mc888a Privacy Policy

mc888a operates an online casino and sports betting platform accessible at https://mc888a.bet, serving players primarily across Indonesia — including those in Jakarta, Surabaya, Bandung, Medan, Yogyakarta, and Bali — as well as international players who access the Platform from eligible jurisdictions.

We are committed to protecting the privacy and personal data of every individual who interacts with our Platform. This Privacy Policy sets out in clear, accessible terms exactly what personal information mc888a collects, the purposes for which it is collected and processed, the legal basis for each processing activity, and the rights that you, as a data subject, hold over your own information.

This Privacy Policy forms part of the binding agreement between you and mc888a and should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Where any conflict exists between this Privacy Policy and the Terms & Conditions on matters of data protection, this Privacy Policy governs.

References to "mc888a", "we", "us", and "our" throughout this document refer to the mc888a platform and its operating entity. References to "you", "your", and "player" refer to any individual who accesses, browses, registers on, or places wagers through the mc888a Platform.

mc888a is the data controller responsible for the personal data collected and processed through the Platform. As data controller, mc888a determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities are carried out lawfully, fairly, and transparently.

For all data protection enquiries, subject access requests, or complaints relating to the handling of your personal data, please contact our dedicated Data Protection contact point:

mc888a collects personal data across several categories. The table below summarises each category, specific data points within that category, and the primary purpose for which the data is collected.

mc888a collects personal data through the following channels:

4.1 Directly from You

The majority of personal data we hold is provided directly by you during the following interactions:

• Completing the account registration form on mc888a;
• Submitting KYC identity verification documents;
• Making a deposit or requesting a withdrawal;
• Contacting our support team via live chat or email;
• Opting in to promotional communications;
• Participating in surveys, promotions, or tournaments.

4.2 Automatically Through Platform Use

When you browse or use the mc888a Platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, session duration, and the sequence of pages and games you interact with. Please see Section 8 for our full Cookie Policy.

4.3 From Third Parties

In limited circumstances, mc888a may receive personal data about you from trusted third parties, including:

• Payment processors and banking partners (transaction confirmation data);
• Identity verification service providers (document authenticity checks);
• Fraud detection and AML screening services (watchlist checks);
• Analytics providers (aggregated and anonymised usage trends).

mc888a processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including operating your account, processing deposits and withdrawals, and settling wagers.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations, fraud prevention requirements, and obligations to respond to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in furtherance of mc888a's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and product improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mc888a uses the personal data we collect for the following specific purposes:

• Account Management: Creating, maintaining, and securing your mc888a player account, including password reset, two-factor authentication, and session management;
• Identity Verification: Confirming your identity, age (minimum 21 years), and eligibility to use the Platform in accordance with our KYC obligations;
• Payment Processing: Facilitating deposits via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency (USDT, BTC, ETH), and processing withdrawal requests to your registered payment method;
• Fraud & AML Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct;
• Responsible Gaming: Monitoring player behaviour to identify patterns that may indicate problem gambling, enforcing deposit limits and self-exclusion requests, and providing intervention support where appropriate;
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support services;
• Legal Compliance: Fulfilling obligations to regulatory authorities, responding to lawful information requests, and maintaining records as required by applicable law;
• Marketing (with consent): Sending you promotional offers, bonus notifications, tournament alerts, and platform updates via email or SMS, where you have opted in to receive such communications;
• Product Improvement: Analysing aggregated usage data to improve the Platform's design, game selection, and user experience.

mc888a shares personal data only in the following circumstances, and only to the minimum extent necessary for the stated purpose:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict contractual data-processing agreements. These providers include:

• Payment processors and banking integration partners (for IDR and crypto transaction handling);
• KYC and identity verification platforms;
• Fraud detection and AML screening tools;
• Customer support software providers (live chat platform);
• Cloud infrastructure and data hosting providers;
• Game studios (limited technical session data only, not full identity data).

7.2 Legal and Regulatory Disclosure

mc888a may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or legitimate regulatory request. We will notify you of any such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of mc888a's business or assets, personal data held by mc888a may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections. You will be notified of any such transfer that materially affects your rights.

7.4 No Sale of Personal Data

mc888a does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This commitment is unconditional and not subject to exception.

mc888a uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies help us recognise you on return visits, maintain your session, and understand how the Platform is used.

The categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Disabling analytics cookies will not affect your ability to play but will limit our ability to improve the Platform based on usage data.

mc888a retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a guide:

• Account and Identity Data: Retained for the duration of your active account relationship with mc888a, plus a minimum of five years following account closure, in line with standard AML record-keeping requirements;
• Transaction and Wager Records: Retained for a minimum of five years from the date of the transaction, for regulatory compliance and dispute resolution purposes;
• KYC Documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later;
• Customer Support Communications: Retained for three years from the date of the interaction;
• Marketing Consent Records: Retained for the duration of the consent plus three years after withdrawal, as evidence of lawful marketing activities;
• Technical and Session Logs: Retained for up to 12 months, after which they are anonymised or deleted.

When personal data is no longer required and the applicable retention period has expired, mc888a will securely delete or anonymise the data in accordance with its internal data disposal procedures.

mc888a operates a global platform. Your personal data may be transferred to, and processed in, countries outside Indonesia as part of our normal business operations — for example, when data is processed by our cloud infrastructure provider or shared with a game studio operating from a different jurisdiction.

Where personal data is transferred internationally, mc888a ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Contractual clauses that obligate the recipient to protect personal data to internationally recognised standards;
• Transferring data only to jurisdictions that maintain an adequate level of data protection as determined by independent assessment;
• Requiring recipients to implement appropriate technical and organisational security measures.

As a data subject, you hold the following rights in relation to the personal data that mc888a holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".

mc888a enforces a strict minimum age requirement of 21 years for all players. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Registration on mc888a requires confirmation of age eligibility, and KYC verification is used to confirm this where required.

If mc888a becomes aware that personal data has been collected from a person under 21 years of age without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any winnings associated with an underage account will be voided.

If you believe that a minor has registered on mc888a or that mc888a holds personal data relating to a person under 21, please contact us immediately at [email protected].

mc888a implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport Encryption: All data in transit between your browser and mc888a's servers is protected by 256-bit TLS encryption;
• Data-at-Rest Encryption: Sensitive personal data stored on mc888a's servers is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced by role-based access control and multi-factor authentication for all staff;
• Audit Logging: All access to and modifications of personal data records are logged and periodically reviewed;
• Penetration Testing: mc888a engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the Platform;
• Incident Response: mc888a maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, you will be notified without undue delay as required by applicable law.

Despite these measures, no internet transmission or electronic storage system is 100% secure. You play a role in keeping your account secure — please ensure you use a strong, unique password and enable two-factor authentication (2FA) on your mc888a account.

mc888a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notification on the Platform for a minimum of seven days following the update;
• Send an email notification to all registered players with active accounts where we hold a verified email address.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you must discontinue use of the Platform and may request voluntary account closure as described in our Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically to stay informed about how mc888a protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data mc888a holds about you, please reach out through the following channels:

• Email: [email protected] — subject line: "Privacy Policy Enquiry"
• Live Chat: Available 24/7 via the chat widget on the mc888a Platform
• Response Time: All data protection requests are acknowledged within 72 hours and resolved within 30 calendar days of receipt of a complete and valid request.

If you are not satisfied with our response to a data protection request or complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction.