Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how mbak2d ("we", "us", "our", or "the Platform") collects, uses, processes, stores, shares, and protects your personal information when you access or use our online gaming services available at mbak2d.cam. This Privacy Policy applies to all users of our Platform, including visitors, registered account holders, and former customers.

At mbak2d, we recognize that privacy is a fundamental right and that protecting your personal data is essential to maintaining your trust. We are committed to handling your information responsibly, transparently, and in accordance with applicable data protection laws and international best practices, including principles derived from the General Data Protection Regulation (GDPR) and other recognized privacy frameworks.

By accessing or using mbak2d, you acknowledge that you have read, understood, and consent to the data collection, processing, and usage practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of our Platform immediately and refrain from creating an account.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding privacy matters, the provisions of this Privacy Policy shall prevail.

2. Data Controller and Contact Information

mbak2d acts as the data controller for the personal information we collect and process through our Platform. As the data controller, we determine the purposes for which and the manner in which your personal data is processed, and we are responsible for ensuring that such processing complies with applicable privacy laws.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact us through the following channels:

• Privacy Contact Email: [email protected] (displayed as plain text for reference)
• Customer Support: Available 24/7 via live chat on our Platform
• Written Correspondence: For formal privacy-related inquiries or requests to exercise your data protection rights, please contact us via email with "Privacy Request" in the subject line

We aim to respond to all privacy-related inquiries within 30 days of receipt. For urgent matters requiring immediate attention, please use our live chat service.

3. Information We Collect

mbak2d collects various categories of personal information necessary to provide our gaming services, ensure platform security, comply with legal obligations, and improve user experience. The types of information we collect include:

3.1 Information You Provide Directly

Account Registration Information

When you create an account on mbak2d, we collect the following mandatory information:

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address (street address, city, postal code)
• Username and password (password is encrypted and not stored in readable format)
• Currency preference (Indonesian Rupiah)

Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and verify your identity before processing withdrawals, we collect:

• Government-issued identification documents (Indonesian KTP / Kartu Tanda Penduduk)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Selfie photographs holding identification documents
• Additional documentation as required for enhanced verification (source of funds, employment information)

Financial Transaction Information

When you deposit funds or request withdrawals, we collect:

• Bank account details (account holder name, bank name, account number for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• E-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers)
• Transaction amounts, dates, and payment method preferences
• Payment confirmation receipts and transaction references

Communications with mbak2d

We collect and store records of your communications with our customer support team, including:

• Live chat transcripts
• Email correspondence
• Phone call recordings (with notice provided before recording)
• Feedback, complaints, and dispute resolution records

3.2 Information Collected Automatically

Device and Technical Information

When you access mbak2d, we automatically collect technical information about your device and how you interact with our Platform:

• IP address and approximate geographic location
• Device type, operating system, and browser type/version
• Screen resolution and device identifiers
• Referring website URL and pages visited on our Platform
• Session duration, clicks, and navigation patterns
• Date and time stamps of access

Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance functionality, analyze usage patterns, and personalize your experience. For detailed information about our cookie practices, please see Section 10 of this Privacy Policy.

Gaming Activity Information

We automatically collect detailed records of your gaming activities, including:

• Games played, bet amounts, and outcomes
• Betting patterns and preferences (sports betting on BRI Liga 1, togel lottery, bandar bola football markets, slot games, live casino)
• Bonus claims and wagering progress
• Win/loss statistics and account balance changes
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion)

4. How We Use Your Information

mbak2d processes your personal information for the following specific purposes, each based on a legitimate legal ground:

4.1 Service Provision and Account Management

Legal Basis: Performance of contract and legitimate business interests

• Creating and maintaining your user account
• Processing deposits, bets, and withdrawal requests
• Providing access to sports betting, casino games, slots, and other gaming products
• Calculating and crediting winnings to your account balance
• Administering bonuses, promotions, and loyalty programs
• Providing customer support and responding to inquiries

4.2 Legal and Regulatory Compliance

Legal Basis: Legal obligation and legitimate business interests

• Verifying your identity, age (21+ requirement), and eligibility to use our services
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Maintaining transaction records as required by financial regulations
• Responding to legal processes, court orders, or government requests
• Reporting suspicious activities to relevant authorities

4.3 Security and Fraud Prevention

Legal Basis: Legitimate business interests and protection of vital interests

• Detecting and preventing fraudulent activities, multi-accounting, bonus abuse, and collusion
• Monitoring betting patterns for signs of match-fixing or insider knowledge
• Protecting against unauthorized access, cyberattacks, and security breaches
• Investigating potential violations of our Terms & Conditions
• Maintaining audit trails for dispute resolution

4.4 Platform Improvement and Analytics

Legal Basis: Legitimate business interests

• Analyzing user behavior to improve platform functionality and user experience
• Testing new features, games, and payment methods
• Understanding player preferences to curate relevant gaming content
• Optimizing website performance, loading speeds, and mobile responsiveness
• Conducting market research and user satisfaction surveys

4.5 Marketing and Communications

Legal Basis: Consent (which you may withdraw at any time)

• Sending promotional emails about new games, bonuses, and special offers
• Providing personalized game recommendations based on your gaming history
• Notifying you about upcoming sports events (BRI Liga 1 matches, EPL fixtures, Champions League)
• Sharing news about platform updates and new features

Note: You may opt out of marketing communications at any time by adjusting your account preferences or clicking the "unsubscribe" link in promotional emails. Opting out of marketing does not affect essential service communications (transaction confirmations, security alerts, policy updates).

4.6 Responsible Gaming Monitoring

Legal Basis: Legitimate business interests and legal obligation

• Monitoring gaming behavior for signs of problem gambling
• Implementing and enforcing deposit limits, loss limits, and session time limits
• Processing self-exclusion requests and maintaining exclusion databases
• Providing responsible gaming resources and support referrals

5. How We Share Your Information

mbak2d does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with specific categories of third parties under the following circumstances:

5.1 Service Providers and Business Partners

We share necessary information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals through BCA, BRI, BNI, Mandiri, e-wallets (OVO, DANA, GoPay), and other payment methods
• Game Providers: Third-party gaming software suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) receive limited data necessary for game functionality and fairness verification
• Identity Verification Services: KYC verification partners who validate identification documents and screen against fraud databases
• Customer Support Tools: Live chat software providers and email service platforms used to deliver support services
• Analytics Providers: Web analytics services that help us understand usage patterns (data is typically anonymized or pseudonymized)

All third-party service providers are bound by contractual obligations to process your data only for specified purposes, maintain confidentiality, and implement appropriate security measures.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when:

• Required by applicable law, regulation, legal process, or enforceable governmental request
• Necessary to comply with anti-money laundering (AML) or counter-terrorism financing (CTF) obligations
• Responding to valid subpoenas, court orders, or other legal demands
• Reporting suspicious transactions or activities as mandated by financial regulations

5.3 Business Transfers

In the event mbak2d undergoes a business transition such as a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the successor organization. We will notify you via email and prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for us to do so.

6. Data Security Measures

Protecting your personal information is a top priority for mbak2d. We implement comprehensive technical and organizational security measures designed to safeguard your data against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols, the same technology used by major banks
• Secure Servers: Personal data is stored on secure servers located in protected data centers with 24/7 monitoring, redundant power supplies, and physical access controls
• Firewalls and Intrusion Detection: Multi-layered firewall systems and intrusion detection/prevention systems monitor network traffic for suspicious activity
• Password Security: User passwords are hashed using strong cryptographic algorithms (bcrypt) and are never stored in plain text or reversible format
• Regular Security Updates: All systems are regularly updated with the latest security patches and vulnerability fixes

6.2 Organizational Security Measures

• Access Restrictions: Personal data access is restricted to authorized employees and contractors on a need-to-know basis, subject to strict confidentiality agreements
• Employee Training: All staff members receive regular training on data protection principles, security protocols, and privacy best practices
• Incident Response Plan: We maintain a documented incident response plan to quickly detect, contain, and remediate security breaches
• Third-Party Audits: Independent security firms conduct regular penetration testing and security audits to identify and address vulnerabilities
• Data Minimization: We collect and retain only the personal information necessary for specified purposes and delete data when no longer needed

6.3 Your Role in Security

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password combining uppercase and lowercase letters, numbers, and special characters
• Never share your password with anyone, including individuals claiming to be mbak2d staff
• Log out after completing your gaming session, especially on shared or public devices
• Enable two-factor authentication if available in your account settings
• Immediately report any suspicious account activity or unauthorized access to our support team
• Keep your registered email address secure, as it is used for account recovery

7. Data Retention and Deletion

mbak2d retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

7.2 Account Deletion

When you close your account or when we close an inactive account, we follow a structured deletion process:

1. Immediate Actions: Your account is marked as closed and you can no longer log in or access services
2. 30-Day Grace Period: Your account data remains recoverable for 30 days in case you change your mind (you may contact support to reactivate within this period)
3. Archival Period: After 30 days, most personal data is moved to archival storage where it is retained for legal compliance periods (typically 7 years for financial records)
4. Final Deletion: Once retention periods expire and no legal holds exist, your data is permanently deleted from all systems including backups

Note: Certain information may be retained in anonymized or aggregated form for statistical purposes, research, and platform improvement, in which case it can no longer be associated with you as an individual.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request. Your first data access request each year is provided free of charge; subsequent requests may incur a reasonable administrative fee.

8.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings. For changes to verified information (name, date of birth), contact our support team with supporting documentation.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may be required to retain certain information to comply with legal obligations (AML/KYC records must be retained for 7 years).

8.4 Right to Restrict Processing

You may request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or when you have objected to processing pending verification of legitimate grounds.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (typically CSV or JSON), and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal data when such processing is based on legitimate interests. You may also object to direct marketing communications at any time by adjusting your communication preferences or clicking "unsubscribe" in marketing emails.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, registered email address, and a clear description of your request. We may require verification of your identity before processing your request to protect against fraudulent requests.

9. Cookies and Tracking Technologies

mbak2d uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including session management, authentication, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use our Platform, helping us identify and fix technical issues and improve performance.
• Functionality Cookies: Remember your preferences (language, currency, username) to provide a personalized experience.
• Analytics Cookies: Help us understand visitor behavior through anonymized data, allowing us to optimize our Platform.

9.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect your ability to use certain features of our Platform, and some services may not function properly.

10. International Data Transfers

While mbak2d primarily serves Indonesian players, some of our service providers and data storage facilities may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Using service providers that comply with internationally recognized data protection standards
• Implementing standard contractual clauses approved by data protection authorities
• Ensuring adequate levels of data protection in recipient countries
• Conducting due diligence on third-party processors' security practices

By using mbak2d services, you acknowledge and consent to the international transfer of your personal information as described above.

11. Children's Privacy

mbak2d is strictly an adult-oriented service. We do not knowingly collect personal information from individuals under 21 years of age. Our Terms & Conditions explicitly prohibit use of our Platform by anyone under 21.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information from our systems and close the associated account. Parents or guardians who believe their child has provided personal information to mbak2d should contact us immediately at [email protected].

We implement age verification measures including mandatory KYC document submission requiring government-issued identification to confirm all users meet the minimum age requirement.

12. Changes to This Privacy Policy

mbak2d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes to this Privacy Policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to your registered email address
• Displaying a prominent notice on our Platform homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of mbak2d after any modifications to this Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes, you must discontinue use of the Platform and may close your account by contacting customer support.

13. Contact Us and Filing Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact us:

Primary Contact

• Email: [email protected] (displayed as plain text)
• Subject Line: Use "Privacy Inquiry" or "Data Protection Complaint" for priority handling
• Live Chat: Available 24/7 on our Platform for urgent matters

Complaint Resolution Process

We take all privacy complaints seriously and are committed to resolving issues promptly and fairly:

1. Initial Response: We will acknowledge your complaint within 3 business days
2. Investigation: Our privacy team will thoroughly investigate your concerns within 30 days
3. Resolution: We will provide a detailed written response explaining our findings and any corrective actions taken

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with your local data protection authority or supervisory body responsible for enforcing data protection laws in your jurisdiction.