Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected by mbg366 through our website (mbg366.cam), mobile applications, customer support channels, and any related services. It governs how we handle information about Indonesian residents and users who interact with our platform.

mbg366 operates as an online gaming platform offering casino games, sports betting, togel lottery markets, live dealer experiences, and related entertainment services. To provide these services securely and legally, we must collect and process certain personal information about our users.

This policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of mbg366.

2. Data Controller

mbg366 is the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data and are accountable for its protection.

You can contact our Data Protection Officer at any time regarding privacy matters:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: Within 7 business days for standard inquiries, within 30 days for formal data subject requests

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, make deposits, verify your identity, or contact support, you provide us with the following personal data:

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, preferred currency (Indonesian Rupiah), username, and password (encrypted)
• Identity Verification (KYC) Documents: Government-issued ID (Indonesian National ID / KTP, Passport, or Driver's License), selfie photograph holding your ID, proof of address (utility bill, bank statement)
• Payment Information: Bank account details (bank name, account holder name, account number), e-wallet identifiers (OVO, DANA, GoPay account details), transaction history
• Communications: Messages sent through live chat, emails to support, feedback forms, and complaint submissions

3.2 Information Collected Automatically

When you use mbg366, we automatically collect certain technical and behavioral data:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, games played, bet history, deposit and withdrawal activity, session duration, click patterns, feature usage
• Location Data: Approximate geographic location derived from IP address (city-level, not precise GPS coordinates)
• Cookies & Tracking Technologies: See Section 10 for detailed information about our use of cookies

3.3 Information from Third Parties

We may receive limited data from third-party sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA) confirm transaction status and account holder names
• KYC verification services validate identity documents against government databases
• Fraud prevention partners provide risk scores to detect suspicious activity

4. How We Use Your Data

mbg366 processes your personal data for the following purposes:

4.1 Service Provision

• Creating and managing your account
• Processing deposits, withdrawals, and financial transactions
• Enabling gameplay on casino games, sports betting, togel lottery, and live dealer tables
• Calculating winnings, losses, and account balances
• Awarding bonuses, promotions, and loyalty rewards

4.2 Legal & Regulatory Compliance

• Verifying your age (21+ requirement) and identity through KYC procedures
• Preventing money laundering, fraud, and other illegal activities
• Complying with international gaming license obligations
• Responding to lawful requests from government authorities or law enforcement

4.3 Security & Fraud Prevention

• Detecting and preventing unauthorized account access, bonus abuse, and multiple account registration
• Monitoring betting patterns for suspicious activity or collusion
• Protecting against cyber attacks, data breaches, and system manipulation

4.4 Customer Support

• Responding to your inquiries via live chat, email, or phone
• Resolving disputes, complaints, and technical issues
• Providing responsible gaming support and self-exclusion assistance

4.5 Service Improvement & Personalization

• Analyzing gameplay data to improve game selection and user experience
• Tailoring promotional offers based on your preferences and activity (only with your consent)
• Conducting market research and platform performance analytics

4.6 Marketing Communications (Opt-In Only)

• Sending promotional emails about new games, bonuses, and special events (you can unsubscribe anytime)
• Notifying you about important service updates, security alerts, or policy changes (mandatory communications)

5. Legal Basis for Processing

Under international data protection law, we must have a lawful basis for processing your personal data. mbg366 relies on the following legal grounds:

• Contractual Necessity: Processing is essential to provide the services you requested when you registered an account and accepted our Terms & Conditions (account management, payment processing, gameplay).
• Legal Obligation: Processing is required to comply with gaming licenses, anti-money laundering regulations, age verification laws, and court orders.
• Legitimate Interests: Processing is necessary for fraud prevention, security monitoring, and service improvement, balanced against your privacy rights.
• Consent: For marketing communications and optional data processing (e.g., personalized game recommendations), we obtain your explicit consent, which you may withdraw at any time.

6. Data Sharing & Third-Party Disclosure

6.1 When We Share Your Data

mbg366 does not sell your personal data to third parties for marketing purposes. We only share your information in the following limited circumstances:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and other payment providers receive necessary transaction details to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and other studios receive anonymized gameplay data for technical operation and RNG auditing. They do not receive your personal identification details.
• KYC Verification Services: Third-party identity verification platforms validate your documents against government databases to prevent fraud and ensure legal compliance.
• Legal & Regulatory Authorities: We disclose information when required by law, court order, or legitimate government request (e.g., law enforcement investigations, tax audits, licensing authority inquiries).
• Professional Advisors: Lawyers, accountants, and auditors bound by confidentiality obligations may access data as necessary for legal and financial compliance.

6.2 International Data Transfers

Some of our service providers (payment processors, game studios, cloud hosting) are located outside Indonesia. When we transfer your data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by international data protection authorities
• Verification that the recipient country provides adequate data protection laws
• Technical safeguards such as encryption during transit and storage

7. Data Security Measures

mbg366 implements industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (minimum 256-bit encryption). Passwords are hashed using bcrypt or Argon2 algorithms.
• Access Controls: Personal data is accessible only to authorized mbg366 employees and contractors who require it for their job functions. Access is logged and monitored.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security, redundant backups, and 24/7 monitoring. Firewalls and intrusion detection systems protect against cyber attacks.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate weaknesses.
• Employee Training: All staff undergo data protection and security awareness training to prevent human error and insider threats.

While we implement robust safeguards, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect unauthorized access.

8. Data Retention

mbg366 retains your personal data only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law:

• Active Accounts: Personal data, transaction records, and gameplay history are retained while your account remains active and for a reasonable period afterward to handle disputes or queries.
• Closed Accounts: After voluntary account closure, we retain core identification data (name, date of birth, ID documents) and financial records for 7 years to comply with anti-money laundering regulations and tax laws.
• Marketing Data: If you unsubscribe from marketing emails, we remove you from promotional lists within 30 days but retain a suppression record to prevent re-contact.
• Legal Holds: If your data is subject to litigation, regulatory investigation, or unresolved disputes, we retain it until the matter is concluded.

After retention periods expire, personal data is securely deleted or anonymized so it can no longer be linked to you.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you, including account details, transaction history, and communication records.
• Right to Rectification: Request correction of inaccurate or incomplete personal data (e.g., updating your address or phone number).
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention obligations (we cannot delete data required for AML compliance or ongoing disputes).
• Right to Restriction: Request that we temporarily limit processing of your data in certain circumstances (e.g., while disputing data accuracy).
• Right to Data Portability: Receive your personal data in a structured, machine-readable format (CSV or JSON) to transfer to another service provider.
• Right to Object: Object to processing based on legitimate interests (e.g., marketing analytics) or request opt-out of direct marketing.
• Right to Withdraw Consent: Withdraw consent for optional processing activities (e.g., personalized recommendations) without affecting the lawfulness of prior processing.

To exercise any of these rights, email [email protected] with "Privacy Rights Request" in the subject line. Include your full name, registered email address, and specific request. We will respond within 30 days and may require identity verification to prevent fraudulent requests.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit mbg366.cam. They help us recognize your browser, remember your preferences, and provide a seamless experience across sessions.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for account login, session management, and security. Cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymized data about page load times, error rates, and feature usage to optimize platform performance.
• Functional Cookies: Remember your language preference, currency selection, and game favorites for convenience.
• Targeting/Advertising Cookies: Track browsing behavior to deliver personalized bonus offers and game recommendations (only with consent).

10.3 Managing Cookies

You can control cookies through your browser settings (Chrome, Firefox, Safari, Edge all provide cookie management options). Note that disabling essential cookies may prevent you from logging in or using key features.

11. Third-Party Services & Links

mbg366 integrates third-party services (payment gateways, game providers, live chat widgets) that may collect their own data subject to their privacy policies. We encourage you to review their policies:

• Payment processors (BCA, BRI, DANA, OVO) handle financial data per their banking/e-wallet terms
• Game studios (Pragmatic Play, Evolution Gaming) process gameplay data per their software licenses
• Customer support tools may use session recordings for quality assurance

mbg366 is not responsible for third-party data practices. Links to external websites (partner promotions, regulatory bodies) are provided for convenience only and are governed by their respective privacy policies.

12. Policy Updates

mbg366 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent notice on the mbg366.cam homepage
• In-app notification upon your next login

The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Your continued use of mbg366 after modifications constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data subject requests, or concerns about how we handle your personal information, contact mbg366's Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Website: https://mbg366.cam
• Live Chat: Available 24/7 (click the chat icon on any page)

We aim to respond to all privacy inquiries within 7 business days. For formal data subject requests (access, deletion, portability), we will respond within the legally mandated 30-day period.