Privacy Policy

Your data privacy and security are our top priorities at mbc88

Last Updated: January 2026 | Effective Date: January 1, 2026

1. Introduction

Welcome to the mbc88 Privacy Policy. This document explains how mbc88 ("we", "us", "our", "the Platform") collects, uses, stores, protects, and shares your personal information when you access or use our website, mobile applications, and related services (collectively, the "Services").

At mbc88, we are deeply committed to protecting your privacy and ensuring the security of your personal data. We understand that trust is fundamental to our relationship with Indonesian players, and we take our responsibility to safeguard your information seriously. This Privacy Policy is designed to be transparent about our data practices and to inform you of your rights under applicable data protection laws.

By registering an account, accessing our platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of mbc88 services immediately.

Our Privacy Commitment

mbc88 operates in compliance with international data protection standards and employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

To provide our services and ensure regulatory compliance, mbc88 collects various types of personal information through different channels:

2.1 Information You Provide Directly

When you register an account or use our services, you voluntarily provide:

  • Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, and country of residence (Indonesia).
  • Identity Verification Documents (KYC): Indonesian national identity card (KTP), passport, driver's license, or other government-issued identification. Copies may include photograph, signature, ID number, and date of issue/expiry.
  • Financial Information: Bank account details (account holder name, bank name, account number, branch information) for deposits and withdrawals. We primarily support Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata.
  • Communication Data: Content of messages sent through live chat, email, WhatsApp, or other customer support channels. Call recordings if you contact us by phone (where legally permitted and with your consent).
  • User-Generated Content: Profile information, preferences, and any other data you choose to provide.

2.2 Information Collected Automatically

When you access mbc88, we automatically collect certain technical and usage information:

  • Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers (such as IMEI or advertising ID).
  • Usage Data: Pages visited, features used, time spent on platform, referring/exit pages, clickstream data, search queries, games played, bets placed, deposit/withdrawal history.
  • Location Data: Approximate geographic location derived from IP address. We do not collect precise GPS location unless you explicitly grant permission on mobile devices.
  • Cookie Data: Information collected through cookies, web beacons, and similar tracking technologies (see Section 7 for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources:

  • Payment Processors: Transaction confirmations, payment status, and anti-fraud data from Indonesian banking partners.
  • Identity Verification Services: Results of document authentication and background checks performed by specialized KYC providers.
  • Fraud Prevention Services: Risk assessment data, blacklist checks, and suspicious activity reports from security partners.
  • Marketing Partners: Aggregated demographic and interest data (not personally identifiable) for advertising purposes.

3. How We Use Your Information

mbc88 processes your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

  • Create, maintain, and authenticate your mbc88 account.
  • Process deposits, withdrawals, and other financial transactions.
  • Enable you to place bets, play games, and use platform features.
  • Provide customer support and respond to inquiries.
  • Send important service notifications, account updates, and transaction confirmations.

3.2 Legal and Regulatory Compliance

  • Verify your identity and age (minimum 21 years) to comply with Indonesian legal requirements and international gaming regulations.
  • Prevent underage gambling, fraud, money laundering, and other illegal activities.
  • Maintain records as required by our licensing authorities and applicable laws.
  • Respond to legal requests from law enforcement, courts, or regulatory bodies.
  • Enforce our Terms and Conditions and investigate violations.

3.3 Security and Fraud Prevention

  • Detect and prevent fraudulent transactions, account takeovers, bonus abuse, and collusion.
  • Monitor betting patterns for suspicious or prohibited activities.
  • Protect the integrity of games and sports betting markets.
  • Secure our systems against cyber attacks, data breaches, and unauthorized access.

3.4 Marketing and Communications

  • Send promotional offers, bonuses, and special deals (only with your consent, which you can withdraw at any time).
  • Personalize content and recommendations based on your gaming preferences.
  • Conduct market research and analyze customer behavior to improve our services.
  • Send newsletters and platform updates (you can opt out via email preferences).

3.5 Platform Improvement and Analytics

  • Analyze usage patterns to optimize platform performance and user experience.
  • Test new features, games, and functionality.
  • Generate aggregated, anonymized statistics for business intelligence.
  • Improve mobile app performance and fix technical issues.

Legal Basis for Processing

We process your personal data based on: (1) Contractual necessity — providing services you've requested; (2) Legal obligation — complying with KYC, AML, and gaming regulations; (3) Legitimate interests — fraud prevention, security, and platform improvement; (4) Consent — marketing communications and optional data uses (which you can withdraw).

4. Data Sharing and Disclosure

mbc88 does not sell your personal information to third parties. However, we may share your data with trusted partners and service providers under the following circumstances:

4.1 Service Providers and Business Partners

  • Payment Processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, etc.) and payment gateways to process deposits and withdrawals.
  • Identity Verification Services: Third-party KYC providers that authenticate your identity documents and perform background checks.
  • Fraud Prevention Services: Security partners that assess transaction risk, detect suspicious patterns, and maintain fraud databases.
  • Game Providers: Software developers and live casino studios that power our gaming content (they receive limited data necessary to operate games).
  • Customer Support Tools: Live chat platforms, helpdesk software, and CRM systems used to manage support tickets.
  • Cloud Infrastructure Providers: Hosting and data storage services that maintain our platform (all data is encrypted).
  • Analytics Providers: Tools that help us understand platform usage (typically anonymized or aggregated data).

All service providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal and Regulatory Disclosure

We may disclose your information when required by law or to protect our rights:

  • To comply with legal obligations, court orders, or government requests.
  • To cooperate with law enforcement investigations of illegal activity.
  • To report suspicious transactions to financial intelligence units as required by anti-money laundering laws.
  • To respond to regulatory audits or inquiries from our licensing authorities.
  • To enforce our Terms and Conditions, prevent fraud, or protect user safety.
  • To defend against legal claims or disputes.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change in ownership, and your data will remain subject to this Privacy Policy unless you consent to a new policy.

4.4 Aggregate and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. This includes statistical reports on user demographics, betting trends, and platform usage for business analysis and marketing purposes.

5. Data Security Measures

mbc88 employs comprehensive technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or disclosure:

5.1 Technical Security

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade security protocols.
  • Secure Data Storage: Personal information is stored in encrypted databases with restricted access controls.
  • Firewalls and Intrusion Detection: Advanced network security systems monitor and block unauthorized access attempts.
  • Regular Security Audits: Third-party security experts conduct periodic penetration testing and vulnerability assessments.
  • DDoS Protection: Distributed denial-of-service mitigation systems ensure platform availability.
  • Secure Payment Processing: Financial transactions are processed through PCI-DSS compliant payment gateways with tokenization.

5.2 Organizational Security

  • Access Controls: Only authorized personnel with legitimate business needs can access personal data. All access is logged and audited.
  • Employee Training: Staff receive regular training on data protection, privacy regulations, and security best practices.
  • Confidentiality Agreements: All employees and contractors sign non-disclosure agreements.
  • Incident Response Plan: We maintain procedures for detecting, reporting, and responding to data breaches.
  • Data Minimization: We collect only data necessary for specified purposes and delete it when no longer needed.

5.3 Account Security Best Practices

You also play a crucial role in protecting your data. We recommend:

  • Choose a strong, unique password combining letters, numbers, and symbols.
  • Never share your login credentials with anyone.
  • Enable two-factor authentication (2FA) if available.
  • Log out after each session, especially on shared devices.
  • Keep your email account secure (it's used for password resets).
  • Be cautious of phishing emails pretending to be from mbc88.
  • Immediately report suspicious account activity to customer support.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law, typically within 72 hours of discovery. Notification will include details of the breach, potential impact, and steps we're taking to address it.

6. Data Retention and Deletion

6.1 Retention Periods

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and business requirements:

  • Active Accounts: Data is retained for the duration of your account being open and active.
  • Transaction Records: Financial transaction data, betting history, and account statements are retained for a minimum of 5 years after your last transaction to comply with anti-money laundering regulations and tax requirements.
  • Identity Verification Documents: KYC documents (KTP copies, etc.) are retained for 5 years after account closure as required by regulatory authorities.
  • Communication Records: Customer support chat logs, emails, and call recordings are typically retained for 2-3 years for quality assurance and dispute resolution.
  • Marketing Data: If you've consented to marketing communications, we retain your preferences until you opt out or your account is closed.
  • Closed Accounts: After account closure, most personal data is deleted within 90 days, except for data we're legally required to retain (see above).

6.2 Account Closure and Data Deletion

To request account closure and data deletion:

  1. Contact customer support via email or live chat.
  2. Confirm your identity (we may request additional verification).
  3. Withdraw all remaining funds from your account balance.
  4. Confirm that you understand account closure is permanent and cannot be reversed.

Once approved, we will delete or anonymize your personal information within 90 days, except for data we're legally obligated to retain. You'll receive confirmation when the deletion process is complete.

6.3 Inactive Accounts

Accounts with no login activity for 12 consecutive months may be classified as "dormant." We may send email reminders before closing dormant accounts. After 24 months of inactivity, accounts may be permanently closed and data deleted (subject to retention requirements).

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit websites. They help websites remember your preferences, recognize returning users, and improve functionality.

7.2 Types of Cookies We Use

  • Essential Cookies: Required for platform functionality, such as maintaining your login session, processing transactions, and remembering security settings. These cannot be disabled without affecting site operation.
  • Performance Cookies: Collect anonymous usage data to help us understand how visitors interact with mbc88, which pages are most popular, and where errors occur. This helps us improve platform performance.
  • Functionality Cookies: Remember your preferences (language, currency, game filters) to personalize your experience on return visits.
  • Advertising Cookies: Used to deliver relevant promotional content and measure campaign effectiveness. These may track your activity across websites (you can opt out via browser settings).

7.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may prevent you from using certain platform features.

To manage cookies:

  • Browser Settings: Chrome, Firefox, Safari, and Edge all provide cookie management options in their privacy/security settings.
  • Opt-Out Tools: Visit youronlinechoices.com or aboutads.info to opt out of interest-based advertising cookies.
  • Mobile Devices: iOS and Android offer advertising identifier settings to limit ad tracking.

7.4 Other Tracking Technologies

In addition to cookies, we may use:

  • Web Beacons (Pixels): Tiny images embedded in emails or web pages to track email opens and page views.
  • Local Storage: Browser storage mechanisms (HTML5 localStorage) to cache data for faster load times.
  • Session Replay Tools: Software that records user sessions (anonymized) to identify usability issues and improve design.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We'll provide this in a commonly used electronic format within 30 days of your request.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can request that we correct or update it. You can update most information directly through your account settings.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements. We'll delete your information unless we have a legitimate reason to retain it (e.g., legal obligations, fraud prevention).

8.4 Right to Restrict Processing

You may request that we temporarily restrict how we process your data in certain circumstances (e.g., if you contest data accuracy or object to processing).

8.5 Right to Data Portability

You can request that we transfer your personal data to another service provider in a structured, machine-readable format where technically feasible.

8.6 Right to Object

You can object to processing of your data for direct marketing purposes at any time. Simply click "unsubscribe" in marketing emails or adjust your communication preferences in account settings.

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing), you can withdraw that consent at any time. This won't affect processing that occurred before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights:

  • Contact our customer support team via email or live chat.
  • Clearly state which right you wish to exercise.
  • Provide sufficient information to verify your identity (we may request additional verification to prevent unauthorized access).
  • We'll respond within 30 days (or as required by applicable law).

Indonesian Data Protection

While Indonesia does not yet have comprehensive data protection legislation equivalent to GDPR, we voluntarily comply with international privacy standards. Indonesian citizens can exercise the rights outlined above, and we commit to handling all data requests in accordance with best practices.

9. Children's Privacy

mbc88 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the legal gambling age. Our registration process requires date of birth verification, and KYC checks confirm age through government-issued identification documents.

If we discover that we have inadvertently collected personal data from someone under 21 years of age, we will immediately:

  • Permanently suspend the account.
  • Delete all associated personal information from our systems.
  • Refund any deposited funds (where legally permissible).
  • Notify the account holder (or parent/guardian if contact details are available).

Parents and guardians should monitor device usage to ensure minors do not access gambling platforms. If you believe a child has registered on mbc88, please contact us immediately at [email protected].

10. International Data Transfers

As an international platform, mbc88 may transfer your personal information to servers and service providers located outside Indonesia. This includes:

  • Cloud hosting providers in secure data centers globally.
  • Payment processors that facilitate international transactions.
  • Game studios and software providers operating from various jurisdictions.
  • Customer support tools and CRM systems hosted internationally.

When transferring data internationally, we ensure:

  • Adequate Protection: Countries receiving your data have adequate data protection laws, or we implement contractual safeguards (Standard Contractual Clauses).
  • Encryption in Transit: All data transfers are encrypted using secure protocols.
  • Vendor Due Diligence: We vet all international service providers for security and privacy compliance.
  • Data Minimization: We transfer only data necessary for the specific service being provided.

By using mbc88, you acknowledge and consent to international data transfers as described above. If you have concerns about data transfers, please contact us for more information about the safeguards in place.

11. Changes to This Privacy Policy

mbc88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through:

  • Email notification to your registered email address.
  • Prominent notice on the mbc88 platform homepage.
  • In-app notification upon your next login.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this document indicates when the most recent revisions were made. Your continued use of mbc88 services after policy changes constitutes acceptance of the revised terms.

If changes significantly affect your rights or how we process your data, we may require you to actively consent to the new policy before continuing to use our services.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Privacy Inquiries

Email: [email protected] (Subject: Privacy Inquiry)
Live Chat: Available 24/7 through the mbc88 platform
WhatsApp: Available during Indonesian business hours (WIB)
Response Time: Privacy requests are handled with priority. Expect initial response within 24-48 hours, with full resolution within 30 days.

When contacting us about privacy matters, please provide:

  • Your full name and registered email address.
  • A clear description of your inquiry or request.
  • Any relevant account details (username, date of registration).
  • Proof of identity if requesting data access or deletion (to prevent unauthorized disclosure).

Important: Your privacy matters to us. We are committed to handling all inquiries with confidentiality, respect, and in accordance with applicable data protection laws.

256-Bit Encryption

Bank-grade SSL/TLS encryption protects all data transmitted between your device and our servers.

Strict Access Controls

Only authorized personnel can access your data, with all access logged and audited regularly.

Secure Data Storage

Personal information is stored in encrypted databases with multiple layers of security protection.

Compliance Standards

We adhere to international data protection standards and gaming industry best practices.

Data Retention Limits

We retain data only as long as necessary and delete it securely when no longer required.

Your Privacy Rights

You have full rights to access, correct, delete, or port your personal data at any time.

Questions About Your Privacy?

Review our FAQ for common privacy questions, read our Terms & Conditions for complete legal information, or contact our support team for personalized assistance.