mgs88 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by mgs88 ("we", "us", "our", "the Platform") in connection with the operation of the online betting and gaming platform accessible at mgs88.bio and all associated subdomains, mobile interfaces, and API endpoints (collectively, "the Service").

mgs88 is Indonesia's premier English-language online betting platform, serving registered Members across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other Indonesian cities and provinces. We understand that Indonesian players value both the international-quality standards of a global sportsbook brand and the assurance that their personal data is handled with discretion, security, and full transparency.

This Policy governs how we handle data provided voluntarily by you during registration, KYC verification, and customer support interactions, as well as data collected automatically through your use of the Service. It applies to all current and former mgs88 Members, to visitors who access mgs88.bio without registering an account, and to individuals who contact our support team.

We do not operate in, and this Policy does not address, any jurisdiction in which the use of this Service is explicitly prohibited by applicable law. It is your responsibility to verify that accessing mgs88 is lawful in your place of residence before registering an account.

mgs88 collects the minimum personal data necessary to provide a secure, compliant, and functional betting service. We do not collect data for its own sake. The categories of personal data we process are detailed in the table below:

mgs88 does not collect sensitive personal data as defined under international data protection frameworks (e.g., racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where directly relevant to a responsible gaming assessment conducted at your explicit request.

mgs88 collects personal data through the following channels:

• Registration Form: When you create a mgs88 account, you provide your name, email address, date of birth, and residential address directly through the registration interface.
• KYC Verification Portal: When you submit identity and address documents prior to your first withdrawal, those documents are uploaded via our encrypted KYC portal and processed by our compliance team.
• Deposit & Withdrawal Processing: When you initiate a transaction via a local Indonesian bank (BCA, BRI, BNI, Mandiri) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), your payment channel details are captured and stored for transaction reconciliation and fraud prevention purposes.
• Platform Usage: Your betting and gaming activity — including every bet placed on BRI Liga 1 matches, every slot session with Pragmatic Play or NetEnt titles, and every live casino hand dealt by Evolution Gaming — is automatically logged as part of the normal operation of the Service.
• Cookies & Tracking Technologies: mgs88 uses cookies, local storage, and similar technologies to maintain your session, remember your preferences, and analyze aggregate platform usage. See Section 7 for full details.
• Customer Support Interactions: When you contact our support team by email ([email protected]) or live chat, the content of those communications and any attachments you share are retained as part of your support record.
• Third-Party Sources: In limited circumstances, we may receive identity verification confirmations from our licensed KYC-as-a-service partners, or fraud-risk scores from payment processors, to supplement the information you have provided directly.

mgs88 processes your personal data only for specific, documented, and legitimate purposes. We do not process your data in ways that are incompatible with the purposes set out below:

• Account Management: To create, maintain, and administer your mgs88 Member account, including authentication, password resets, and account security alerts.
• Service Delivery: To enable you to deposit and withdraw funds in IDR via Indonesian banks and e-wallets, place bets on sportsbook markets (including BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, and Timnas Indonesia matches), access live casino tables powered by Evolution Gaming, play certified slot titles, and use all other features of the mgs88 platform.
• Identity Verification (KYC): To verify your identity, age (21+), and residential address in compliance with our international licensing requirements and anti-money laundering (AML) obligations before processing your first withdrawal.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, multi-accounting, bonus abuse, and any other activity that violates our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling, apply deposit limits and self-exclusion measures at your request, and proactively reach out where our systems identify potential harm-related usage patterns.
• Customer Support: To respond to your support queries, resolve disputes, process complaints, and maintain a record of your interactions with the mgs88 support team for quality assurance and training purposes.
• Legal Compliance: To comply with applicable laws, international licensing conditions, AML regulations, tax reporting requirements, and any lawful requests from regulatory or law enforcement authorities.
• Marketing & Promotions: To send you promotional emails about mgs88 bonuses, seasonal offers (including Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and new product launches — but only where you have opted in to marketing communications. You may withdraw consent at any time by contacting [email protected].
• Platform Improvement: To analyze aggregate, anonymized usage data to improve the mgs88 platform's performance, game selection, payment processing speed, and overall user experience for Indonesian players.

mgs88 processes your personal data on the following legal bases, consistent with internationally recognized data protection principles (including those reflected in the GDPR framework, which we adopt as a global best-practice standard):

• Contractual Necessity: The majority of data processing described in this Policy is necessary for mgs88 to perform its contractual obligations to you under the Terms & Conditions — specifically, to operate your account, process transactions, settle bets, and deliver the Service.
• Legal Obligation: Processing of KYC identity documents, AML transaction monitoring, and retention of financial records is required by the international licensing conditions under which mgs88 operates and by the legal frameworks applicable in relevant jurisdictions.
• Legitimate Interests: Fraud detection, platform security monitoring, abuse prevention, and aggregate analytics are processed on the basis of mgs88's legitimate interests in operating a secure, commercially viable, and fair betting platform — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your freely given, specific, and informed consent. You have the right to withdraw consent at any time without penalty.

mgs88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors & Banking Partners: Your financial data (name, bank account or e-wallet details, transaction amounts in IDR) is shared with our licensed payment gateway partners to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners process your data under their own privacy policies and are subject to Indonesian banking regulations.
• Game Studio Partners: Session tokens and anonymized player identifiers are shared with our certified game studio partners — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — solely to initialize and manage your game sessions. These studios do not receive your full identity data.
• KYC & Compliance Providers: Your identity documents may be processed by our licensed KYC-as-a-service partners for automated document verification and age validation. These providers are contractually prohibited from using your data for any purpose other than identity verification on behalf of mgs88.
• Fraud Prevention Services: Anonymized technical data (IP address, device fingerprint, behavioral patterns) may be shared with specialist fraud prevention platforms to identify and block suspicious activity on the mgs88 platform.
• Legal & Regulatory Authorities: mgs88 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or government authorities where required by a valid legal order, warrant, or our international licensing obligations. We will notify you of such disclosures where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of all or part of the mgs88 business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

All third-party data processors engaged by mgs88 are bound by written data processing agreements that prohibit them from using your data beyond the specific purpose for which it was shared and require them to implement appropriate technical and organizational security measures.

mgs88 uses cookies and similar browser-based storage technologies to provide a seamless, secure, and personalized experience on the platform. The following types of cookies are used:

You can control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the mgs88 platform. Disabling functional and analytics cookies will not affect core Service availability but may degrade your experience. Most modern browsers on Android and iOS devices used by Indonesian players provide granular cookie controls in the browser settings menu.

mgs88 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, and in compliance with our legal and regulatory obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the full duration of your active membership and for a minimum of five (5) years following account closure, in compliance with international AML record-keeping requirements.
• KYC Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable licensing regulations. After the retention period, documents are securely destroyed.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, including all deposits and withdrawals processed in IDR via Indonesian bank and e-wallet channels.
• Betting & Game Session Logs: Retained for a minimum of two (2) years to facilitate dispute resolution, audit compliance, and responsible gaming monitoring.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction in the relevant support thread.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely to demonstrate consent compliance and to ensure we do not contact you after you have withdrawn consent.
• Technical & Log Data: Server access logs, IP address records, and session metadata are retained for up to twelve (12) months for security and fraud investigation purposes.

When the applicable retention period expires, personal data is either securely deleted, anonymized, or aggregated in a form that can no longer be linked to you as an individual. Anonymized aggregate data (e.g., total bets placed on EPL markets by Indonesian players in Q1 2026) may be retained indefinitely for statistical and business intelligence purposes.

mgs88 implements a layered, defense-in-depth security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our key security measures include:

• Encryption in Transit: All communications between your device and our servers are encrypted using TLS 1.2 or higher with 256-bit AES encryption. Unencrypted HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: KYC identity documents, financial data, and password hashes are encrypted at rest in our database systems using industry-standard AES-256 encryption. Passwords are never stored in plain text — they are hashed using a modern, salted cryptographic algorithm.
• Access Controls: Access to personal data within mgs88's internal systems is governed by strict role-based access controls. Only authorized personnel with a documented need to access specific data categories are granted access, and all internal access is logged and audited.
• Two-Factor Authentication (2FA): mgs88 Members are encouraged to enable 2FA on their accounts via the Account Security settings. This provides a critical second layer of protection against unauthorized login attempts.
• Intrusion Detection & Monitoring: Our platform is protected by real-time intrusion detection systems, DDoS mitigation services, and 24/7 security monitoring. Anomalous login patterns — including attempts from Indonesian provinces inconsistent with your usual access location — trigger automated alerts and, where appropriate, temporary account holds.
• Regular Security Audits: mgs88 engages independent third-party cybersecurity firms to conduct regular penetration testing and security audits of our platform infrastructure and data handling practices.
• Incident Response: In the event of a data security incident that may affect your personal data, mgs88 will notify affected Members via their registered email address within 72 hours of becoming aware of the breach, consistent with internationally recognized breach notification standards.

While mgs88 implements robust security measures, no internet-based platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your mgs88 login credentials and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.

mgs88 respects your rights over your personal data. As a Member, you are entitled to exercise the following rights at any time by contacting our Data Privacy team at [email protected] with the subject line "Data Rights Request":

All rights requests are handled by our Data Privacy team. We will acknowledge receipt within 5 business days and provide a substantive response or data package within 30 calendar days. In cases of complex or high-volume requests, we may extend the response period by up to 30 additional days and will notify you accordingly. Identity verification may be required before we process a data rights request to ensure we do not disclose your data to an unauthorized third party.

Age verification is a mandatory step in our KYC process. Before processing your first withdrawal, our compliance team will verify that your date of birth as submitted matches your government-issued identity document (Indonesian KTP or passport). Any account where the age verification check fails will be suspended pending investigation.

If you are a parent or guardian and believe your child may have accessed or registered on mgs88, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and respond within 24 hours.

mgs88 operates as an internationally licensed platform, and some of the third-party service providers we engage — including game studio partners such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe, as well as our KYC and fraud-prevention vendors — may process your data on servers located outside Indonesia.

Where personal data is transferred internationally, mgs88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include:

• Contractual data processing agreements that impose GDPR-equivalent obligations on the receiving party, including restrictions on onward transfers and requirements for adequate security measures.
• Transfer only to jurisdictions that maintain internationally recognized data protection standards, or to processors that have implemented binding corporate rules or equivalent compliance frameworks.
• Regular review of all international data transfer arrangements to ensure ongoing adequacy of protections as legal and technical standards evolve.

By using mgs88 and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia for the limited purposes described in this Policy, subject to the safeguards described above.

mgs88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to our service offering, new regulatory requirements, or improvements to our security standards. We are committed to keeping this Policy current and accurate.

When we make material changes to this Policy — meaning changes that meaningfully affect your rights or how we process your personal data — we will notify you by:

• Sending an email notification to your registered email address at least 14 days before the changes take effect.
• Displaying a prominent notice on the mgs88.bio homepage and within the member dashboard for a period of at least 30 days following the update.
• Updating the "Last Updated" date at the top of this page and in the page hero section.

Non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without advance notice, though the "Last Updated" date will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed of how mgs88 protects your data.

Your continued use of the mgs88 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material changes, you must stop using the Service and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to mgs88's handling of your personal data, please contact our Data Privacy team through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 via your mgs88 member dashboard. Indonesian-speaking agents are available during WIB business hours (08:00–22:00 WIB).
• Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 calendar days.

mgs88 is committed to resolving all privacy concerns fairly and promptly. If you feel that your concern has not been adequately addressed after contacting us, you may escalate the matter to the relevant data protection authority in your jurisdiction or to the licensing authority under which mgs88 operates.