mp888 Privacy
Policy

mp888 is an internationally operated online gaming and sports betting platform accessible at https://mp888.bio. For the purposes of this Privacy Policy, mp888 acts as the data controller in respect of personal data collected from players and visitors who access or use the platform.

mp888 is licensed and regulated under international gaming law. We serve English-preference players across Indonesia, offering sports betting, live casino, slot gacor (high-RTP slot) games, togel (Indonesia's traditional numbers lottery), video poker, live roulette, and related gaming entertainment services.

All inquiries regarding your personal data — including access requests, correction requests, and deletion requests — should be directed to our dedicated privacy contact at: [email protected]

The following definitions apply throughout this Privacy Policy:

• Personal Data means any information relating to an identified or identifiable natural person — i.e., information that can directly or indirectly identify you as an individual.
• Processing means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• Data Controller means the entity that determines the purposes and means of processing personal data — in this context, mp888.
• Data Processor means a third-party entity that processes personal data on behalf of mp888 under a binding data processing agreement.
• Player / You means any individual who registers an account on the mp888 platform or otherwise interacts with our services.
• KYC means Know Your Customer — the identity and age-verification process required under international AML and CTF standards.
• Cookies means small text files placed on your device by the mp888 platform for the purpose of recognizing your browser, maintaining session state, and analyzing platform usage.
• Sensitive Data means a subset of personal data that warrants heightened protection, including government-issued identification numbers, payment card details, and biometric data.

mp888 collects the following categories of personal data in connection with the provision of its services:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to confirm you are at least 21 years of age)
• Residential address in Indonesia (street, city, province, postal code)
• Email address and telephone number
• Username and encrypted password
• Preferred currency (Indonesian Rupiah, IDR)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification: Indonesian national identity card (KTP), passport, or driver's license
• Proof of residential address: utility bill, bank statement, or official government correspondence dated within the last 90 days
• Proof of payment method ownership: screenshot or image confirming ownership of the bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits
• Selfie photograph where required for biometric identity matching

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amount (IDR), method, timestamp, and reference number
• Bank account numbers and e-wallet identifiers associated with your account
• Wagering history, including game type, stake amount, outcome, and settlement timestamp
• Bonus and promotion eligibility records

3.4 Technical & Device Data

• IP address and approximate geolocation (city/region level) at the time of login and key platform interactions
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Session duration, pages visited, and features used within the platform
• Referral source (how you arrived at mp888.bio)

3.5 Communications Data

• Records of live chat, email, and WhatsApp communications with our support team, including message content and timestamps
• Responses to surveys, feedback forms, or promotional campaigns
• Responsible gaming tool usage, including deposit limits set, cool-down periods elected, and self-exclusion requests submitted

mp888 collects personal data through the following mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a wager, contact support, or participate in a promotion.
• Automatically: Through cookies, web beacons, and server-side logging when you interact with the mp888 platform. See Section 7 (Cookies & Tracking) for full details.
• From third-party service providers: Identity verification agencies and fraud-detection services may supply supplementary data to validate the information you have provided to us during the KYC process.
• From payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) confirm transaction status and account ownership details to facilitate deposits and withdrawals.
• From publicly available sources: In certain circumstances, and solely for AML and sanctions-screening purposes, mp888 may cross-reference your data against publicly available government sanctions lists, adverse-media databases, and politically exposed persons (PEP) registries.

mp888 processes your personal data under the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and mp888 — specifically, to register and maintain your account, process deposits and withdrawals, settle wagers, and provide customer support.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including international AML and CTF regulations, KYC requirements, and mandatory data retention rules imposed by our licensing authority.
• Legitimate Interests: mp888 processes certain data — such as technical and device data — on the basis of its legitimate interests in operating a secure, fraud-resistant, and commercially viable gaming platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Where we rely on consent as the legal basis for processing — for example, to send you promotional emails or SMS notifications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

mp888 uses your personal data for the following specific purposes:

1. Account Administration: Creating, maintaining, and securing your mp888 account; authenticating your identity at login; and enforcing the one-account-per-player rule.
2. Age & Identity Verification: Confirming that you are at least 21 years of age and that you are who you claim to be, in compliance with our licensing obligations and responsible gaming commitments.
3. Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing withdrawal requests to your registered payment method.
4. AML & Fraud Prevention: Screening transactions and account behavior against known fraud patterns; monitoring for unusual deposit-withdrawal cycles indicative of money-laundering; and reporting suspicious activity as required by applicable regulation.
5. Customer Support: Responding to your inquiries, resolving disputes, processing responsible gaming requests (deposit limits, self-exclusion), and maintaining a record of communications for quality assurance.
6. Personalization & Promotions: Where you have provided consent, tailoring bonus offers, game recommendations, and marketing communications to your demonstrated preferences and playing history.
7. Platform Improvement: Analyzing aggregated, anonymized usage data to identify technical issues, optimize the user experience, and develop new features. No individual player is identifiable from these analyses.
8. Legal Compliance & Regulatory Reporting: Meeting all obligations imposed by mp888's licensing authority and applicable international law, including mandatory record-keeping, audit trails, and regulatory reporting.

mp888 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, maintain your logged-in session, and analyze how players interact with our pages. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the platform's core functionality — session management, login state, fraud-detection tokens, and load-balancing. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: Remember your settings and preferences, such as preferred language display, timezone (WIB/WITA/WIT), and responsible gaming limits configured in your account.
• Analytics Cookies: Used by mp888's internal analytics infrastructure to measure aggregate page performance, player journey flows, and feature adoption rates. Data collected via analytics cookies is anonymized before analysis.
• Marketing Cookies: Where you have provided consent, marketing cookies support the delivery of relevant promotional content within the mp888 platform. mp888 does not share cookie data with external advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling analytics or marketing cookies will not affect your ability to place wagers or manage your account.

mp888 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• KYC & Identity Verification Providers: Specialist third-party agencies that verify the authenticity of KTP, passport, or driver's license documents submitted during account verification. These providers act as data processors under binding agreements and may not use your data for any purpose other than verification.
• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transactional data solely to execute authorized deposit and withdrawal instructions.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session tokens to facilitate game rounds. These providers do not receive your full name, national ID number, or payment details.
• Fraud & AML Detection Services: Specialist platforms that analyze transaction patterns to detect and prevent money laundering, bonus abuse, and multi-account fraud. Access is limited to the minimum data necessary for screening purposes.
• Regulatory & Law Enforcement Authorities: Where mp888 is legally compelled to disclose information by a court order, regulatory directive, or law enforcement request, we will comply in accordance with applicable law. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving mp888, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and provided with options regarding your data.

All third parties with whom mp888 shares personal data are required to maintain appropriate technical and organizational security measures and are prohibited from using your data for purposes beyond those explicitly authorized.

mp888 operates on an internationally distributed infrastructure. As a result, your personal data may be stored and processed on servers located outside Indonesia. Where data is transferred to jurisdictions that do not provide a level of data protection equivalent to international standards, mp888 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by recognized international data protection authorities
• Binding corporate rules where transfers occur within the mp888 group of companies
• Data processing agreements containing equivalent protections to those described in this Privacy Policy

By using the mp888 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia. We take all reasonable steps to ensure that such transfers are conducted securely and in compliance with applicable data protection law.

mp888 retains personal data for the periods set out below, after which data is securely deleted or anonymized:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five years following permanent account closure, in compliance with international AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, in line with AML obligations applicable to gaming operators.
• Customer Support Records: Live chat transcripts, email correspondence, and WhatsApp message logs are retained for three years from the date of the interaction.
• Technical & Device Data: Server logs containing IP addresses and session data are retained for 12 months and then automatically purged.
• Marketing Consent Records: Records of your consent to receive promotional communications are retained for the duration of your account and for three years after consent is withdrawn, as evidence of lawful processing.

Where a legal dispute, regulatory investigation, or law enforcement inquiry is ongoing at the time a standard retention period expires, relevant data will be retained until the matter is fully resolved.

As a player on the mp888 platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will respond within 30 days of receipt.

mp888 maintains a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS 1.3): All data in transit between your browser and mp888's servers is encrypted using current-generation TLS protocols.
• Encryption at Rest: Sensitive stored data, including KYC documents and payment identifiers, is encrypted using AES-256 at the storage layer.
• Password Security: Account passwords are stored as salted cryptographic hashes. mp888 never stores or transmits passwords in plain text.
• Access Controls: Internal access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) systems.
• Security Audits: mp888's infrastructure is subject to periodic independent penetration testing and security audits. Identified vulnerabilities are remediated according to a risk-prioritized schedule.
• Incident Response: In the event of a confirmed data breach affecting your personal data, mp888 will notify affected players and, where required by applicable law, relevant regulatory authorities within 72 hours of becoming aware of the incident.

The mp888 platform is strictly intended for adults aged 21 and over. mp888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and KYC checks are designed to confirm that all players meet the minimum age requirement.

If mp888 discovers or has reasonable grounds to believe that a player is under 21 years of age, the account will be immediately suspended, all associated funds will be frozen pending investigation, and any deposits made will be returned to the original payment method. The account will then be permanently closed.

If you are a parent or guardian and believe that a minor has created an account on mp888 without authorization, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act within 24 hours of receipt.

The mp888 platform does not contain links to third-party websites for commercial or affiliate purposes. All navigation within mp888.bio stays within the mp888 domain. In the unlikely event that a reference to an external resource appears in a support communication or promotional context, please be aware that mp888 has no control over the privacy practices or content of third-party websites, and this Privacy Policy does not extend to them.

We recommend reviewing the privacy policy of any third-party site you visit independently of mp888, including the websites of your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), as those entities operate under their own data practices.

mp888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will:

• Update the "Last updated" date at the top of this page
• Send a notification to your registered email address summarizing the key changes
• Display a prominent notice on the mp888 platform homepage for a minimum of 14 days following the change

Your continued use of the mp888 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must stop using the platform and contact [email protected] to arrange account closure and the return of any eligible real-money balance.

We encourage you to review this Privacy Policy periodically to stay informed about how mp888 protects your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or about how mp888 handles your personal data, please contact our privacy team through the following channels:

• Email: [email protected] — use the subject line "Privacy Inquiry — [Your Username]" for fastest routing
• Live Chat: Available 24/7 directly within the mp888 platform interface
• WhatsApp: Contact details are available within your Account dashboard after login
• Response Time: Privacy-related inquiries are acknowledged within 24 hours (WIB) and fully resolved within 30 days

If you are not satisfied with mp888's response to a privacy complaint, you may escalate the matter to our designated Data Protection Officer at [email protected] with the subject line "DPO Escalation — [Your Username]". The DPO will issue a written determination within 20 business days.

Should the DPO determination not resolve your concern, you retain the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction governing your rights, or to pursue remedies through arbitration as described in our Terms & Conditions.