mlbb8 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by mlbb8 in connection with the operation of the mlbb8 online gaming platform at mlbb8.asia and all associated mobile interfaces, applications, and customer support channels.

mlbb8 is committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection standards. This policy is written in plain English to ensure that all Players — particularly those accessing the platform from Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, and elsewhere across Indonesia — can clearly understand how their information is used.

By registering an Account on mlbb8, using the platform, or otherwise interacting with mlbb8's services, you acknowledge that you have read and understood this Privacy Policy. This policy should be read together with the mlbb8 Terms & Conditions.

For the purposes of this Privacy Policy, the data controller responsible for the personal data of mlbb8 Players is the mlbb8 platform operator, operating the gaming service accessible at mlbb8.asia under an international gaming license.

All data protection inquiries, subject access requests, and complaints regarding mlbb8's handling of personal data should be directed to the mlbb8 Data Protection contact via the support channels listed in Section 15 of this policy.

mlbb8 collects the following categories of personal data in the course of providing its services:

mlbb8 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming assessments and only with the Player's explicit consent.

mlbb8 collects personal data through the following channels:

• Direct submission: Information you provide during account registration, KYC document uploads, deposit and withdrawal requests, live chat sessions, and email correspondence with our support team.
• Automated collection: Technical and usage data collected automatically when you access the mlbb8 platform, including through cookies, server logs, and session analytics tools. See Section 11 for full details on our cookie practices.
• Payment providers: Transaction confirmation data, payment status updates, and fraud signals received from our payment processing partners, including Indonesian bank transfer intermediaries and e-wallet providers such as OVO, DANA, and GoPay.
• Identity verification providers: Results and risk signals returned by third-party KYC and AML screening services used to verify Player identities and satisfy our licensing obligations.
• Third-party fraud and security services: Risk scores, device fingerprinting data, and flagged activity signals from fraud detection platforms used to protect the integrity of the mlbb8 platform.

mlbb8 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your mlbb8 Account, including processing login authentication, password resets, and account-level notifications.
• Payment processing: Executing deposit and withdrawal transactions via your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, or other supported banks) or e-wallet, and maintaining a full transaction audit trail.
• Identity verification (KYC): Verifying your identity, age, and payment method ownership in compliance with our licensing obligations and anti-money laundering (AML) requirements.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorized access attempts, bonus abuse, collusion, and other forms of prohibited conduct as defined in the mlbb8 Terms & Conditions.
• Responsible gaming: Monitoring gaming behavior for indicators of problem gambling, administering self-exclusion and deposit limit requests, and proactively reaching out to Players displaying concerning patterns.
• Customer support: Responding to your inquiries, resolving disputes, and maintaining a record of your support history to provide consistent service across interactions.
• Platform improvement: Analyzing aggregated and anonymized usage data to identify technical issues, improve platform performance, and enhance the overall Player experience.
• Marketing communications: Sending promotional offers, bonus notifications, and event announcements to Players who have opted in to marketing communications. You may unsubscribe at any time via the link in any marketing email or by contacting support.
• Legal and regulatory compliance: Meeting our obligations under applicable gaming licensing conditions, anti-money laundering regulations, and any lawful requests from competent authorities.

mlbb8 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfill our contractual obligations to you as a registered Player — including account creation, payment processing, and customer support — where refusal to provide the data would prevent us from delivering the service.
• Legal obligation: Processing necessary to comply with our gaming license conditions, anti-money laundering obligations, KYC requirements, and any other applicable legal or regulatory requirements.
• Legitimate interests: Processing carried out in the pursuit of mlbb8's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service quality improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — including sending direct marketing communications and, where applicable, processing sensitive personal data for responsible gaming purposes. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mlbb8 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment service providers: Indonesian bank transfer intermediaries and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute deposits and withdrawals on your behalf.
• KYC and AML service providers: Third-party identity verification and screening platforms receive the personal and document data required to complete KYC checks. These providers are contractually bound to process data only for the specific verification purpose and are prohibited from retaining or reusing it.
• Fraud detection platforms: Technical data, device identifiers, and behavioral signals are shared with fraud detection service providers to protect the security and integrity of the mlbb8 platform.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a Player's account identifier and session token to deliver their game content within the mlbb8 platform. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: mlbb8 may disclose personal data to competent law enforcement agencies, regulators, or courts where required to do so by applicable law, court order, or as necessary to protect the rights, property, or safety of mlbb8 or its Players.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of mlbb8's assets, Player data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

mlbb8 operates as an international platform, and some of the third-party service providers we engage — including KYC platforms, fraud detection systems, and game content delivery infrastructure — may process data in countries outside Indonesia. Where personal data is transferred internationally, mlbb8 takes steps to ensure that appropriate safeguards are in place, including:

• Transferring data only to service providers located in jurisdictions recognized as providing an adequate level of data protection, or
• Entering into data processing agreements with service providers that incorporate internationally recognized standard contractual clauses or equivalent contractual protections.

By using the mlbb8 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia for the purposes described in this policy. mlbb8 will take all reasonably practicable steps to ensure that your data remains protected to a standard at least equivalent to that described in this Privacy Policy, regardless of where processing occurs.

mlbb8 retains personal data for as long as necessary to fulfill the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, to satisfy our anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory inquiries.
• Transaction and financial data: Retained for a minimum of 5 years following the date of each transaction, consistent with standard financial record-keeping requirements.
• KYC documents: Retained for the same period as account and identity data — a minimum of 5 years post-closure. Documents are stored in encrypted form with access restricted to authorized compliance personnel.
• Support communications: Chat transcripts and email records are retained for up to 3 years following resolution of the relevant inquiry or dispute.
• Technical and usage data: Aggregated and anonymized usage analytics are retained indefinitely. Raw session logs and IP address records are retained for up to 12 months and then deleted or anonymized.
• Marketing data: Email marketing opt-in records and communication histories are retained until you withdraw consent or for up to 3 years of marketing inactivity, whichever is earlier.

When personal data is no longer required and its retention period has expired, mlbb8 will securely delete or irreversibly anonymize it in accordance with industry-standard data destruction procedures.

mlbb8 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Transport encryption: All data transmitted between your device and the mlbb8 platform is encrypted using 256-bit SSL/TLS protocols. The mlbb8 platform enforces HTTPS on all pages and API endpoints.
• Data-at-rest encryption: Sensitive data fields — including national ID numbers, bank account details, and KYC document files — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access controls: Access to Player personal data within mlbb8's internal systems is restricted on a strict need-to-know basis. All staff access is logged, audited, and subject to role-based permissions. Privileged access requires multi-factor authentication.
• Infrastructure security: The mlbb8 platform is hosted on enterprise-grade cloud infrastructure with dedicated firewall protection, DDoS mitigation, and continuous intrusion detection monitoring.
• Vulnerability management: mlbb8 conducts regular security assessments and penetration tests. Critical vulnerabilities are patched on a priority basis in accordance with our internal security response policy.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mlbb8 will notify affected Players without undue delay and will take all necessary steps to contain and remediate the breach.

mlbb8 uses cookies and similar tracking technologies to operate the platform, keep your session secure, and understand how Players interact with the site. The following cookie categories are used:

mlbb8 does not use third-party behavioral advertising cookies or share cookie data with social media advertising platforms. You can review and manage cookies placed by mlbb8 through your browser's privacy settings. Note that clearing all cookies will log you out of your active mlbb8 session.

As a Player whose personal data is processed by mlbb8, you have the following rights in relation to your data:

• Right of access: You may request a copy of all personal data that mlbb8 holds about you. We will provide this information within 30 days of receiving a verified request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. For account details such as your registered name, correction requires KYC verification to prevent unauthorized changes.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that mlbb8 may be required to retain certain data for a minimum period under our licensing and AML obligations even following an erasure request — see Section 9.
• Right to restriction: You may request that mlbb8 restrict processing of your personal data in certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that mlbb8 provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of mlbb8's legitimate interests, including profiling for fraud detection purposes, where you believe your rights and freedoms override those interests. You may also object to direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact mlbb8 support via live chat or email as described in Section 15. We may ask you to verify your identity before processing any data rights request. mlbb8 will respond to all verified requests within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, and we will notify you accordingly.

The mlbb8 platform is strictly intended for users who are 21 years of age or older. mlbb8 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If mlbb8 discovers, through the KYC verification process or any other means, that a Player is under 21 years of age, we will immediately suspend the Account, void any pending bets or wagers, and take steps to return any deposited real-money balance to the payment source, subject to our standard verification procedures. We will delete the personal data collected from the underage individual to the extent permitted by our legal obligations.

If you are a parent or guardian and believe that your child under the age of 21 may have accessed or registered on the mlbb8 platform, please contact our support team immediately via the channels in Section 15. We take underage gambling extremely seriously and will act on such reports promptly.

mlbb8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the mlbb8 platform. When we make material changes, we will notify registered Players via email to their registered address and via a prominent notice on the mlbb8 platform, at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how mlbb8 protects your personal data. Your continued use of the mlbb8 platform after a revised Privacy Policy takes effect constitutes your acknowledgment of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or to the way mlbb8 handles your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly within the mlbb8 platform after logging in to your Account. Live chat is the fastest channel for urgent data security concerns.
• Email: [email protected] (plain text — not a clickable link). Email responses are provided within 24 hours on business days and within 48 hours on weekends and Indonesian public holidays including Idul Fitri and Nyepi.

mlbb8 support agents are available in both English and Indonesian (Bahasa Indonesia), around the clock, every day of the year. If your data privacy concern is not resolved to your satisfaction through our internal process, you have the right to escalate the matter to the relevant supervisory authority under mlbb8's operating licensing jurisdiction.