Privacy Policy — mabar8

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

Scope & Application

This Privacy Policy applies to all Personal Data collected and processed by mabar8 in connection with the operation of the Platform at https://mabar8.cam. It covers all Users globally, with particular relevance to Users located in Indonesia, who represent mabar8's primary market.

This Policy should be read in conjunction with the mabar8 Terms & Conditions, which govern the legal relationship between you and the Company. Where there is a conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy prevails.

This Policy does not apply to third-party websites, payment providers, or services that you may access through links on the Platform. Those entities maintain their own privacy policies, and we encourage you to review them before sharing personal information.

Data We Collect

mabar8 collects the following categories of Personal Data in the course of operating the Platform:

3.1 Account Registration Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Indonesian mobile phone number
• Residential address (street, city, province, postal code)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (Indonesian KTP, passport, or equivalent)
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Selfie photograph (for liveness verification where required)

3.3 Financial & Transaction Data

• Bank account details (bank name, account number, account holder name — BCA, BRI, BNI, Mandiri, and other supported banks)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposit amounts, withdrawal requests, dates, and reference numbers)
• Betting history (wager amounts, game types, outcomes — for responsible gaming monitoring)

3.4 Technical & Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookie identifiers and analytics data (see Section 11)

3.5 Communications Data

• Content of support interactions (live chat transcripts, email correspondence, WhatsApp messages) for quality assurance and dispute resolution purposes

How Data Is Collected

mabar8 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or update your account settings.
• Automatically — when you access and navigate the Platform, through server logs, cookies, and similar tracking technologies that record device and behavioral data.
• From third parties — from payment processors (to confirm transaction status), identity verification services (to validate KYC documents), and fraud detection providers (to screen for prohibited activity).

Purposes of Processing

mabar8 processes your Personal Data only for specific, legitimate purposes. The table below sets out the primary purposes and the data categories used for each:

mabar8 does not use Personal Data for profiling or automated decision-making that produces significant legal effects on Users without human oversight.

Legal Basis for Processing

mabar8 processes Personal Data on the following legal grounds:

• Contractual necessity — Processing required to fulfill the Terms & Conditions you agreed to when registering an account (e.g., processing deposits, verifying identity, settling bets).
• Legal obligation — Processing required to comply with applicable law, including anti-money laundering (AML) regulations and international gaming licensing conditions.
• Legitimate interests — Processing carried out for the Company's legitimate operational interests where those interests are not overridden by your rights — including fraud detection, platform security, and responsible gaming monitoring.
• Consent — Where we rely on your consent (e.g., for certain types of marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

7.1 Third-Party Processors. mabar8 shares Personal Data with the following categories of regulated third-party service providers, strictly to the extent necessary to operate the Platform:

• Payment processors — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals;
• Identity verification services — certified KYC providers to validate identity documents and perform age verification;
• Fraud and AML screening providers — to screen transactions and account activity against known fraud patterns and sanctions lists;
• Cloud infrastructure providers — to host the Platform and store data securely.

All third-party processors are bound by data processing agreements that require them to handle Personal Data in accordance with applicable data protection standards.

7.2 Legal Disclosure. mabar8 may disclose Personal Data to law enforcement, regulatory authorities, or courts where required to do so by binding legal process — such as a court order, subpoena, or regulatory demand. We will notify you of such disclosures where legally permitted.

7.3 No Sale of Data. mabar8 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. This policy is unconditional and applies regardless of the data category or commercial context.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of assets involving the Company, Personal Data may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and the data protection implications in advance where practicable.

International Data Transfers

mabar8 operates internationally and may process and store Personal Data on servers located outside Indonesia. Where data is transferred to jurisdictions that do not have data protection laws equivalent to those applicable in your home country, mabar8 implements appropriate safeguards — including contractual data processing clauses with receiving entities — to ensure your data receives an adequate level of protection.

By using the Platform, you acknowledge that your Personal Data may be processed in countries outside Indonesia, including the jurisdiction in which mabar8 holds its principal gaming licence. You consent to such transfers as necessary for the operation of your account.

Data Retention

mabar8 retains Personal Data for only as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC data — retained for the duration of the account and for a period of 5 years following account closure, to meet AML and gaming licensing record-keeping requirements;
• Transaction records — retained for 5 years from the date of each transaction;
• Support communications — retained for 2 years from the date of the interaction;
• Technical and session logs — retained for up to 12 months for security monitoring purposes;
• Betting history — retained for 3 years for responsible gaming monitoring and dispute resolution purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identified individual.

Data Security

mabar8 implements a comprehensive suite of technical and organizational security measures to protect Personal Data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including payment details and identity documents) at rest;
• Role-based access controls ensuring that only authorized personnel can access Personal Data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication (MFA) for internal system access;
• Intrusion detection and real-time security monitoring systems.

Despite these measures, no data transmission over the internet or storage system can be guaranteed as 100% secure. You are responsible for maintaining the security of your account credentials and for notifying mabar8 immediately if you suspect any unauthorized access to your account.

Cookies & Tracking Technologies

mabar8 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or completing transactions.

Your Privacy Rights

Subject to applicable law and the Company's legitimate legal obligations, you have the following rights regarding your Personal Data held by mabar8:

To exercise any of these rights, submit a written request to [email protected] (plain text — not a clickable link) or via the in-platform live chat. We will respond within 30 days. Identity verification will be required before processing any data rights request.

Minors & Age Restriction

If we discover or are notified that Personal Data belonging to a person under 21 has been collected — whether through misrepresentation during registration or otherwise — we will immediately suspend the relevant account, delete the associated Personal Data, and return any account balance to the payment source. Age verification through the KYC process is mandatory for all users prior to first withdrawal.

If you are a parent or guardian and believe that your child has registered an account on mabar8, please contact our support team immediately at [email protected] (plain text — not a clickable link) so we can take appropriate action without delay.

Changes to This Privacy Policy

mabar8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Where changes are material — for example, where we introduce a new category of data collection or a new processing purpose — we will notify registered Users via Platform notification or email at least 14 days before the change takes effect.

Minor, non-material updates (such as clarifications of existing language) will be reflected on this page with an updated effective date. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

Contact & Complaints

For any privacy-related queries, data rights requests, or formal complaints regarding the processing of your Personal Data by mabar8, please contact us through the following channels. All contact details are provided as plain text and are not clickable links.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to an appropriate data protection supervisory authority or seek judicial remedy in the courts of competent jurisdiction.