mas88 Privacy Policy

This Privacy Policy ("Policy") describes how mas88 ("we", "us", "our") collects, uses, stores, and discloses personal data in connection with the online betting and gaming platform operated at mas88.cam and all associated subdomains and services (collectively, the "Platform").

This Policy applies to all individuals who access or use the Platform, including registered Players, prospective Players who browse without registering, and any person who communicates with mas88 via email, live chat, or other support channels.

By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, please discontinue use of the Platform and contact us to request account closure if you are already registered.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — an individual who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to that individual's physical, economic, or digital identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "Data Subject" means the individual to whom the Personal Data relates — in most cases, you, the Player.
• "Controller" means mas88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Processor" means a third party that processes Personal Data on behalf of mas88, such as a payment gateway or cloud infrastructure provider.
• "KYC Data" means identity and address verification documents submitted during the Know Your Customer process, including copies of government-issued identity cards (KTP Nasional), proof of address, and selfie verification photographs.
• "Cookies" means small text files stored on your device by your browser when you access the Platform, used to maintain session state, remember preferences, and support platform analytics.

mas88 collects Personal Data through multiple channels. The categories of data collected, and the contexts in which they arise, are as follows:

When you create a mas88 account, we collect: full legal name, date of birth, email address, mobile phone number, and residential address. This data is required to establish and administer your account.

To comply with anti-money-laundering (AML) obligations and to verify your eligibility to use the Platform, we collect copies of government-issued identity documents (including the Indonesian National Identity Card — KTP Nasional), proof of residential address, and selfie verification photographs. KYC Data is handled with heightened care and is accessible only to our compliance team.

When you make deposits or withdrawals, we collect the payment method details necessary to process those transactions — including bank account numbers (BCA, BRI, BNI, Mandiri) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). mas88 does not store full card numbers or banking credentials on its own servers; payment data is handled by our PCI-compliant payment processors.

We maintain records of all deposits, withdrawals, wagers placed, games played, bonus activations, and account balance changes. This data is used for account management, dispute resolution, regulatory compliance, and fraud prevention.

When you access the Platform, we automatically collect: IP address, device type, operating system, browser type and version, screen resolution, session timestamps, pages visited, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimization.

If you contact mas88 via email, live chat, or WhatsApp, we retain the content of those communications, including any attachments, to facilitate support, resolve disputes, and maintain an audit trail of player interactions.

You may provide additional data voluntarily — for example, by responding to a player satisfaction survey, participating in a promotion, or submitting a support ticket. This data is used only for the purpose for which it was submitted.

mas88 processes your Personal Data for the following purposes, each of which is tied to a specific legal basis as described in Section 5:

• Account Administration: Creating, maintaining, and closing your account; processing deposits and withdrawals; applying bonuses and tracking wagering requirements.
• Identity Verification (KYC/AML): Confirming that you meet the eligibility criteria (21+ years of age, eligible jurisdiction) and complying with international anti-money-laundering obligations.
• Platform Security & Fraud Prevention: Detecting and preventing unauthorized account access, multiple-account abuse, bonus fraud, payment chargebacks, and other prohibited conduct described in the Terms & Conditions.
• Customer Support: Responding to your queries, resolving disputes, and maintaining a support history associated with your account.
• Responsible Gaming: Monitoring betting patterns for indicators of problem gambling; facilitating self-exclusion requests, deposit limits, and other player-protection tools.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable international gaming regulations, AML legislation, and any lawful request from a competent authority.
• Platform Improvement: Analyzing aggregate, anonymized usage data to improve user experience, fix bugs, and optimize game and product offerings.
• Marketing Communications: Sending promotional offers, reload bonus notifications, and event-based communications — only to Players who have opted in to receive marketing emails. You may opt out at any time by contacting support.

mas88 does not use your Personal Data to build profiles for sale to third-party advertisers, and we do not engage in automated decision-making that produces legal or similarly significant effects on you without human review.

Each processing activity carried out by mas88 is grounded in one or more of the following recognized legal bases:

Where processing is based on your consent — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mas88 does not sell your Personal Data. We share it only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

We share transaction-related Personal Data with our payment processing partners (including local Indonesian bank transfer aggregators and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja) to execute deposits and withdrawals. These processors are contractually required to handle data securely and solely for payment execution purposes.

When you play a game supplied by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, or Spribe), a session token and anonymized player identifier may be transmitted to that provider's servers to initialize and record the game session. Full Personal Data is not shared with game providers.

mas88 uses reputable cloud hosting and cybersecurity vendors to operate its platform infrastructure. These vendors may process Personal Data as part of providing hosting, DDoS protection, and platform monitoring services, acting as data Processors under binding data processing agreements.

mas88 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or lawful authority request. We will notify you of any such request to the extent permitted by law.

In the event of a merger, acquisition, or sale of substantially all of mas88's assets, Personal Data held about Players may be transferred to the successor entity. We will provide reasonable advance notice of any such transfer and of any material change in data handling practices that results from it.

mas88 uses cookies and similar technologies (such as local storage tokens) on the Platform. The categories of cookies we use are as follows:

mas88 does not use third-party advertising cookies or cross-site tracking pixels. You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary or security cookies will impair Platform functionality and may prevent login.

mas88 retains Personal Data for as long as necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods driven by legal and regulatory obligations:

Following the expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

Subject to applicable law and the limitations set out below, you have the following rights in relation to your Personal Data held by mas88:

To exercise any of these rights, submit a written request to [email protected] with the subject line "DATA SUBJECT REQUEST". We will acknowledge your request within 5 Business Days and provide a substantive response within 30 calendar days. Identity verification may be required before we action a request.

mas88 implements a layered security framework to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• Transport Layer Security: All data in transit between your browser and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encrypted Storage: Sensitive data — including KYC documents, payment identifiers, and account credentials — is encrypted at rest using industry-standard symmetric encryption.
• Access Controls: Strict role-based access controls ensure that only authorized personnel with a legitimate operational need can access Personal Data. Access is logged and audited on a regular basis.
• Payment Security: Financial transaction data is processed through PCI-DSS compliant payment processors. mas88 does not store full card numbers or banking login credentials on its own infrastructure.
• Intrusion Detection & Monitoring: The Platform is monitored continuously for anomalous activity, attempted unauthorized access, and DDoS attacks. Security incidents are investigated and remediated by a dedicated team.
• Employee Training: All staff with access to Personal Data receive mandatory data protection and security training upon onboarding and at regular intervals.

In the event of a personal data breach that poses a risk to your rights and freedoms, mas88 will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach.

The Platform is strictly intended for individuals who are 21 years of age or older. mas88 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step during the KYC process, and accounts are closed immediately where the holder is found to be underage.

If you have reason to believe that a person under 21 has submitted Personal Data to mas88 — whether by creating an account or through any other channel — please notify us immediately at [email protected] with the subject line "UNDERAGE ACCOUNT REPORT". Upon confirmation, all associated data will be deleted and the account will be permanently closed.

mas88 operates infrastructure and engages service providers across multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, and processed in countries outside of Indonesia, including countries whose data protection laws may differ from those applicable in your jurisdiction.

Where such transfers occur, mas88 ensures that appropriate safeguards are in place, which may include:

• Binding contractual clauses (data processing agreements) that require recipients to handle data to standards consistent with this Policy.
• Transfers only to recipients in jurisdictions that the relevant international regulatory framework recognizes as providing an adequate level of data protection.
• Technical measures (such as encryption and pseudonymization) applied to data before transfer where contractual safeguards alone are insufficient.

If you would like further information about the safeguards applied to specific international transfers, please contact us at [email protected].

mas88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Where changes are material, we will provide advance notice by displaying a prominent notification on the Platform or by sending an email to your registered address at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not accept the revised Policy, please discontinue use of the Platform and request account closure.

We encourage you to review this Policy periodically so that you remain informed about how mas88 handles your Personal Data.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how mas88 has handled your Personal Data, please contact us through the following channels:

• Email: [email protected] — use the subject line "PRIVACY INQUIRY" for general questions, or "DATA SUBJECT REQUEST" for formal rights requests
• Live Chat: Available 24/7 within the mas88 platform interface for immediate, informal privacy-related queries
• Response Commitment: Acknowledgment within 5 Business Days; substantive response to formal requests within 30 calendar days

If you are not satisfied with mas88's response to a privacy complaint, you may escalate the matter to the data protection authority or gaming regulator relevant to your jurisdiction. mas88 will cooperate fully with any lawful regulatory investigation.