256-Bit SSL Encryption
Every data exchange between your device and the mau88 platform is protected by industry-standard 256-bit SSL/TLS encryption — the same standard used by major international banks.
No Data Selling
mau88 does not sell, rent, or commercially exploit your personal data to third parties. Your information is used solely to operate your account and improve our services.
Minimal Data Collection
We collect only the information strictly necessary to register your account, process transactions, comply with KYC obligations, and deliver customer support.
Full User Control
You retain the right to access, correct, export, or request deletion of your personal data at any time by contacting our support team.
Indonesia-Aware Processing
Data handling practices account for Indonesian players' specific context, including local banking identifiers (BCA, BRI, BNI, Mandiri) and e-wallet verification (OVO, DANA, GoPay).
Opt-Out Marketing
Promotional communications — including seasonal offers for Idul Fitri, Ramadhan, and Indonesian Independence Day — are always opt-out. You may unsubscribe at any time.
Your Consent: By registering an account on the mau88 platform, depositing funds, or otherwise using our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the mau88 platform.
1 Introduction
mau88 ("we", "us", "our", "the Platform") operates the online gaming website accessible at https://mau88.cam. We are committed to handling your personal information with transparency, integrity, and the highest standards of data security. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by mau88.
This policy applies to all visitors, registered players, and prospective members who interact with the mau88 platform, its customer support channels, or any associated communications we send. It covers data collected through the website, through our support email ([email protected]), and through our approved Indonesian payment integrations including BCA, BRI, BNI, Bank Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
We encourage you to read this document in full. If at any point you have questions about how your data is handled, our support team is available 24/7 and will respond in both English and Bahasa Indonesia.
2 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" — Any information that identifies or could reasonably identify a living individual, including name, email address, date of birth, national identity number, IP address, and financial identifiers.
- "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" — mau88, the entity that determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" — Any third-party service provider (such as game studios, payment gateways, or fraud-detection vendors) that processes personal data on behalf of mau88 under a contractual arrangement.
- "Player" — Any individual who has registered a verified account on the mau88 Platform.
- "KYC" — Know Your Customer — the identity and age verification process required by mau88 before processing withdrawals or other sensitive transactions.
- "Consent" — Freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose.
3 Data We Collect
mau88 collects personal data across several categories, each collected for a distinct and necessary purpose:
3.1 Identity & Contact Data
- Full legal name as it appears on your government-issued ID
- Date of birth (to verify you are 21 years of age or older)
- Residential address (city, province — e.g., Jakarta, Surabaya, Bandung, Bali)
- Email address (primary communication and account security channel)
- Mobile phone number (for two-factor authentication and support)
3.2 Identity Verification (KYC) Documents
- National Identity Card (KTP) or passport scan / photograph
- Driver's license (where used as primary identification)
- Proof of residential address (utility bill, bank statement dated within 3 months)
- Selfie or liveness-check photograph for identity confirmation
3.3 Financial Data
- Bank account details associated with your registered payment method (BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, BSI, Bank Permata)
- E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers/phone numbers)
- Transaction history: deposit amounts, withdrawal requests, and bonus activity — all denominated in Indonesian Rupiah (IDR / Rp)
3.4 Technical & Usage Data
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Pages visited, time spent, and navigation patterns within the Platform
- Session logs and bet history
- Login timestamps and security event logs
3.5 Communications Data
- Content of support emails and live-chat transcripts sent to [email protected]
- Feedback and survey responses voluntarily submitted by Players
- Records of your promotional opt-in and opt-out preferences
| Data Category | Examples | Mandatory? |
|---|---|---|
| Identity & Contact | Name, email, date of birth, city | Yes — account registration |
| KYC Documents | KTP scan, selfie, proof of address | Yes — before first withdrawal |
| Financial Data | BCA/BRI account number, OVO phone number | Yes — to process transactions |
| Technical & Usage | IP address, device type, session logs | Automatic — platform security |
| Communications | Support emails, survey responses | Voluntary — when you contact us |
4 How We Collect Data
mau88 collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
- Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, session tracking, and server logs.
- Payment partners: Transaction confirmation data returned by approved Indonesian banking channels and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
- Identity verification partners: Data returned by our KYC service providers when they validate documents submitted during account verification.
- Fraud and security systems: Signals generated by our internal fraud-detection and responsible gaming monitoring tools, including device fingerprinting and behavioral analytics.
5 Purpose & Legal Basis
We process your personal data only where we have a lawful basis to do so. The table below summarizes the primary purposes for which we use your data and the corresponding legal justification:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Contract performance |
| Processing deposits and withdrawals in IDR / Rp | Contract performance |
| KYC identity and age verification (21+ requirement) | Legal obligation / Contract performance |
| Fraud prevention and platform security | Legitimate interests |
| Anti-money laundering compliance | Legal obligation |
| Responsible gaming monitoring and intervention | Legitimate interests / Legal obligation |
| Customer support and dispute resolution | Contract performance / Legitimate interests |
| Sending promotional communications (bonuses, seasonal offers) | Consent (opt-in / opt-out) |
| Platform analytics and product improvement | Legitimate interests |
Legitimate Interests: Where we rely on legitimate interests as a legal basis, we have assessed that our interests do not override your fundamental privacy rights. You may object to processing carried out under a legitimate interests basis by contacting us at [email protected].
6 Data Sharing
mau88 does not sell or rent your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the minimum extent necessary:
6.1 Service Providers (Data Processors)
We engage reputable third-party vendors to help us operate the Platform. These vendors process personal data solely on our documented instructions and are contractually prohibited from using it for any other purpose. Categories of such vendors include:
- Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — receive anonymized session data to deliver and log game outcomes.
- Payment processors: Indonesian banking gateways and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) — receive transaction data necessary to process deposits and withdrawals.
- KYC verification providers: Receive identity document images and biometric data (selfie/liveness check) to validate player identity.
- Fraud and risk management vendors: Receive technical and behavioral data to detect suspicious activity, duplicate accounts, and bonus abuse.
- Cloud infrastructure and cybersecurity providers: Host platform data under strict security and confidentiality agreements.
6.2 Legal and Regulatory Disclosures
We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law when we are legally compelled to do so, or where disclosure is necessary to prevent fraud, money laundering, or other unlawful activity. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving mau88, your personal data may be transferred to the acquiring entity. We will notify affected Players by email in advance of any such transfer and ensure the receiving entity is bound by privacy obligations no less protective than those in this policy.
6.4 Aggregated and Anonymized Data
mau88 may share aggregated, anonymized statistical data (e.g., total number of active players in Jakarta, average session duration by device type) with business partners and analytics providers. Such data cannot be used to identify any individual Player and is therefore not considered personal data under this policy.
7 Data Retention
We retain personal data for as long as your account remains active and for a defined period thereafter, as required to fulfill legal obligations and resolve potential disputes. The following retention periods apply as a general guideline:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account + 5 years after closure |
| KYC documents (KTP scan, selfie, proof of address) | Duration of account + 5 years after closure |
| Financial transaction records (deposits, withdrawals in IDR / Rp) | Duration of account + 7 years after closure |
| Betting and game session history | Duration of account + 3 years after closure |
| Customer support correspondence | 3 years from last interaction |
| Marketing preference records | Until opt-out, then 1 year as proof of preference |
| Security and fraud event logs | 5 years from event date |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Where deletion is not immediately technically feasible (e.g., data held in encrypted backup archives), we will isolate the data from active processing until deletion is possible.
8 Security Measures
mau88 implements a multi-layered security architecture to protect your personal and financial data against unauthorized access, accidental loss, and deliberate attack. Our key security controls include:
- 256-bit SSL/TLS encryption on all data in transit between your browser and our servers.
- AES-256 encryption at rest for stored personal data, KYC documents, and financial records.
- Two-factor authentication (2FA) available for all Player accounts — strongly recommended for enhanced account security.
- Role-based access controls: Internal access to personal data is restricted on a strict need-to-know basis; all staff with data access are subject to confidentiality obligations.
- Regular penetration testing conducted by independent cybersecurity specialists to identify and remediate vulnerabilities.
- 24/7 intrusion detection and monitoring with automated alerting for anomalous access patterns.
- Incident response plan: In the event of a confirmed data breach affecting your personal data, we will notify affected Players within 72 hours of becoming aware of the incident, in accordance with applicable international data protection standards.
Your Responsibility: While mau88 takes extensive measures to protect your data on our side, you are responsible for maintaining the confidentiality of your own account credentials. Never share your password with anyone, including mau88 support staff (who will never ask for your password). Use a strong, unique password and enable 2FA on your account.
9 Cookies & Tracking Technologies
The mau88 platform uses cookies and similar tracking technologies to maintain session continuity, remember your preferences, detect fraud, and analyze platform usage. A cookie is a small text file placed on your device by your browser when you visit our site. We use the following categories of cookies:
- Essential Cookies: Required for the Platform to function. They maintain your login session, remember your account region (WIB/WITA/WIT), and enable secure communication. These cannot be disabled without significantly impairing Platform functionality.
- Analytics Cookies: Used to understand how Players navigate the Platform — which pages are most visited, where sessions begin and end, and which games are most popular. Data collected is aggregated and anonymized. You may opt out by adjusting your browser settings.
- Security Cookies: Help detect and prevent fraudulent activity, including account takeover attempts, bot traffic, and duplicate account creation. These are essential to Platform integrity.
- Preference Cookies: Remember your display preferences and notification settings so you do not need to reconfigure them on each visit.
Most web browsers allow you to control cookie behavior through their settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect certain convenience features. For detailed guidance on managing cookies in your browser, refer to your browser's official help documentation.
10 Your Rights
As a Player whose personal data is processed by mau88, you hold the following rights with respect to your data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.
Right of Access
Request a copy of all personal data we hold about you, including the categories of data, purposes of processing, and any third parties with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations.
Right to Restriction
Request that we limit processing of your data in certain circumstances, such as while the accuracy of your data is being contested.
Right to Portability
Receive a structured, machine-readable export of the personal data you have provided to us, for transfer to another service provider.
Right to Object
Object to processing carried out under legitimate interests grounds, including direct marketing and profiling for promotional purposes.
Identity Verification for Rights Requests: To protect your privacy, mau88 will verify your identity before processing any data rights request. We may ask you to confirm account details or provide a copy of your registered ID before fulfilling the request. This verification step cannot be waived.
11 Protection of Minors
The mau88 platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step during both the registration process and KYC completion. Where we have reasonable grounds to suspect that a Player is under 21, that account will be immediately suspended pending verification, and all associated funds will be frozen until the matter is resolved.
If you are a parent or legal guardian and believe that a minor has accessed the mau88 platform or provided personal data to us without your consent, please contact us immediately at [email protected]. We will investigate and take all appropriate steps, including account closure and data deletion, without delay.
12 International Transfers
As an international online gaming platform serving Indonesian players, mau88 may transfer personal data to servers and service providers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include:
- Contractual clauses that impose equivalent data protection obligations on the receiving party.
- Transfer to countries or entities recognized as providing an adequate level of data protection by applicable international standards.
- Binding corporate rules where data is transferred within a corporate group.
Your personal data will never be transferred to a jurisdiction where it would be processed without adequate protections in place. For further information about the specific safeguards applicable to a particular transfer, contact us at [email protected].
13 Policy Amendments
mau88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify registered Players by email to the address on file at least 7 calendar days before the revised policy takes effect.
The "Last Updated" date at the top of this page always reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We recommend that you review this page periodically to stay informed of any changes.
14 Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way mau88 handles your personal data, please contact our Data Protection team directly. We are committed to resolving all privacy-related queries promptly and transparently.
Privacy Contact Email: [email protected]
Response Time: We aim to acknowledge all privacy-related inquiries within 24 hours and to resolve them fully within 30 calendar days. Support is available 24/7 in English and Bahasa Indonesia across WIB, WITA, and WIT time zones.
If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to an appropriate supervisory authority or data protection regulator in your jurisdiction. mau88 will cooperate fully with any such regulatory inquiry.
Questions About Your Data?
Our support team is available around the clock to address any privacy concerns, process data rights requests, or clarify how your information is used.