mbg55 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is issued by mbg55 and governs the collection, use, storage, and disclosure of personal data relating to individuals ("Members", "you") who access or use the mbg55 online betting platform available at mbg55.lat. By registering an account, making a deposit, placing a bet, or otherwise using any mbg55 Service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies to all mbg55 Services, including the Sportsbook, Live Casino, Slots, Crash Games, and Bandar Q verticals, as well as all supporting functions such as account registration, KYC verification, customer support, promotions, and payment processing. It applies regardless of the device or software used to access mbg55.lat.

This Policy should be read alongside the mbg55 Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to how your information is used in the context of account management and player protection.

Data Controller

For the purposes of this Privacy Policy, mbg55 acts as the data controller — the entity that determines the purposes and means of processing your personal data. mbg55 operates the platform at mbg55.lat as an internationally licensed online gaming operator.

As data controller, mbg55 is responsible for ensuring that personal data is collected and processed lawfully, fairly, and transparently, and that appropriate technical and organisational measures are in place to protect that data against unauthorised access, loss, destruction, or alteration.

If you have any questions about how mbg55 processes your personal data, or if you wish to exercise any of the rights described in Section 11 of this Policy, you may contact the mbg55 Data Protection team directly at the address set out in Section 14.

Data We Collect

mbg55 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of mbg55.lat, and from third-party service providers who assist in the delivery of our Services. The categories of data we collect are described in the table below.

mbg55 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (beyond photographic identity documents required for KYC), or health information, except where you voluntarily disclose health-related context in a responsible gaming self-exclusion request. Such disclosures are handled with heightened confidentiality.

How We Use Your Data

mbg55 uses the personal data it collects for the following specific purposes. Each purpose is tied to a legal basis, which is identified in Section 5.

• Account creation and management: To register your mbg55 account, assign your unique member ID, and maintain your account settings, preferences, and balance records.
• Identity verification (KYC): To verify your identity, confirm that you meet the 21+ age requirement, and comply with our anti-money laundering (AML) obligations. KYC is a mandatory step before any withdrawal can be processed.
• Transaction processing: To receive deposits from and issue withdrawals to your verified Indonesian bank account or e-wallet (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate IDR transaction records.
• Service delivery: To make our Sportsbook, Live Casino, Slots, Crash Games, and Bandar Q verticals available to you and to ensure they function correctly on your device.
• Fraud prevention and platform security: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering, match-fixing, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: To monitor for behavioural indicators of problem gambling and to enforce any self-exclusion, deposit limit, or cooling-off period you have activated. Where concerning patterns are detected, mbg55 may proactively contact you to offer support resources.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of your support history for quality assurance purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as those tied to Ramadhan, Idul Fitri, Imlek, or Indonesian Independence Day) by email, where you have not opted out of marketing communications. You may opt out at any time by contacting [email protected].
• Platform analytics and improvement: To analyse aggregated usage patterns, identify popular games and features, detect technical errors, and improve the overall quality and performance of mbg55.lat.
• Legal compliance: To comply with any applicable legal obligation, regulatory requirement, court order, or lawful request from a competent authority.

Legal Basis for Processing

mbg55 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

Where mbg55 relies on legitimate interests as the legal basis for processing, we have carried out an assessment to confirm that our interests are not overridden by your rights and freedoms. You may request a copy of that assessment by contacting us at [email protected].

Cookies & Tracking Technologies

mbg55.lat uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant promotional content. By continuing to use mbg55.lat after the cookie notice is displayed, you consent to the use of cookies in accordance with this Policy.

Types of Cookies Used:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable core features such as session authentication, bet-slip persistence, and account dashboard access. They cannot be disabled without breaking platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate mbg55.lat — which pages are visited most frequently, where users encounter errors, and how long sessions last. This information helps mbg55 improve the platform experience.
• Functionality Cookies: Used to remember your preferences such as language settings, preferred deposit method, and notification preferences so that you do not have to re-enter them on each visit.
• Marketing and Retargeting Cookies: Used to deliver promotional content that is relevant to your betting interests and usage history. These cookies may track your activity across sessions to build a usage profile for personalisation purposes. You may opt out of marketing cookies at any time via the cookie preference panel.

Most web browsers allow you to control cookie settings directly. Disabling cookies other than strictly necessary ones may impair certain features of mbg55.lat but will not prevent you from accessing your account or placing bets. Refer to your browser's help documentation for instructions on managing cookie preferences.

Data Sharing & Third Parties

mbg55 does not sell your personal data to any third party. Your data may be shared with a limited set of third-party service providers and partners solely to the extent necessary to deliver the Services described in this Policy. All third-party recipients are bound by data-processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to mbg55.

The categories of third parties with whom mbg55 may share your personal data are as follows:

• Payment Processors and Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your deposits and withdrawals in IDR. These providers operate under their own privacy policies and applicable Indonesian financial regulations.
• KYC and Identity Verification Providers: Third-party KYC service providers may receive copies of your identity documents (KTP, passport) and associated biographic data to assist in verifying your identity and age. These providers are contractually prohibited from retaining or using your identity documents beyond the verification purpose.
• Game Studio and Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate the game engines that power mbg55's casino and crash game verticals. These providers may receive session identifiers and wagering data to generate game outcomes, calculate payouts, and maintain game integrity logs. They do not receive your full identity or payment data.
• Fraud Prevention and Security Providers: Specialist providers that assist mbg55 in detecting suspicious activity, preventing multi-accounting, and identifying potential AML red flags may receive technical data such as IP addresses, device fingerprints, and session metadata.
• Customer Support Platforms: Third-party live chat and ticketing platforms may process the content of your support communications in order to deliver support services on behalf of mbg55.
• Analytics Providers: Web analytics platforms may receive aggregated, pseudonymised usage data to assist mbg55 in understanding platform performance and member behaviour patterns.
• Legal and Regulatory Authorities: mbg55 may disclose your personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts of law when required to do so by a binding legal obligation, court order, or lawful formal request. mbg55 will, where permitted by law, notify you before making such a disclosure.

International Data Transfers

mbg55 operates as an internationally licensed platform. Some of the third-party service providers described in Section 7 may be located outside Indonesia and may process your personal data on servers situated in jurisdictions with different data protection standards to those applicable in Indonesia.

Where your personal data is transferred to a third country, mbg55 takes the following measures to ensure that an adequate level of protection is maintained:

• Contractual clauses that impose data protection obligations equivalent to international best-practice standards are incorporated into all agreements with third-party processors located outside Indonesia.
• Where a recipient jurisdiction has an established adequacy framework or data protection regime, mbg55 relies on that framework as the transfer mechanism.
• mbg55 conducts due diligence on all third-party processors before engaging them and carries out periodic reviews of their data security practices.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact [email protected] with the subject line "International Transfer Inquiry".

Data Retention

mbg55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule provides a general guide:

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

Security Measures

mbg55 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Transport Layer Security: All data exchanged between your browser or mobile device and mbg55.lat is encrypted using TLS 1.3, ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data stored on mbg55 servers — including KYC documents and payment details — is encrypted using AES-256 encryption. Password data is stored as salted cryptographic hashes and is never held in reversible form.
• Access Controls: Access to member personal data within the mbg55 organisation is restricted on a strict need-to-know basis. Staff members are assigned role-based access permissions and are subject to confidentiality obligations. Access logs are maintained and reviewed regularly.
• Infrastructure Security: mbg55's platform infrastructure is hosted in data centres with physical security controls, redundant power systems, and 24/7 monitoring. Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
• Fraud Detection Systems: Automated monitoring systems continuously analyse account activity for indicators of unauthorised access, credential stuffing, and unusual transaction patterns. Suspicious activity triggers alerts for immediate review by the mbg55 security team.
• Staff Training: All mbg55 personnel with access to personal data receive regular training on data protection obligations, secure data handling procedures, and incident response protocols.

Your Privacy Rights

As an mbg55 member, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered username and a description of the right you wish to exercise. mbg55 will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data mbg55 holds about you, together with information about how it is being used, where it was obtained, and with whom it has been shared.
• Right to Rectification: If any personal data mbg55 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your mbg55 account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that mbg55 delete your personal data. This right is not absolute — mbg55 may be required to retain certain data for legal, regulatory, or fraud-prevention purposes as described in Section 9. Where erasure is not possible in full, mbg55 will explain the specific legal basis for retaining any data that cannot be deleted.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of your data or where you have objected to processing — you may request that mbg55 restrict the use of your personal data to storage only, pending resolution of your request.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request that mbg55 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to mbg55 processing your personal data where the legal basis is legitimate interests. mbg55 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where you have given consent to a specific processing activity — such as receiving marketing emails — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

mbg55 will not charge a fee for handling a data rights request unless the request is manifestly unfounded, repetitive, or excessive. In such cases, a reasonable administrative fee may be charged, and you will be informed of this before the request is processed.

Children's Privacy

If mbg55 discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated data will be deleted as promptly as technically feasible, and any balances will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and you believe that your child under the age of 21 has registered an account on mbg55.lat, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all such reports with the highest priority.

mbg55 strongly encourages parents and guardians to make use of parental control software to restrict minors' access to online gambling platforms. Resources on responsible internet use for families are available from a range of non-governmental organisations focused on digital safety in Indonesia.

Changes to This Policy

mbg55 reserves the right to update or revise this Privacy Policy at any time. When a material change is made to the Policy — such as a new category of data being collected, a new third-party sharing arrangement, or a change to the legal basis for any processing activity — mbg55 will notify registered members by email to the address on file and will publish the updated Policy on mbg55.lat with a revised "Last Updated" date at the top of the page.

Your continued use of the mbg55 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update to this Policy, you should cease using the platform and contact support to close your account. Any personal data collected prior to the effective date of a revised Policy will continue to be handled in accordance with the version of the Policy that was in effect at the time of collection, unless the revised Policy is more protective of your rights.

Minor revisions — such as typographical corrections, clarifications that do not alter the substantive meaning of any section, or updates to the list of accepted payment methods — may be made without individual member notification. The "Last Updated" date on this page will always reflect the most recent revision, however minor.

Contact & Data Requests

All privacy-related enquiries, data rights requests, and data breach reports should be directed to the mbg55 Data Protection team using the contact details below. Please use the relevant subject line to ensure your message is routed to the correct team without delay.

When submitting a data rights request, please include the following information to allow mbg55 to locate your records and verify your identity before processing the request:

• Your registered mbg55 username
• The email address associated with your account
• A clear description of the right you are exercising and the specific data or processing activity to which your request relates
• A copy of a valid identity document (KTP or passport) where identity verification is required to protect the security of your account data

mbg55 is committed to resolving all privacy concerns transparently and in good faith. If you are not satisfied with our response to a data rights request, you have the right to escalate your complaint to the relevant data protection authority or to seek judicial remedy in accordance with the laws applicable to you.