You can watch free titles without giving us any of this.

3. Why we use it, and on what basis

To run your account and give you the service (performing our agreement with you): sign-in, playback, playlists, comments, membership, invoices and account emails.
To keep Bunku safe and lawful (our legitimate interests and legal obligations): preventing spam and fraud, enforcing our terms, handling copyright complaints, and keeping records the law requires.
To help you find titles (our legitimate interest): lists such as trending titles are based on overall viewing on Bunku, not on a profile of you. No decision that has legal or similarly significant effects on you is made solely by automated means.
Marketing emails only if you opt in; every marketing email has an unsubscribe link. Account emails (confirmation, password, invoices, membership changes) are part of the service and are not marketing.

4. Cookies and similar technology

We use only what is needed to keep you signed in: a sign-in token kept in your browser and a secure sign-in cookie. We do not use advertising cookies or third-party tracking cookies.

We do not sell personal information. We share it only with:

Service providers (operators) who process it for us under written contracts that require them to keep it secure and confidential: our hosting provider (Contabo GmbH, servers in Lauterbourg, France), our email delivery, our billing system and our regulated payment provider (when Bunku+ opens).
Other users, for what you choose to make public: your username, display name, profile, public playlists, comments and the titles you upload.
Authorities, courts or a person with a valid legal claim, where the law requires it or to protect people's safety or our legal rights.
A buyer or successor of Bunku, under the same protections, if the business is ever transferred.

6. International transfers

Our servers are in Lauterbourg, France, in the European Union, whose data protection law (the GDPR) gives protection substantially similar to POPIA. Today we use no service provider that processes personal data outside South Africa or the EU/EEA. Before we do (for example our payment provider when Bunku+ opens), we will put appropriate safeguards in place, such as the European Commission's standard contractual clauses (and, where the UK GDPR applies, the UK International Data Transfer Agreement or Addendum) or the provider's binding corporate rules, or rely on the transfer being necessary to perform our agreement with you. You can ask for a copy of the safeguard at privacy@bunkuentertainment.com. No transfer takes place unless it complies with section 72 of POPIA and, where they apply, Chapter V of the GDPR and the UK GDPR. If we add features that use outside AI model providers, we will update this notice before they go live.

7. How long we keep it

Open accounts: while your account is open.
Closed accounts: we delete or anonymise your personal information within 60 days after your account closes (we start 30 days after closing, so you can change your mind), except records we must keep by law.
Sign-ups never confirmed: deleted 30 days after the confirmation email was sent.
Invoices and billing records: kept for as long as tax and company law require (generally 5 to 7 years), then deleted.
Server logs: capped in size and overwritten automatically, normally within about three weeks.

Before you close your account you can download a copy of your information from Settings.

8. Your rights

You can ask us to:

give you access to the personal information we hold about you (Settings, Download my data, gives you a copy straight away);
correct or update it;
delete it, or restrict how we use it;
stop using it for direct marketing, or object to other uses based on our legitimate interests;
give it to you in a portable format, or send it to another provider (GDPR);
withdraw a consent you gave, without affecting what we did before.

Write to privacy@bunkuentertainment.com. We reply within 30 days and may ask you to confirm who you are. You can also complain to the Information Regulator of South Africa (inforegulator.org.za) or, in the EU or UK, to your local data protection authority (in the UK, the Information Commissioner's Office).

9. Children

Bunku is intended for adults and accounts are for people aged 18 and over. Viewing without an account involves only the server logs described above. We do not knowingly collect personal information from children. If you believe a child has opened an account, tell us and we will close it and delete their information.

10. Security

We protect personal information with encrypted connections (HTTPS), one-way hashing of passwords, and access controls limited to people who need them. If a security compromise affects your personal information, we will tell you and the Information Regulator as POPIA requires.

11. Changes to this notice

We may update this notice. For changes that matter we give you at least 30 days' notice by email or on the site. The date at the top shows the latest version.

12. Contact

Information Officer, Abraxas Technologies (Pty) Ltd, 50 Long St, Cape Town City Centre, Cape Town, 8000, South Africa. Telephone +27 63 874 5569. Email privacy@bunkuentertainment.com.