Privacy Policy

1. Introduction

mc88 ("mc88", "we", "us", or "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or uses our online sports betting and casino platform at https://mc88.beer (the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we share it, and what rights you have regarding your own information.

This Policy applies to all Users of mc88 regardless of geographic location, and specifically acknowledges the context of Indonesian players who access our internationally licensed offshore platform. By creating an account or otherwise using mc88's services, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including name, email address, phone number, date of birth, bank account details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Controller" means mc88 as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means a third party that processes Personal Data on behalf of mc88 under documented contractual instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data.
• "KYC" means Know Your Customer — the identity verification process mandated by international anti-money laundering (AML) regulations.
• "Cookies" means small text files placed on your device by the Platform to enable certain features and collect analytical data.

3. Data We Collect

3.1 Data You Provide Directly

When you register for an mc88 account, complete KYC verification, or contact our support team, you provide us with the following categories of Personal Data:

3.2 Data Collected Automatically

When you use the mc88 Platform, our systems automatically collect certain technical and behavioural data:

• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, features accessed, game sessions initiated, bet history, session duration, click-stream data, and navigation paths within the Platform.
• Location Data: Approximate geographic location derived from IP address (not GPS-level precision). Used to enforce geographic access controls and detect suspicious login patterns.
• Cookie and Tracking Data: Information collected via cookies and similar tracking technologies as described in Section 6 below.

3.3 Data from Third Parties

mc88 may receive Personal Data about you from the following third-party sources:

• Payment Processors: Transaction confirmation data from bank transfer gateways and e-wallet providers to verify deposits and process withdrawals.
• Identity Verification Services: Third-party KYC providers may supply document verification results and fraud-risk scores.
• Anti-Fraud Databases: Industry-shared fraud prevention databases may flag accounts associated with previously identified fraudulent activity.
• Marketing Referrers: If you arrive at mc88 through an affiliate partner, we may receive a referral identifier to attribute your registration correctly.

4. How We Use Your Data

mc88 uses Personal Data only for legitimate, documented purposes. The following table maps each data use to its governing legal basis:

mc88 does not use your Personal Data for automated individual decision-making that produces significant legal effects without human review, except as required by AML screening tools subject to regulatory mandates.

5. Legal Basis for Processing

mc88 processes Personal Data under the following legal bases, consistent with internationally recognized data protection principles:

• Contract Performance: Processing necessary to fulfil our obligations under the Terms & Conditions you accept upon registration.
• Legal Obligation: Processing required to comply with applicable international gaming licensing conditions, AML regulations, and financial reporting requirements.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, and analytics, where our interests are not overridden by your fundamental rights.
• Consent: Where we rely on consent (e.g., for marketing emails), you may withdraw that consent at any time by contacting our support team or using the unsubscribe mechanism in our emails.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function — session management, login state, and security tokens. Cannot be disabled without rendering the Platform non-functional.
• Performance Cookies: Collect anonymised data about how Users navigate the Platform (pages visited, errors encountered, load times). Used to improve Platform performance. Data is aggregated and not linked to individuals.
• Functional Cookies: Remember your preferences such as language, game lobby display settings, and preferred deposit method to provide a personalised experience.
• Analytics Cookies: Used by third-party analytics providers (with data processing agreements in place) to help us understand usage trends and optimise content.

6.2 Managing Cookies

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may impair Platform functionality. Guidance on managing cookies is available through your browser's help documentation. Continuing to use the Platform without adjusting your cookie settings constitutes consent to our use of cookies as described above.

7. Data Sharing and Disclosure

mc88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

7.1 Service Providers (Processors)

We engage third-party service providers who process data strictly on our behalf under binding data processing agreements. Categories include:

• Payment processing and banking infrastructure providers (handling BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay transaction routing)
• KYC and identity verification platforms
• Fraud detection and AML screening services
• Cloud hosting and infrastructure providers
• Customer support software providers
• Email delivery services for transactional communications

7.2 Legal and Regulatory Disclosures

We may disclose your Personal Data to government authorities, law enforcement agencies, or our licensing regulator where required by applicable law or a valid le gal order. We will notify you of any such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mc88's business assets, your Personal Data may be transferred to the successor entity. We will notify you via email or prominent Platform notice before your data becomes subject to a materially different privacy policy.

7.4 Aggregate and Anonymised Data

We may share aggregated, anonymised statistical data (which cannot be used to identify any individual) with business partners, advertisers, and industry analysts for market research and reporting purposes.

8. International Data Transfers

mc88 operates as an internationally licensed offshore platform serving Indonesian players. Your Personal Data may be stored and processed on servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those in your home country.

Where we transfer Personal Data internationally, we apply appropriate safeguards to ensure your data receives a comparable level of protection, including:

• Contractual clauses (Standard Contractual Clauses or equivalent) binding the recipient to data protection standards consistent with this Policy.
• Transferring data only to processors who operate under recognised international data protection frameworks.
• Applying technical and organisational security measures (see Section 11) regardless of where data is processed.

By using mc88's services, you acknowledge and consent to the transfer of your Personal Data to servers located outside Indonesia for the purposes described in this Policy.

9. Data Retention

mc88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

10. Your Rights

Regardless of your location, mc88 respects the following data subject rights and will respond to valid requests within 30 days of receipt:

10.1 Right of Access

You may request a copy of all Personal Data we hold about you, along with information about how it is processed, the legal basis for processing, and with whom it has been shared.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information (such as email address or phone number) directly through your account settings. For KYC-related corrections, please contact our support team.

10.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that we may be required to retain certain data for regulatory purposes (see Section 9) even after an erasure request.

10.4 Right to Restrict Processing

You may request that we limit the processing of your Personal Data in certain circumstances, such as while a dispute regarding data accuracy is resolved.

10.5 Right to Data Portability

Where processing is based on your consent or contract performance and carried out by automated means, you may request that your Personal Data be provided to you in a structured, machine-readable format (CSV or JSON), or transmitted directly to another controller where technically feasible.

10.6 Right to Object

You have the right to object to processing based on our legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

11. Security Measures

mc88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encrypted Storage: Sensitive Personal Data (including KYC documents and financial identifiers) is encrypted at rest using AES-256 encryption on secure cloud infrastructure.
• Access Controls: Personal Data is accessible only to authorised mc88 personnel who require it to perform their job functions. Access is governed by role-based permissions and two-factor authentication for internal systems.
• Security Audits: We conduct regular internal security reviews and engage third-party penetration testing firms to identify and remediate vulnerabilities.
• Incident Response: mc88 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Users within 72 hours of becoming aware of the incident.
• Staff Training: All mc88 personnel handling Personal Data receive mandatory data protection and security training upon onboarding and annually thereafter.

While we apply robust security measures, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your mc88 account and to enable any two-factor authentication options available in your account settings.

12. Minors and Age Restriction

mc88 services are strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes date-of-birth verification, and our KYC procedure requires submission of a valid government-issued identity document confirming age eligibility.

If we discover or have reasonable grounds to believe that Personal Data has been collected from a person under 21, we will immediately suspend the associated account, void any transactions, and permanently delete the relevant data from our systems. If you believe a minor has successfully registered on our Platform, please contact us immediately at [email protected] so that we may take prompt corrective action.

13. Third-Party Links and Services

The mc88 Platform may contain references to third-party services, game studios (such as Evolution Gaming, Pragmatic Play, NetEnt, or Microgaming), and payment providers. Interaction with these third parties is governed by their own independent privacy policies, over which mc88 has no control. We encourage you to review the privacy policies of any third-party services you use in connection with your mc88 account.

mc88 is not responsible for the privacy practices, content, or security standards of any third-party services, websites, or platforms.

14. Changes to This Privacy Policy

mc88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. The revised Policy will be posted on this page with an updated "Effective Date". Where changes are material — meaning they significantly affect how we process your Personal Data or your associated rights — we will notify registered Users via email at least 14 days before the changes take effect.

Your continued use of mc88's services after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mc88 processes your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 through the Platform interface — Indonesian-speaking agents are on hand around the clock.
• Response Time: We aim to acknowledge all privacy-related inquiries within 24 hours and to provide a substantive response within 30 calendar days.

For concerns that remain unresolved after contacting mc88, you may escalate the matter to the supervisory authority of our licensing jurisdiction. Contact details for the relevant authority are available upon request.