How mb099 collects, uses, stores, and protects your personal data — written plainly, with no ambiguity
This Privacy Policy explains how mb099 (accessible at https://mb099.cam) handles your personal information. We collect only what is necessary to operate our gaming services securely, we do not sell your data to advertisers, and we give you meaningful control over your information. If you have any questions after reading this document, our Data Protection contact is listed in Section 14.
mb099 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits our website or uses our online gaming services. This Privacy Policy applies to all players registered on mb099, visitors browsing our platform without an account, and any person whose personal data we process in the course of providing our services.
We operate primarily in Indonesia and serve players across Jakarta, Surabaya, Medan, Bandung, Semarang, Yogyakarta, Makassar, and other Indonesian cities. Our data handling practices are designed to comply with internationally recognized data protection principles, including those reflected in Indonesia's Undang-Undang Perlindungan Data Pribadi (Personal Data Protection Law) and applicable offshore licensing requirements.
By registering an account with mb099, accessing our website, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform immediately.
We collect the following categories of personal data from our players and website visitors:
mb099 collects personal data through the following means:
We process your personal data under the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation, authentication, and service provision | Contractual necessity — required to deliver our services under the User Agreement |
| Identity verification (KYC) and age verification | Legal obligation — compliance with anti-money laundering and responsible gaming regulations |
| Fraud detection and security monitoring | Legitimate interests — protecting the platform and all users from fraudulent activity |
| Transaction processing (deposits and withdrawals) | Contractual necessity — required to execute financial transactions at your request |
| Responsible gaming tools and problem gambling monitoring | Legal obligation and legitimate interests — player welfare and regulatory compliance |
| Marketing communications and promotional offers | Consent — with your explicit opt-in; you may withdraw consent at any time |
| Platform analytics and performance improvements | Legitimate interests — improving service quality and user experience |
| Legal claims, disputes, and regulatory reporting | Legal obligation and legitimate interests — compliance with applicable law and defense of legal claims |
mb099 uses the personal data we collect strictly for the purposes outlined below. We do not use your data for purposes incompatible with those stated here without first obtaining your consent or establishing a new legal basis.
mb099 does not sell your personal data to third parties. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.
We engage carefully vetted third-party service providers who process data on our behalf under strict contractual obligations. These include:
We may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, including in response to a valid court order, regulatory investigation, or anti-money laundering inquiry. We will notify you of such disclosure where permitted by law.
In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred to the successor entity. We will notify registered players of any such change and the data protection implications via email or platform notification prior to the transfer taking effect.
We may share data with affiliated entities within our corporate group where necessary for operational, compliance, or technical purposes. All intra-group transfers are governed by internal data sharing agreements that maintain equivalent data protection standards.
mb099 will never sell, rent, or lease your personal data to advertising networks, data brokers, or marketing aggregators. We will never share your identity or financial data with other players. We will never use your gaming history to make automated decisions with significant legal consequences without human review.
As an internationally operated platform serving Indonesian players, some of the personal data we collect may be transferred to and processed in countries outside Indonesia. This may occur when our cloud servers, game providers, or KYC partners are located in different jurisdictions.
Where such transfers occur, mb099 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Indonesian data protection law. Safeguards include contractual data processing agreements incorporating standard data protection clauses, adequacy assessments of the recipient country's data protection framework, and technical security measures including encryption in transit and at rest.
By using mb099 services and providing your personal data, you acknowledge and consent to the international transfer of your data under the safeguards described above.
We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account identity data (name, KTP, date of birth) | Duration of account + 5 years after closure | AML/KYC regulatory obligation |
| Financial transaction records | 7 years from transaction date | Financial reporting and legal compliance |
| Gaming session records | 3 years from each session | Dispute resolution and responsible gaming monitoring |
| Customer support interactions | 3 years from last interaction | Complaint handling and quality assurance |
| Marketing consent records | Until consent is withdrawn + 2 years | Demonstrating lawful marketing basis |
| Technical logs and IP records | 12 months | Security monitoring and fraud detection |
| Self-exclusion and responsible gaming records | Minimum 5 years from exclusion date | Player welfare and regulatory requirements |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.
As a registered player with mb099, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at the address listed in Section 14.
We will respond to all verified data rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days with prior notice. We reserve the right to verify your identity before processing any data rights request.
Protecting your personal and financial data is a technical and organizational priority at mb099. We implement the following security measures to safeguard your information against unauthorized access, disclosure, alteration, or destruction:
While we implement rigorous security measures, no system is entirely immune to risk. We encourage you to use a strong, unique password for your mb099 account, enable 2FA, and contact support immediately if you suspect any unauthorized activity.
mb099 strictly prohibits participation by individuals under 21 years of age. Our platform and services are designed exclusively for adults who meet this minimum age requirement. We employ a multi-layered age verification process:
We do not knowingly collect or process personal data belonging to individuals under 21 years of age. If we discover that a player has provided false information regarding their age and is under 21, we will immediately close the account, void all associated activity, and securely delete the minor's data in accordance with applicable law. If you believe a minor may have created an account on our platform, please contact our support team immediately at [email protected].
mb099 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or service offerings. When material changes are made, we will:
Your continued use of mb099 services after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use and may request account closure through our customer support team.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection team through the following channels:
We aim to acknowledge all privacy-related inquiries within 2 business days (WIB) and to resolve them fully within 30 calendar days. For formal data rights requests (access, erasure, portability), please email us with proof of identity to facilitate secure processing.
By using mb099's services, you confirm that you have read and understood this Privacy Policy in full. This document, together with our Terms & Conditions, constitutes the complete framework governing how your personal data is handled on our platform. We encourage you to revisit this page periodically for the latest version.
Six principles that underpin how mb099 handles your personal data
Every data transmission between your device and mb099 is protected by TLS 1.3 encryption. Your financial details, KTP data, and account credentials are encrypted both in transit and at rest using AES-256.
mb099 will never sell, rent, or trade your personal information to advertisers or data brokers. Your data exists to provide you with better service — not to generate third-party revenue.
Request access, correction, portability, or deletion of your personal data at any time. Opt out of marketing communications with a single request. Our Data Protection team responds within 30 days.
Our multi-step identity verification using Indonesian KTP and facial recognition protects you and other players from identity theft, duplicate accounts, and underage gambling.
We keep your data only as long as necessary — typically 5–7 years for financial and identity records as required by law, and shorter periods for technical logs. Data is securely deleted or anonymized on schedule.
In the unlikely event of a confirmed data breach, mb099 will notify affected players and relevant authorities within 72 hours. Transparency during security incidents is a non-negotiable commitment.
Our support team and Data Protection contacts are available around the clock to assist you
View FAQ Terms & Conditions Return to Home