mha168 Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") explains how mha168 (the "Company", "Platform", "we", "us", or "our") collects, uses, stores, protects, and shares personal information provided by users (the "User", "Player", "Member", or "you") of our online gaming platform and services. By accessing, registering for, or using mha168 services, you acknowledge that you have read, understood, and agree to the data collection and processing practices described in this Policy.

mha168 is committed to protecting your privacy and safeguarding your personal information in accordance with Indonesian data protection regulations and international best practices. We employ industry-standard security measures to ensure that your data remains confidential, secure, and used only for the purposes outlined in this Policy. This Policy applies to all personal information collected through our website, mobile applications, customer support channels, and any other services provided by mha168.

2. Information We Collect

2.1 Personal Information Provided by You

During account registration, identity verification (KYC), and use of mha168 services, you voluntarily provide the following categories of personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP, passport, or driver's license), and photographs of your identity documents and selfie verification images.
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province within Indonesia.
• Financial Information: Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, or other Indonesian banks; e-wallet account information for OVO, DANA, GoPay, ShopeePay, or LinkAja; payment transaction history including deposit and withdrawal records.
• Account Credentials: Username, password (stored in encrypted form), and security questions used to protect your account access.
• Communication Records: Messages, emails, live chat transcripts, and phone call records between you and mha168 customer support, used for quality assurance and dispute resolution purposes.

2.2 Information Collected Automatically

When you access or use mha168 services, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, language settings, and unique device identifiers.
• Usage Data: Pages visited, features accessed, games played, bets placed, time and date of activity, session duration, clickstream data, and navigation patterns across the Platform.
• Location Information: Approximate geographic location derived from your IP address to verify that you are accessing services from within Indonesia and to comply with geographic restrictions.
• Cookie Data: Session cookies, preference cookies, and analytics cookies used to remember your settings, maintain login sessions, and analyze Platform usage patterns. You can control cookie preferences through your browser settings.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation and verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals.
• Identity Verification Services: Government database checks and document authentication results from third-party KYC verification providers to confirm your identity and age.
• Fraud Prevention Services: Risk assessment data and fraud detection signals from security partners to protect against account takeover, payment fraud, and money laundering.

3. How We Use Your Information

3.1 Primary Purposes

mha168 uses your personal information for the following legitimate business purposes:

• Account Management: Creating and maintaining your user account, authenticating your identity during login, processing password resets, and managing your account settings and preferences.
• Service Provision: Providing access to gaming products including slots, live casino, sports betting, and other entertainment services; processing bets, game transactions, and calculating winnings.
• Payment Processing: Facilitating deposits from your bank or e-wallet, processing withdrawal requests to your registered payment method, maintaining transaction records, and detecting fraudulent payment activity.
• KYC Compliance: Verifying your identity, age, and residency to comply with Indonesian legal requirements and prevent underage gambling, identity theft, and account fraud.
• Customer Support: Responding to your inquiries, resolving technical issues, handling complaints, and providing assistance via live chat, email, WhatsApp, and in-app messaging channels.
• Legal Compliance: Meeting regulatory obligations under Indonesian law, responding to lawful requests from government authorities, cooperating with law enforcement investigations, and enforcing our Terms and Conditions.

3.2 Secondary Purposes

Subject to your preferences and applicable legal restrictions, we may also use your information for:

• Marketing Communications: Sending promotional emails, SMS messages, or in-app notifications about new games, bonuses, tournaments, and special offers. You can opt out of marketing communications at any time through your account settings or by clicking unsubscribe links in emails.
• Platform Improvement: Analyzing usage patterns, conducting user research, testing new features, and improving the overall quality, functionality, and user experience of mha168 services.
• Security and Fraud Prevention: Monitoring for suspicious activity, detecting cheating or collusion, preventing money laundering, and protecting the integrity of our games and betting markets.
• Responsible Gaming: Identifying problematic gambling behavior patterns, implementing deposit limits and self-exclusion requests, and providing access to responsible gaming tools and support resources.

4. Legal Basis for Data Processing

mha168 processes your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions), including account creation, payment processing, and service provision.
• Legal Obligation: Processing is required to comply with Indonesian laws and regulations, including KYC/AML (Anti-Money Laundering) requirements, tax reporting obligations, and regulatory oversight.
• Legitimate Interests: Processing serves our legitimate business interests in operating a secure, efficient, and legally compliant gaming platform, preventing fraud, and improving our services, provided such interests do not override your fundamental rights and freedoms.
• Consent: Processing is based on your explicit consent for specific purposes such as marketing communications, which you can withdraw at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing and Disclosure

5.1 Service Providers and Business Partners

mha168 may share your personal information with carefully selected third-party service providers who assist us in operating the Platform and delivering services:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) that process your deposit and withdrawal transactions.
• KYC Verification Providers: Identity verification services that authenticate your government-issued documents and confirm your eligibility to use mha168.
• Cloud Hosting Providers: Infrastructure and data storage services that securely host mha168 Platform data and ensure reliable service availability.
• Customer Support Software: Live chat, ticketing, and communication platforms used by our support team to respond to your inquiries and resolve issues.
• Analytics Providers: Web analytics and usage tracking services that help us understand how users interact with the Platform and identify opportunities for improvement.

All third-party service providers are contractually obligated to protect your personal information, use it only for specified purposes, and comply with applicable data protection laws. We do not authorize them to use your data for their own marketing purposes.

5.2 Legal and Regulatory Disclosure

mha168 may disclose your personal information when required or permitted by law:

• To comply with valid legal processes such as court orders, subpoenas, or government information requests
• To cooperate with law enforcement investigations into criminal activity, fraud, or money laundering
• To respond to regulatory inquiries from Indonesian gambling authorities or financial regulators
• To enforce our Terms and Conditions and protect the rights, property, or safety of mha168, our users, or the public
• In connection with corporate transactions such as mergers, acquisitions, or asset sales, where your information may be transferred to the acquiring entity

5.3 No Sale of Personal Data

mha168 does not sell, rent, or trade your personal information to third parties for monetary consideration or marketing purposes. Your data is shared only as described in this Policy to provide services, comply with legal obligations, or protect legitimate interests.

6. Data Security Measures

mha168 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission between your device and mha168 servers is protected by 256-bit SSL/TLS encryption, the same standard used by major Indonesian banks.
• Secure Storage: Personal information is stored on secure servers located in protected data centers with physical access controls, surveillance monitoring, and redundant backup systems.
• Access Controls: Employee access to personal data is restricted based on role-based permissions and the principle of least privilege. Only authorized personnel who require access to perform their job functions can view your information.
• Password Protection: User passwords are stored using industry-standard cryptographic hashing algorithms (bcrypt with salt), ensuring that even mha168 staff cannot view your actual password.
• Security Monitoring: Our systems are continuously monitored for suspicious activity, unauthorized access attempts, and potential security breaches. Intrusion detection and prevention systems protect against cyber attacks.
• Regular Audits: We conduct periodic security assessments, vulnerability testing, and code reviews to identify and address potential weaknesses in our infrastructure.

Despite our best efforts, no method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security and you acknowledge the inherent risks of online data transmission.

7. Data Retention and Deletion

7.1 Retention Periods

mha168 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Policy or as required by Indonesian law:

• Active Accounts: Personal information associated with active accounts is retained for the duration of your membership and continuing use of mha168 services.
• Closed Accounts: After account closure, we retain certain data for up to 5 years to comply with legal obligations including tax reporting, financial audits, and anti-money laundering requirements.
• Transaction Records: Deposit, withdrawal, betting, and gaming transaction records are retained for a minimum of 5 years as required by Indonesian financial regulations.
• Marketing Data: If you opt out of marketing communications, we retain only the minimum information necessary to honor your opt-out preference and prevent future contact.
• Support Communications: Customer support chat transcripts, emails, and call recordings are typically retained for 2 years for quality assurance and dispute resolution purposes.

7.2 Data Deletion

Once retention periods expire or are no longer legally required, personal information is securely deleted or anonymized such that it can no longer identify you. You may request deletion of your personal data by contacting our support team, subject to our legal obligations to retain certain records.

8. Your Privacy Rights

As a mha168 user, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you by contacting customer support. We will provide this information in a structured, commonly used format within 30 days.
• Right to Correction: You can update inaccurate or incomplete personal information through your account settings or by requesting corrections via customer support.
• Right to Deletion: You can request deletion of your personal data, subject to legal retention requirements. Note that deleting your account information may prevent you from accessing mha168 services.
• Right to Restriction: You can request that we restrict processing of your personal information in certain circumstances, such as when you contest the accuracy of data or object to processing.
• Right to Object: You can object to processing of your personal data for direct marketing purposes or based on legitimate interests. We will cease such processing unless we have compelling legitimate grounds that override your interests.
• Right to Data Portability: You can request that we transfer your personal information to another service provider in a machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our customer support team via email ([email protected]), live chat, or WhatsApp. We will respond to your request within 30 days and may require identity verification to protect against unauthorized access.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit mha168. Cookies help us recognize your device, remember your preferences, maintain login sessions, and analyze how you use the Platform.

9.2 Types of Cookies We Use

9.3 Managing Cookie Preferences

You can control cookie settings through your web browser preferences. Most browsers allow you to block or delete cookies, though doing so may affect Platform functionality. To opt out of analytics cookies, you can use browser privacy extensions or adjust your cookie preferences in your mha168 account settings.

10. Children's Privacy

mha168 services are intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal information from minors. If we discover that a user is under 21 years of age, we will immediately close their account, return any deposited funds (excluding winnings), and delete their personal information. Parents or guardians who believe their child has provided personal information to mha168 should contact us immediately at [email protected] so we can take appropriate action.

11. International Data Transfers

Your personal information is primarily stored and processed within Indonesia. However, some service providers we work with may transfer data to servers located outside Indonesia for processing or storage purposes. When international data transfers occur, we ensure that appropriate safeguards are in place, including contractual data protection clauses, to maintain the security and confidentiality of your personal information in accordance with Indonesian data protection standards.

12. Changes to This Privacy Policy

mha168 reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Significant changes will be communicated via email notification or prominent Platform announcement. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of mha168 services after any modifications constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

13. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or how mha168 handles your personal information, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the mha168 Platform
• WhatsApp: +62 812 3456 7890
• Mailing Address: mha168 Customer Support, Jakarta, Indonesia

Our Indonesian-speaking privacy team will respond to your inquiry within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian Ministry of Communication and Information Technology (Kominfo) or other relevant data protection authorities.