mabar8 Privacy Policy

mabar8 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at mabar8.app. This Privacy Policy describes how mabar8 collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User", or "Player") who access or use the Platform, including visitors who browse without creating an account.

mabar8 is committed to handling your personal data with integrity, transparency, and in accordance with applicable data protection principles. This Policy should be read alongside the mabar8 Terms & Conditions and Responsible Gaming policy, both of which are incorporated into our overall framework governing your relationship with the Platform.

By registering an account or continuing to use the mabar8 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

The following terms are used throughout this Privacy Policy with the meanings set out below:

mabar8 collects the following categories of Personal Data in connection with your use of the Platform:

mabar8 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is present on a standard Indonesian KTP or passport submitted for identity verification purposes.

mabar8 collects Personal Data through the following channels:

• Direct submission: Information you provide when creating an account, completing the KYC process, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you visit the Platform, including IP address, device identifiers, browser characteristics, and session behavior, via cookies and server logs.
• Third-party payment processors: Transaction confirmation data received from Indonesian bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• KYC verification providers: Verification outcomes and identity confirmation signals received from authorized third-party identity verification service providers used to process KYC submissions.
• Anti-fraud and security systems: Behavioral signals and risk scores generated by fraud detection systems that monitor account and transaction activity for indicators of unauthorized access, money laundering, or bonus abuse.

mabar8 processes your Personal Data for the following specific purposes:

• Account creation and management: To register your account, verify your identity and eligibility, maintain accurate account records, and enable you to log in and use the Platform.
• Transaction processing: To facilitate deposits and withdrawals in Indonesian Rupiah (IDR) through supported local payment methods, reconcile transaction records, and resolve payment disputes.
• KYC and age verification: To confirm that you are at least 21 years of age and a resident of Indonesia, in accordance with our responsible gaming obligations and platform eligibility requirements.
• Platform security and fraud prevention: To detect, investigate, and prevent unauthorized account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct as defined in the mabar8 Terms & Conditions.
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and provide assistance through live chat and email channels.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering (AML) obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable law.
• Platform improvement: To analyze aggregated usage patterns, diagnose technical issues, and improve the performance, design, and content of the Platform.
• Responsible gaming monitoring: To identify behavioral patterns that may indicate problem gambling, enforce player-requested limits, and proactively offer responsible gaming support where appropriate.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided valid consent and have not subsequently opted out.

mabar8 processes your Personal Data only where a valid legal basis exists. The legal bases applicable to mabar8's processing activities are as follows:

• Contractual necessity: Processing required to perform the contract between you and mabar8 — including account registration, transaction processing, KYC verification, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML reporting obligations and responses to lawful authority requests.
• Legitimate interests: Processing carried out for mabar8's legitimate business interests, including platform security, fraud prevention, responsible gaming monitoring, and aggregate analytics — where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mabar8 does not sell your Personal Data. We share your data only in the following circumstances and only to the extent strictly necessary for each purpose:

All third-party Data Processors engaged by mabar8 are contractually required to process Personal Data only on mabar8's documented instructions, to maintain appropriate technical and organizational security measures, and to delete or return data upon termination of the service engagement.

The mabar8 platform uses cookies and similar tracking technologies to ensure the site functions correctly, to remember your session and preferences, and to collect anonymized usage analytics. The categories of cookies in use are:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and account configuration choices across sessions.
• Analytics cookies: Used to collect aggregated, anonymized data about how users navigate the Platform — including pages visited, session duration, and click paths — to help mabar8 improve the user experience. No personally identifiable information is transmitted through analytics cookies.
• Security cookies: Used to support fraud detection and bot-prevention measures, including identifying unusual login patterns and flagging suspicious account activity.

Non-essential cookies (functional and analytics) are activated only upon your consent, which you may provide or withdraw through the cookie preference control accessible from the Platform's settings. Withdrawing consent for non-essential cookies will not affect your ability to use core Platform features.

mabar8 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The general retention periods applied by mabar8 are as follows:

On expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized and aggregated data may be retained indefinitely for statistical and analytical purposes.

mabar8 implements a layered security framework to protect your Personal Data against unauthorized access, accidental loss, alteration, and disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the mabar8 Platform.
• Tokenization of financial data: Bank account numbers and e-wallet identifiers are tokenized — stored as irreversible reference tokens rather than raw account details — in all mabar8 databases.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff accessing Personal Data are required to authenticate using multi-factor credentials and operate under binding data confidentiality obligations.
• Firewalled, access-controlled servers with real-time intrusion detection and 24/7 security monitoring.
• Regular security audits and penetration testing conducted by independent information security specialists.
• Incident response procedures: In the event of a confirmed data breach that poses a material risk to your rights, mabar8 will notify affected users without undue delay, describing the nature of the breach, the data categories involved, and the remediation steps taken.

While mabar8 maintains robust technical and organizational security measures, no internet-based system is entirely immune to risk. You are responsible for maintaining the security of your account credentials and for notifying mabar8 immediately if you suspect any unauthorized access to your account.

As a mabar8 player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] or via the 24/7 live chat. mabar8 will respond to all verified rights requests within 30 days of receipt.

The mabar8 platform is strictly intended for adults aged 21 years and older. mabar8 does not knowingly collect Personal Data from individuals under the age of 21. If mabar8 discovers or is notified that a person under 21 has registered an account or submitted personal data, the account will be immediately closed, all data deleted in accordance with applicable legal obligations, and any deposited funds returned to the source payment method.

If you have reason to believe that a person under 21 has accessed or registered on the mabar8 platform, please contact us immediately at [email protected] so that the matter can be investigated and resolved promptly.

mabar8 may send you promotional emails, SMS messages, or in-platform notifications about bonus offers, new game launches, seasonal promotions (such as those tied to Idul Fitri, Ramadan, Indonesian Independence Day on 17 August, or Chinese New Year/Imlek), and platform updates — but only where you have provided valid, prior consent during registration or in your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email.
• Updating your communication preferences in the mabar8 account settings panel.
• Contacting the mabar8 support team via live chat or at [email protected] with a written opt-out request.

Opt-out requests for marketing communications will take effect within one (1) business day. Opting out of marketing communications does not affect the delivery of transactional and account-essential communications (such as deposit confirmation messages, withdrawal status updates, KYC outcome notifications, and security alerts), which are sent regardless of marketing preference.

The mabar8 platform serves players in Indonesia, and our primary data processing infrastructure is oriented toward serving the Indonesian market. However, certain third-party Data Processors engaged by mabar8 — including game studio software providers such as Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, Microgaming, and NetEnt — may process limited technical session data on infrastructure located outside Indonesia as part of delivering their services.

Where Personal Data is transferred to or processed by systems outside Indonesia, mabar8 ensures that appropriate safeguards are in place, including contractual obligations that require recipient Data Processors to maintain data protection standards equivalent to those applied by mabar8, and to process data only for the purposes specified by mabar8.

Full identity data, KYC documents, and financial transaction records are processed and stored within infrastructure subject to data protection obligations consistent with this Privacy Policy.

mabar8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered users via the email address on file at least seven (7) days before the updated Policy takes effect, except where a shorter notice period is required for legal, security, or regulatory reasons.

The "Last Updated" date at the top of this Policy will be revised to reflect the date of each amendment. Your continued use of the mabar8 platform following the effective date of an amended Privacy Policy constitutes your acknowledgment of the changes. If you do not accept the amended Policy, you should discontinue use of the Platform and contact support to arrange account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how mabar8 protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how mabar8 has handled your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the mabar8 platform. Our support team includes native Indonesian-speaking agents available around the clock (WIB, UTC+7) who can assist with privacy-related queries.
• Email: [email protected] — please use the subject line "Privacy Request" and include your registered username and a clear description of your query or the right you wish to exercise. We aim to acknowledge all privacy-related emails within 24 hours and to resolve requests within 30 days.

If you are not satisfied with mabar8's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. mabar8 will cooperate fully with any such inquiry.