Security

Vulnerability Disclosure Policy

The security of our customers, suppliers, affiliates, creators, partners, and platform systems is extremely important to BALI WATER SPORTS. We continuously work to maintain platform integrity, operational security, fraud prevention measures, and responsible handling of customer information.

Despite ongoing efforts, vulnerabilities or security issues may still occur. If you believe you have discovered a security vulnerability, technical weakness, or platform-related issue, we strongly encourage responsible disclosure so appropriate measures can be taken as quickly as possible.

How to Report a Vulnerability

To report a security issue, vulnerability, fraud concern, or technical exploit, please contact us through our designated security contact channels.

When submitting a report, please include:

  • A detailed description of the issue
  • Step-by-step instructions to reproduce the vulnerability
  • Relevant screenshots, URLs, or technical details where applicable
  • The potential impact of the issue

BALI WATER SPORTS will review all legitimate reports and respond within a reasonable timeframe.

Responsible Disclosure

While investigating or verifying vulnerabilities, you must not:

  • Access, alter, or destroy data belonging to other users
  • Exploit vulnerabilities beyond what is reasonably necessary to demonstrate the issue
  • Perform disruptive attacks, spam, or service interruptions
  • Publicly disclose vulnerabilities before remediation efforts are completed
  • Use discovered vulnerabilities for commercial, fraudulent, or malicious purposes

We appreciate responsible security research and will work in good faith with individuals reporting legitimate issues.

Legal Protection

BALI WATER SPORTS will not initiate legal action against individuals who report vulnerabilities responsibly and in good faith while complying with this disclosure policy and applicable laws.

Bug Bounties & Security Cooperation

BALI WATER SPORTS does not currently operate a public bug bounty program.

However, in cases involving significant vulnerabilities or meaningful security contributions, we may consider discretionary rewards, consulting arrangements, or further security cooperation at our sole discretion.

Fraud & Abuse Reporting

To report fraud, suspicious transactions, unauthorized activity, supplier abuse, account misuse, or platform-related security concerns, please contact:

Security & Fraud Contact:
aurorafxtech@gmail.com

General Support:
info@baliwatersports.com

Platform Safety & Security

BALI WATER SPORTS maintains internal monitoring, fraud prevention, moderation, and operational security procedures intended to support:

  • Customer protection
  • Supplier accountability
  • Booking integrity
  • Platform safety
  • Abuse prevention
  • Unauthorized activity detection

Security measures may include manual review processes, automated monitoring systems, account verification procedures, and transaction risk assessments where appropriate.