Privacy Policy — mbo88

The following terms carry the meanings set out below throughout this Privacy Policy:

• "mbo88" / "Platform" / "We" / "Us" — the online betting and gaming service operated at https://mbo88.cam, including all associated sub-pages and services.
• "Player" / "You" — any individual who registers an account or interacts with the mbo88 Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Third-Party Service Provider" — a company engaged by mbo88 to perform specific operational functions (e.g., payment processing, identity verification, fraud detection), operating under a contractual data-protection obligation to mbo88.
• "KYC" (Know Your Customer) — the identity and age verification process mbo88 applies to all accounts prior to processing withdrawals.
• "Cookie" — a small text file placed on your device by the mbo88 Platform to facilitate session management, analytics, and personalisation functions.
• "IDR" / "Rp" — Indonesian Rupiah, the sole currency in which mbo88 transactions are conducted.

mbo88 acts as the Data Controller for all Personal Data collected from Players through the Platform. As Data Controller, mbo88 determines the purposes and means by which your Personal Data is processed.

mbo88 is operated as a licensed international online gaming platform serving players in Indonesia and other permitted jurisdictions. The Platform's primary target market is Indonesian players — particularly those in major cities including Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta — who prefer an English-language betting and casino experience.

mbo88 collects only the Personal Data necessary to operate the Platform, comply with legal obligations, and deliver a high-quality service to Players. The categories of data we collect are as follows:

mbo88 collects Personal Data through the following channels:

4.1 Directly From You

• During account registration — when you provide your name, contact details, date of birth, and preferred payment method.
• During KYC verification — when you submit identity documents (Indonesian KTP, passport, proof of address, or equivalent).
• When you deposit or request a withdrawal — financial data associated with your chosen payment method.
• When you contact mbo88 support via live chat or email — your communications and the information you provide within them.
• When you complete surveys, respond to promotions, or submit a complaint or feedback form.

4.2 Automatically Through Platform Use

• Technical and usage data collected via cookies, session tracking, and server logs when you browse or interact with the mbo88 Platform.
• Device fingerprint data used for security and fraud-detection purposes.
• Geolocation data (derived from IP address) used to verify jurisdictional eligibility.

4.3 From Verified Third Parties

• Identity verification data from KYC service providers engaged by mbo88 to confirm the authenticity of documents submitted by Players.
• Fraud-risk signals from payment processors and anti-money laundering screening services.
• Publicly available data where relevant to account security or compliance obligations.

mbo88 uses your Personal Data exclusively for the following purposes. We do not use your data for any purpose not listed below without first seeking your consent or updating this Privacy Policy with appropriate notice.

• Account Management: To create, maintain, and administer your mbo88 Player account, including processing deposits and withdrawals in IDR via local Indonesian banks and e-wallets.
• Identity & Age Verification (KYC): To confirm that you are who you claim to be, that you are at least 21 years of age, and that you are eligible to use the mbo88 Platform under applicable regulations.
• Transaction Processing: To execute deposits, withdrawals, and bonus credits accurately and to maintain complete financial records for audit and compliance purposes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multiple-account creation, bonus abuse, money laundering, and other prohibited activities on mbo88.
• Regulatory Compliance: To meet legal obligations including anti-money laundering (AML) requirements, know-your-customer (KYC) standards, and licensing conditions imposed by mbo88's regulatory authority.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to administer self-exclusion, deposit limits, loss limits, and session time controls requested by Players. For details, see our Responsible Gaming page.
• Customer Support: To respond to your queries, process your complaints, and resolve disputes relating to your mbo88 account or any transaction.
• Platform Improvement: To analyse aggregated usage data in order to improve the mbo88 Platform's performance, design, and game content offering.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates — but only where you have provided explicit consent to receive such communications and have not subsequently opted out.
• Legal Proceedings: To establish, exercise, or defend legal claims arising from your use of the mbo88 Platform where necessary.

mbo88 processes your Personal Data on one or more of the following lawful bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to perform the contract between you and mbo88 — specifically, to operate your account, process your transactions, and deliver the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and licensing conditions.
• Legitimate Interests: Processing undertaken in pursuit of mbo88's legitimate business interests where those interests are not overridden by your own rights — including fraud detection, platform security, and operational analytics.
• Consent: Where you have given us explicit, specific consent to process your data for a defined purpose — such as receiving marketing communications or accepting optional cookies. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

mbo88 does not sell, rent, or trade your Personal Data. We share your data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

Transaction data is shared with mbo88's certified payment partners — including the processing networks of BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process your requested deposits and withdrawals. These partners operate under their own privacy and security frameworks and handle financial data in compliance with applicable banking regulations.

7.2 Identity Verification Providers

During KYC verification, identity document data may be transmitted to mbo88's contracted third-party verification partner to confirm authenticity. This partner is bound by a data processing agreement that restricts further use of your information.

7.3 Fraud Detection & AML Screening

Certain account and transaction data may be processed by mbo88's fraud-detection and AML compliance tools, which may involve third-party service providers operating under strict confidentiality obligations.

7.4 Legal & Regulatory Authorities

mbo88 may disclose Personal Data to competent legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or legitimate regulatory demand. We will notify you of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a material part of mbo88's business assets, Player Personal Data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring party assuming equivalent data-protection obligations under this Privacy Policy.

mbo88 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data (identity, contact, financial, gaming records): retained for the duration of your active account relationship with mbo88, plus a minimum of 5 years following account closure — to meet AML, KYC, and financial record-keeping obligations.
• Transaction records (deposit and withdrawal logs, bet history): retained for a minimum of 5 years from the date of each transaction, in line with financial compliance requirements.
• KYC documents (identity documents, proof of address): retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications (chat transcripts, emails): retained for 2 years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: retained for the period of consent validity and for 1 year after consent is withdrawn, for record-keeping and compliance evidence purposes.
• Analytical and usage data: retained in aggregated, anonymised form for platform improvement purposes with no fixed expiry, as anonymised data is no longer considered Personal Data.

Upon expiry of the applicable retention period, mbo88 will securely delete or irreversibly anonymise your Personal Data.

mbo88 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• Transport-layer encryption: All data transmitted between your device and the mbo88 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). You can verify this via the padlock icon in your browser address bar.
• Data-at-rest encryption: Sensitive Personal Data stored in mbo88's databases is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to Personal Data within mbo88 is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative systems, and full access audit logging.
• Payment data security: mbo88 does not store raw card numbers or full bank account credentials. All payment data is handled by PCI-DSS-compliant payment partners.
• Intrusion detection: mbo88 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Employee training: All mbo88 personnel with access to Personal Data receive mandatory data-protection and security awareness training.

mbo88 uses cookies and similar tracking technologies to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — enabling session management, login persistence, and security token validation. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised information about how Players navigate the Platform — pages visited, time spent, error occurrences — to help mbo88 identify and fix usability issues. No personally identifiable information is captured by these cookies.
• Functional Cookies: Remember your preferences — such as language setting, preferred game category, or display options — to provide a more personalised experience during and between sessions.
• Fraud Detection Cookies: Used to identify and flag unusual or high-risk session behaviour that may indicate account compromise or fraudulent activity. These cookies are part of mbo88's security infrastructure.

mbo88 does not use third-party advertising or tracking cookies that would transmit your browsing data to external ad networks. You may configure your browser to block or delete cookies; however, doing so may affect the functionality of certain Platform features, including the ability to remain logged in between sessions.

As a Player on the mbo88 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team using the details in Clause 15. All requests are processed within 30 calendar days at no cost to you.

• Right of Access: You may request a copy of all Personal Data mbo88 holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data mbo88 holds about you. You may also update routine account details (contact information, preferred payment method) directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing has been unlawful. Note that mbo88 may be required to retain certain data to meet legal and regulatory obligations, even following an erasure request.
• Right to Restriction: You may request that mbo88 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You may request a copy of the Personal Data you have provided to mbo88 in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to mbo88's processing of your Personal Data where that processing is based on legitimate interests, including direct marketing communications. Objections to marketing will be honoured immediately; other objections will be assessed within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

The mbo88 Platform is strictly restricted to individuals who are 21 years of age or older. mbo88 does not knowingly collect or process Personal Data from individuals under 21 years of age.

If mbo88 discovers that Personal Data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or otherwise — that account will be immediately suspended and all associated Personal Data deleted, subject to any retention obligations imposed by law for fraud-prevention or reporting purposes.

If you are a parent or guardian and have reason to believe that an individual under 21 years of age has registered an account on mbo88 using their own or your details, please contact mbo88 support immediately so that the account can be reviewed and, if appropriate, closed.

mbo88's primary operations are focused on serving the Indonesian market. However, as an internationally licensed platform, some of the third-party service providers engaged by mbo88 — including KYC verification partners and fraud-detection systems — may process Personal Data in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, mbo88 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data-processing agreements with all third-party processors that incorporate data-protection standards equivalent to those described in this policy.
• Selection of service providers that operate in jurisdictions with adequate data-protection frameworks or that are certified under recognised international security standards.
• Data minimisation — only the minimum necessary data is transmitted for the specific processing purpose, and recipients are prohibited from using it for any other purpose.

mbo88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material — meaning they significantly affect how your data is used or your rights as a Player — mbo88 will:

• Post a prominent notice on the mbo88 Platform at least 7 calendar days before the updated policy takes effect.
• Send a notification to your registered email address summarising the key changes.
• Update the effective date and version number displayed at the top of this page.

Your continued use of the mbo88 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should discontinue use and contact mbo88 support to arrange account closure in accordance with our Terms & Conditions.

The current version of this Privacy Policy is always available at https://mbo88.cam/privacy-policy. We encourage Players to review it periodically.

For any privacy-related queries, data subject access requests, objections, or complaints about mbo88's handling of your Personal Data, please contact our support team using the details below. All privacy enquiries are handled by trained personnel with data-protection responsibilities.

If you are not satisfied with mbo88's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. mbo88 will cooperate fully with any such authority in the investigation of a complaint.

This Privacy Policy should be read in conjunction with mbo88's Terms & Conditions and Responsible Gaming policy, both of which are available on this Platform.