Privacy Policy

mp008 ("we", "us", "our") is the operator of the online gambling platform accessible at mp008.app and its associated subdomains and mobile interfaces. We are committed to protecting the personal data of every player who accesses or registers on our platform, particularly our core audience of Indonesian players located across cities including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond.

This Privacy Policy sets out a comprehensive account of our data-processing practices in plain, transparent language. It covers all personal information that mp008 collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures we apply to protect it, and the rights you hold over your own data.

This policy applies to:

• All visitors to mp008.app, whether registered or unregistered.
• All registered Account holders and active players on the platform.
• All individuals who contact mp008's customer support team by any channel.
• All individuals who participate in any mp008 promotional campaign, survey, or referral program.

This Privacy Policy should be read alongside our Terms & Conditions, which form part of the overall agreement governing your use of the mp008 platform.

mp008 collects personal data that is necessary, proportionate, and directly relevant to the provision of a secure, compliant, and high-quality online gambling service. The categories of personal data we may collect are described in the table below.

mp008 collects personal data through the following channels:

• Account registration: When you create an mp008 account, you provide your name, date of birth, email address, phone number, and residential address.
• KYC verification: When you submit identity documents and proof-of-address materials to complete Know Your Customer verification before your first withdrawal.
• Deposits and withdrawals: When you initiate a financial transaction, your bank account or e-wallet details are collected and recorded.
• Customer support: When you contact our team via live chat or email, the content of those communications is logged and stored.
• Promotions and surveys: When you participate in an mp008 promotional offer, competition, or voluntary feedback survey.

• Cookies and similar technologies: Our platform uses cookies, web beacons, pixels, and local storage to collect technical and usage data automatically when you browse mp008.app. See Clause 8 for a detailed breakdown.
• Server logs: Our web servers automatically record IP addresses, request timestamps, browser identifiers, and response codes for every request made to mp008.app.
• Game engine telemetry: Game providers integrated into our platform (such as Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, and others) may transmit session data back to mp008 for record-keeping and dispute resolution purposes.

• Payment processors: When you deposit or withdraw funds via a local Indonesian bank transfer or e-wallet, our payment processing partners may share transaction confirmation data with us.
• Identity verification services: Third-party KYC and anti-fraud providers may supply supplementary identity verification results or risk-scoring data.
• Fraud prevention databases: Industry-shared fraud detection networks may flag accounts or payment instruments associated with known fraudulent activity.

mp008 processes personal data only where there is a clear, documented purpose and a recognized legal basis. The table below maps each processing purpose to its lawful basis.

mp008 does not sell, rent, or trade your personal data to any third party for their own commercial marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

We engage carefully selected third-party service providers who process personal data on our behalf under strict data-processing agreements. These providers include:

• Payment processors and banking partners: to facilitate deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and identity verification providers: to carry out document verification, liveness checks, and sanctions screening as part of our anti-money-laundering obligations.
• Game technology providers: Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, NetEnt, Microgaming, and other licensed studios whose games are hosted on our platform. These providers receive session data necessary to deliver and audit game outcomes.
• Cloud infrastructure and hosting providers: who store platform data on secured servers subject to industry-standard physical and logical access controls.
• Customer support tooling providers: who power our live chat and ticketing systems.
• Analytics and fraud detection platforms: who help us identify suspicious behavior patterns and improve platform security.

mp008 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where we are legally obligated to do so. Such disclosures are made strictly in accordance with Applicable Law and only to the extent required by the specific legal demand.

In the event that mp008 undergoes a merger, acquisition, restructuring, or sale of all or a material part of its assets, personal data held by mp008 may be transferred to the successor entity as part of that transaction. Affected users will be notified of any such transfer and of any change to the applicable privacy policy within a reasonable timeframe.

Beyond the categories listed above, mp008 will not share your personal data with any third party without your explicit prior consent, which you may withdraw at any time.

As an internationally operating platform, mp008 may transfer personal data to servers, service providers, or group entities located outside of Indonesia. When such transfers occur, mp008 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections afforded under applicable Indonesian data protection law.

Safeguards we employ for cross-border transfers include:

• Entering into binding data processing agreements with all recipients that include enforceable data subject rights and effective legal remedies.
• Transferring data only to recipients located in jurisdictions that have been assessed to provide an adequate level of data protection.
• Applying additional technical safeguards such as encryption in transit and at rest where the destination jurisdiction's standard protections require supplementation.

You may request further information about the specific transfer mechanisms applicable to your personal data by contacting our support team at the address provided in Clause 14.

mp008 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law, whichever is longer. Our general retention schedule is as follows:

When the retention period expires and no legal obligation requires continued storage, mp008 will securely delete or anonymize your personal data so that it can no longer be associated with your identity.

mp008 uses cookies and similar tracking technologies on mp008.app to deliver core platform functionality, maintain session security, measure platform performance, and — where you have consented — deliver relevant promotional content.

• Strictly Necessary Cookies: These cookies are essential for you to log in, navigate the platform, and access secure areas such as your account dashboard and cashier. The platform cannot function without these cookies and they cannot be disabled.
• Functional Cookies: These remember your preferences, such as your chosen language display settings and responsible gaming configurations, so you do not need to reconfigure them on each visit.
• Performance & Analytics Cookies: These collect aggregated, anonymized data about how visitors use mp008.app — which pages are most visited, how long sessions last, and where users click. This data helps us improve the platform experience for all players.
• Marketing Cookies: Where you have given explicit consent, these cookies are used to track your interactions with mp008 promotional content and to deliver personalized offers relevant to your preferences. You may withdraw consent for marketing cookies at any time.

Most modern browsers allow you to view, control, and delete cookies through the browser's settings menu. You may also use browser extensions that provide granular cookie management. Please note that disabling strictly necessary cookies will prevent you from accessing your mp008 account and using the platform. Disabling analytics or marketing cookies will not affect your ability to play but may result in less personalized promotional communications.

Detailed information about the specific cookies placed by mp008 and their individual retention periods is available on request from our support team.

mp008 applies a layered, defense-in-depth security architecture to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and mp008.app is encrypted using industry-standard Transport Layer Security (TLS). Look for the padlock icon in your browser's address bar confirming a secure connection.
• Encryption at Rest: Sensitive personal data and financial records stored on mp008's servers are encrypted at the storage layer using AES-256 encryption.
• Access Controls: Access to personal data within mp008's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Multi-Factor Authentication (MFA): Administrative access to systems containing personal data requires multi-factor authentication.
• Regular Security Audits: mp008 engages independent cybersecurity specialists to conduct periodic penetration testing and security audits of our platform infrastructure.
• Fraud Monitoring: Automated systems monitor account activity in real time for patterns indicative of unauthorized access, payment fraud, or identity theft.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mp008 will notify affected users without undue delay, providing a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.

As a player on the mp008 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us using the details in Clause 14. mp008 will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data mp008 holds about you, along with information about how it is processed and the legal basis for that processing.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to overriding legal retention obligations — for example, financial transaction records that we are required by law to retain for seven years cannot be erased on request within that retention window.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data while a rectification request is being assessed, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests — including profiling for marketing purposes. You also have an absolute right to object to direct marketing at any time, with no need to provide justification.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces a legal or similarly significant effect on you, unless mp008 has your explicit consent or the decision is necessary for the performance of a contract.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The mp008 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Registration on mp008 requires the provision of a date of birth, and we verify age eligibility as part of our standard KYC process.

If mp008 becomes aware that an account has been registered by a person under the age of 21, that account will be immediately suspended, all associated personal data will be permanently deleted, and any deposits or balance held in the account will be refunded to the originating payment method after identity confirmation.

Parents and guardians who have reason to believe that a minor has registered on the mp008 platform should contact our support team immediately at support@mp008.app. We will investigate and act on all such reports as a matter of priority.

The mp008 platform may, from time to time, contain references or navigational links to third-party game studios, payment provider information pages, or other resources. This Privacy Policy applies solely to data processed by mp008 through the mp008.app platform and its associated systems.

mp008 has no control over the data-processing practices of any third-party websites or services and accepts no responsibility for the privacy practices, content, or security of those external resources. If you navigate to a third-party site from a link encountered on our platform, we strongly encourage you to review that site's privacy policy before submitting any personal information.

mp008 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data-processing practices, operational requirements, or applicable law. When material changes are made, we will notify registered players by email to their registered address and will display a prominent notice on the platform for a period of not less than seven (7) calendar days before the revised policy takes effect.

Your continued use of the mp008 platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. The "Last Reviewed" date at the top of this page indicates when the most recent review was conducted. We encourage you to review this policy periodically to stay informed of how we handle your personal data.

If a proposed change materially reduces your rights or materially expands the scope of data processing in a way that requires fresh consent, mp008 will seek that consent from you actively before the change takes effect, rather than relying solely on continued use of the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way mp008 handles your personal data, please reach out to our support team using the following contact details:

Support is available in both English and Indonesian (Bahasa Indonesia) around the clock, every day of the year including Indonesian public holidays (Idul Fitri, Idul Adha, Indonesian Independence Day, Nyepi, and others).

If you are dissatisfied with mp008's response to a data-related concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. mp008 will cooperate fully with any supervisory authority investigation and will implement any remedial measures required as a result of such an investigation.