Privacy Policy — Your Data at mp076

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, date of birth, national identity number (NIK), email address, phone number, residential address, bank account details, IP address, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — mp076, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of mp076 under a binding data processing agreement.
• "KYC" — Know Your Customer; the identity and age verification process required for all mp076 account holders prior to withdrawal eligibility.
• "Cookies" — small text files stored on your device by your browser at the instruction of the mp076 platform, used to maintain session state, preferences, and analytical data.
• "Session Data" — technical data generated automatically during your use of the mp076 platform, including pages visited, games played, wager amounts, login timestamps, and session duration.
• "Third Party" — any entity that is not mp076, its direct employees, or you as a Player.

mp076 collects personal data across two broad categories: data you provide directly, and data collected automatically through your use of the platform.

Data You Provide Directly:

• Registration Data: Full legal name, date of birth, email address, phone number, username, password (stored as an encrypted hash — never in plain text), and your city or province of residence within Indonesia.
• KYC Documentation: Scanned or photographed copies of your Indonesian national identity card (KTP) or passport, proof of residential address (such as a utility bill or bank statement issued within the last three months), and, where required, selfie photographs for facial-match verification.
• Payment Information: Bank account name, bank account number, and the name of your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or other supported institution) or e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja). mp076 does not store full card numbers or CVV codes.
• Communications Data: Content of messages, complaints, or support requests you submit to the mp076 customer service team via live chat or email.
• Preference Data: Voluntary settings you configure within your account, such as preferred deposit method, preferred game category (sportsbook, live casino, slots, togel (Indonesia's traditional numbers lottery), sabung ayam (cockfighting)), or notification preferences.

Data Collected Automatically:

• Device & Browser Data: Device type and model, operating system version, browser type and version, screen resolution, and language settings.
• Network Data: IP address, approximate geolocation derived from IP (city-level only — mp076 does not collect GPS location data), internet service provider name, and connection type.
• Session & Behavioural Data: Pages visited within mp076.net, time spent on each page, games launched, bet history, wagering patterns, promotional offers viewed or claimed, and navigation pathways through the platform.
• Cookie and Tracking Technology Data: Data collected via first-party cookies and similar technologies as described in Section 7 of this Policy.

mp076 collects personal data through the following mechanisms:

1. Registration and Account Management Forms: Data entered by you when creating an account, updating your profile, or submitting KYC documentation via the platform.
2. Transaction Processing: Data exchanged with payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) during the deposit and withdrawal process.
3. Automated Technical Collection: Server logs, session management systems, and analytics tools that record your interaction with the platform. This collection begins as soon as you load any page on mp076.net.
4. Cookies and Similar Technologies: As described in Section 7, mp076 uses cookies to maintain your login session, remember your preferences, and analyse platform usage patterns.
5. Customer Support Interactions: Records of your communications with the mp076 support team via live chat or email correspondence to [email protected].
6. Third-Party Identity Verification Services: Where mp076 uses a third-party KYC service provider to verify your identity documents, that provider may collect biometric or documentary data on mp076's behalf as a Data Processor operating under a binding agreement.

mp076 uses the personal data it collects for the following purposes:

mp076 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and mp076 — specifically, to create and manage your account, process deposits and withdrawals, and provide access to the platform's gaming services.
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering (AML) regulations, international sanctions screening obligations, and regulator-mandated KYC requirements.
• Legitimate Interests: Processing carried out for mp076's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided that those interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mp076 does not sell, rent, or otherwise trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

1. Payment Processing Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the payment information necessary to process your deposit and withdrawal transactions. These entities act as independent data controllers under their own privacy policies.
2. KYC and Identity Verification Providers: Third-party KYC service providers engaged by mp076 to perform identity document verification and fraud screening. These providers act as Data Processors under binding agreements that restrict their use of your data to the stated purpose only.
3. Game Content Suppliers: Licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe, and Pocket Games Soft) may receive session identifiers and wager data to facilitate the delivery of their games. These studios do not receive your full personal profile or payment details.
4. IT Infrastructure and Hosting Providers: Cloud infrastructure and server hosting partners that store and process platform data on mp076's behalf. These providers act as Data Processors under strict confidentiality and data security obligations.
5. Legal and Regulatory Authorities: Where required by applicable law, court order, or a legitimate request from a regulatory authority, mp076 may disclose personal data to relevant governmental or law enforcement bodies. mp076 will notify affected Players of such disclosures wherever legally permissible.
6. Professional Advisors: Lawyers, auditors, and accountants who require access to personal data in the course of providing professional services to mp076, subject to strict confidentiality obligations.

mp076 uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session, remember your preferences, and analyse how Players interact with the site. The categories of cookies used by mp076 are as follows:

mp076 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving targeted advertisements on external websites.

You may control cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your mp076 account. For more information on managing cookies in your specific browser, please refer to your browser's help documentation.

mp076 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, to satisfy AML record-keeping obligations.
• KYC Documentation: Retained for a minimum of five years following the date of verification or the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five years following each transaction date, in compliance with international financial record-keeping standards.
• Customer Support Correspondence: Retained for three years from the date of the final communication in each support thread.
• Analytical and Session Data: Retained in anonymised or aggregated form for up to 24 months for platform performance analysis. Identifiable session data is deleted or anonymised within 12 months of collection.
• Marketing Consent Records: Retained until you withdraw consent, plus an additional 12 months to evidence the lawful basis for prior communications.

Upon the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to an identifiable individual.

mp076 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Encryption: All data transmitted between your browser and the mp076 platform is encrypted using TLS 1.2 or higher, enforced by a 256-bit SSL certificate. Connection attempts over unencrypted HTTP are automatically redirected to HTTPS.
• Password Security: User passwords are stored exclusively as salted cryptographic hashes using a modern one-way hashing algorithm. mp076 employees cannot retrieve or read your password in any form.
• Access Controls: Access to production systems and Player data is restricted to authorised mp076 personnel on a strict need-to-know basis. Administrative access requires multi-factor authentication (MFA) and is subject to regular access reviews.
• Data Segmentation: Payment credentials, KYC documents, and account credentials are stored in logically segregated systems with separate access control policies, minimising the impact of any single point of compromise.
• Security Monitoring: mp076 operates continuous automated monitoring of its platform infrastructure for intrusion attempts, anomalous traffic patterns, and potential data breaches. Security incidents are escalated to a dedicated response team within defined SLA windows.
• Regular Security Audits: The mp076 platform undergoes periodic security assessments including penetration testing and vulnerability scanning by independent third-party security specialists.

As a Player on the mp076 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the mp076 support team via live chat or by email at [email protected]. mp076 will respond to all verified requests within 30 calendar days.

1. Right of Access: You have the right to request a copy of the personal data that mp076 holds about you, together with information about how that data is being processed. We will provide this in a clear, structured format.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. For certain data fields (e.g., your registered name), rectification may require documentary evidence.
3. Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations — mp076 may be required to retain certain data (e.g., transaction records, KYC documents) notwithstanding an erasure request.
4. Right to Restriction of Processing: You may request that mp076 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of legitimate grounds.
5. Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that mp076 provide your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: You have the right to object to the processing of your personal data where that processing is based on mp076's legitimate interests. mp076 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

The mp076 platform is strictly for adults aged 21 years and older. mp076 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the registration process, and mp076 reserves the right to request documentary proof of age at any stage of account use.

If mp076 becomes aware that personal data has been collected from an individual under the age of 21 — whether through parental notification, KYC review, or any other means — the following actions will be taken immediately:

• The account will be suspended and access to the platform revoked.
• Any wagering activity will be voided and winnings forfeited.
• Any deposited funds will be returned to the original payment method following verification.
• All personal data associated with the account will be deleted as soon as the return of funds has been processed.

Parents or guardians who believe that a minor has registered on the mp076 platform should contact us immediately at [email protected] with the subject line "Underage Account Report". mp076 treats all such reports with the highest urgency and will act within 24 hours of a verified report.

The mp076 platform integrates with a number of third-party services to deliver its full range of products. While mp076 carefully vets all third-party partners, each operates under its own privacy policy and data processing practices. mp076 is not responsible for the privacy practices of third-party entities acting as independent data controllers.

Third-party services integrated into the mp076 platform include:

• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft (Pocket Games Soft), Spribe, and other licensed studios whose game clients run within the mp076 lobby. These studios may collect session data relating to game events for fair-play auditing and game performance purposes.
• Payment Gateways: Banking intermediaries facilitating transfers to and from BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP bank accounts, and e-wallet platforms including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity Verification Services: Third-party KYC providers used to automate document authentication and facial-recognition matching for compliance purposes.
• Cloud Infrastructure Providers: Server hosting and content delivery network (CDN) providers that store and serve platform assets and data.

mp076 does not integrate with third-party social media platforms, advertising networks, or data brokers in a manner that would result in your personal data being shared with those entities without your knowledge.

As an internationally operated platform, mp076 may process or store personal data on servers located outside of Indonesia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Indonesia, mp076 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses (BCCs) with the receiving entity that require it to protect your data to a standard consistent with internationally recognised data protection principles.
• Engagement of processors who operate under internationally recognised security certifications (e.g., ISO/IEC 27001).
• Technical safeguards including end-to-end encryption for data in transit between jurisdictions.

By using the mp076 platform, you acknowledge that your personal data may be transferred to and processed in countries outside of Indonesia, subject to the safeguards described above.

mp076 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to the platform. The "Last Updated" date displayed at the top of this page will be revised to reflect the date of any material amendment.

Where changes are material — meaning they significantly alter how we collect, use, or share your personal data — mp076 will provide advance notice of no less than seven days via the email address registered to your account and by displaying a prominent banner on the mp076 platform. Non-material updates (such as clarifications, typographical corrections, or reformatting) may take effect immediately without individual notification.

Your continued use of the mp076 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the platform and request account closure. It remains your responsibility to review this policy periodically.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the mp076 data team through any of the following channels:

For formal data rights requests, please email [email protected] with the subject line "Data Rights Request" and include your registered username, a clear description of the right you wish to exercise, and a copy of a valid identity document for verification purposes. mp076 will acknowledge all data rights requests within five business days and will aim to resolve them within 30 calendar days.