mc888a Privacy Policy

1 Introduction & Scope

mc888a operates as an international online betting platform primarily serving players based in Indonesia. In the course of providing sports betting, live casino, togel (Indonesia's traditional numbers lottery), and gaming services, mc888a necessarily collects and processes certain personal data about its members.

This Policy applies to:

• All individuals who register an account on mc888a ("Members", "Players", "you").
• Visitors to the mc888a website who have not yet registered but whose browsing data may be collected via cookies and analytics tools.
• Individuals who contact mc888a's customer support team by any channel, whether or not they hold a registered account.

This Policy does not apply to third-party websites, services, or applications that may be linked from the mc888a platform. mc888a is not responsible for the privacy practices of those third parties.

2 Data We Collect

mc888a collects personal data through several channels. The categories of data we collect, and the typical means of collection, are set out below:

2.1 Data Provided Directly by You

2.2 Data Collected Automatically

When you access the mc888a platform, our servers and analytics tools automatically collect certain technical data, including:

• Device & Browser Data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, time spent on each page, links clicked, game sessions initiated, betting history.
• Location Data: Approximate geographic location derived from IP address (country and city level only — mc888a does not collect GPS-level location data).
• Session Data: Login timestamps, session duration, logout events.

2.3 Data From Third Parties

mc888a may receive limited personal data about you from third-party sources in the following circumstances:

• Payment Processors: Confirmation of transaction status and payer identity from Indonesian banking partners and e-wallet providers.
• Identity Verification Services: Results of automated ID checks performed by our KYC technology partners.
• Fraud Prevention Services: Risk scores and flagging alerts from third-party anti-fraud platforms used to protect the mc888a ecosystem.

3 How We Use Your Data

mc888a uses your personal data for the following purposes. We process data only where we have a valid legal basis to do so, as set out in Clause 4:

• Account Management: Creating, maintaining, and securing your mc888a account, including verifying your identity and processing login requests.
• Service Delivery: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; settling bets; crediting bonuses; and providing access to all gaming products.
• KYC & Regulatory Compliance: Verifying that you meet the 21+ age requirement and residency conditions, and complying with applicable anti-money-laundering (AML) and counter-terrorism-financing (CTF) obligations.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, unauthorized access attempts, collusion, and bonus abuse.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions.
• Platform Improvement: Analyzing aggregated usage data to improve website performance, game selection, and the overall member experience.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators and applying account-level protections where appropriate.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have consented to receive such communications. You may withdraw consent at any time.

4 Legal Basis for Processing

mc888a processes your personal data under one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our contract with you — namely, operating your mc888a account and delivering the betting and gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including AML/CTF regulations, age verification mandates, and data retention requirements imposed by our licensing authority.
• Legitimate Interests: Processing undertaken to pursue mc888a's legitimate business interests — such as fraud prevention, platform security, and service analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

mc888a uses cookies and similar tracking technologies to enhance your experience on the platform and to collect the usage data described in Clause 2.2. The categories of cookies we use are as follows:

You can manage or delete non-essential cookies through your browser settings at any time. Note that disabling functional or analytics cookies will not affect your ability to place bets or access your mc888a account.

6 Data Sharing & Disclosure

mc888a does not sell your personal data. We share data with third parties only in the following limited circumstances:

• Payment Service Providers: We share transactional data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals. These providers are contractually prohibited from using your data for any purpose other than payment processing.
• KYC & Identity Verification Partners: We share identity documents with accredited third-party KYC providers to fulfill our age and identity verification obligations. These providers operate under strict data processing agreements.
• Game Studio Providers: Aggregated, non-personally-identifiable session data may be shared with licensed game studios (such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft) for game integrity and RTP audit purposes.
• Legal & Regulatory Authorities: mc888a will disclose personal data to law enforcement, regulators, or courts when required to do so by a valid legal order, warrant, or regulatory direction.
• Group Companies: mc888a may share data within its corporate group for operational, compliance, and fraud prevention purposes, subject to the same data protection standards as this Policy.
• Business Transfers: In the event of a merger, acquisition, or sale of mc888a's business assets, personal data held by mc888a may be transferred to the acquiring entity. You will be notified of any such transfer via email or platform notification before the transfer takes effect.

7 International Data Transfers

mc888a is an internationally operating platform and your personal data may be processed on servers located outside Indonesia. Where data is transferred internationally, mc888a ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules where data is transferred within mc888a's group of companies.
• Transfers to countries that have been recognized as providing an adequate level of data protection by applicable regulatory bodies.

By registering and using the mc888a platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia. mc888a will always take reasonable steps to ensure that any such transfer complies with applicable data protection requirements.

8 Data Retention

mc888a retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your mc888a membership, plus a mandatory post-closure period of five (5) years in compliance with AML regulatory requirements.
• KYC & Verification Documents: Retained for five (5) years from the date of submission, or longer if required by a specific regulatory or legal obligation.
• Transaction Records: Retained for five (5) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to document the withdrawal.
• Anonymous Analytics Data: Retained indefinitely in aggregated, non-identifiable form for platform performance analysis.

Upon expiry of the applicable retention period, data is securely deleted using industry-standard erasure methods, or irreversibly anonymized so that it can no longer be linked to an individual.

9 Your Data Rights

As a member of mc888a, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] (plain text — not a clickable link). We will acknowledge your request within 48 hours (WIB) and respond substantively within 30 calendar days.

10 Children's Privacy

The mc888a platform is strictly restricted to individuals who are 21 years of age or older. mc888a does not knowingly collect, process, or store personal data from any person under the age of 21. If mc888a becomes aware that personal data has been submitted by a minor, that data will be immediately deleted and the associated account will be permanently closed.

If you are a parent or guardian and believe your child has registered on mc888a, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action without delay.

11 Security Measures

mc888a takes the security of your personal data seriously and implements a layered set of technical and organizational safeguards, including:

• 256-bit SSL/TLS Encryption: All data in transit between your device and mc888a's infrastructure is encrypted using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive data fields — including identity documents, financial account references, and KYC records — are encrypted in mc888a's databases.
• Access Controls: Personal data is accessible only to authorized mc888a personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their mc888a accounts. All mc888a staff with access to member data are required to use 2FA.
• Penetration Testing: mc888a's platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: mc888a maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

While mc888a employs robust security measures, no system is completely immune to risk. Players are encouraged to use strong, unique passwords for their mc888a accounts and to contact support immediately if they suspect unauthorized account access.

12 Third-Party Links

The mc888a platform may contain references to or brief descriptions of third-party services — such as licensed game studio names (Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, Pocket Games Soft) or payment brands (Visa, Mastercard). This Privacy Policy applies solely to mc888a's own data collection and processing activities.

mc888a is not responsible for the privacy practices of any third-party service, even where that service is accessed via the mc888a platform. We encourage you to review the privacy policies of any third-party service you use independently.

13 Policy Updates

mc888a may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material updates are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered members via email to their registered address and/or via an in-platform notification, with a minimum of seven (7) days' notice before the updated Policy takes effect.

Your continued use of the mc888a platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and contact support to initiate account closure before the effective date.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint about how mc888a has handled your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link). Use the subject line "Privacy Request" or "Data Complaint" so your message is routed to the correct team.
• Live Chat: Available 24/7 via the chat widget on the mc888a platform. Our team includes native Indonesian-speaking agents who can assist in both Indonesian and English.

mc888a will acknowledge all privacy-related contacts within 48 hours (WIB) and provide a substantive response within 30 calendar days. If you remain dissatisfied following mc888a's response, you may refer your complaint to the relevant data protection supervisory authority in your jurisdiction.