mlbb4d Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how mlbb4d ("we," "us," or "our"), operating the online gaming platform at https://mlbb4d.cam, collects, processes, stores, and shares personal information relating to individuals ("you," "your," or "the user") who visit, register with, or transact on our platform. This policy applies to all services offered by mlbb4d, including casino games, live dealer tables, sports betting markets (covering BRI Liga 1, EPL, Champions League, and other leagues), and supplementary features such as customer support and promotional programs.

By accessing the mlbb4d website or mobile platform, creating an account, or submitting any personal data, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not accept the terms of this policy, please discontinue use of the platform immediately.

This policy is intended to be read alongside the Terms & Conditions and the Responsible Gaming policy. In the event of any conflict between these documents, the Terms & Conditions shall prevail.

2. Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, address, email, phone number, IP address, and financial data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — here, mlbb4d.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of mlbb4d under contractual obligation.
• "Cookies" means small text files placed on your device by the platform to facilitate session management, analytics, and personalization.
• "KYC" means Know Your Customer — the identity verification process we are required to conduct before processing withdrawal requests.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account with mlbb4d, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality as recorded on your government-issued identification document (Indonesian KTP, passport, or SIM).
• Contact Data: Email address, Indonesian mobile phone number, and residential address (including city, province, and postal code).
• Credential Data: Username and hashed password (passwords are never stored in plain text).
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported Indonesian banks), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records.
• Verification Documents: Scanned or photographed copies of government-issued photo ID, proof of address documents (utility bills, bank statements), and selfie verification photographs, as required by our KYC process.
• Communications Data: Records of your correspondence with customer support via live chat, email, WhatsApp, and in-app messaging.

3.2 Information Collected Automatically

When you access the mlbb4d platform, our systems automatically collect certain technical and behavioural data:

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time-zone setting (typically WIB, UTC+7 for Indonesian players).
• Usage Data: Pages visited, game titles played, bet amounts placed, session duration, click paths, and features accessed.
• Location Data: Approximate geographic location derived from your IP address, used to verify compliance with our geographic access policies.
• Cookie and Tracking Data: Session cookies, persistent cookies, and similar tracking technologies as described in Section 9 of this policy.

3.3 Information from Third Parties

We may receive supplementary personal data from the following sources:

• Payment Processors: Transaction confirmation data from Indonesian banking partners and e-wallet providers to verify deposit and withdrawal transactions.
• Identity Verification Services: Results of automated or manual document authentication checks conducted by our KYC technology partners.
• Fraud Prevention Services: Risk scores and flags from third-party anti-fraud systems used to detect suspicious account activity or money-laundering attempts.
• Referral Partners: If you were referred to mlbb4d through a referral program, we may receive your registration information from the referring party.

4. How We Use Your Personal Data

mlbb4d uses your personal data exclusively for the purposes described in this policy. We do not use your data for purposes incompatible with those listed below without first obtaining your explicit consent.

5. Data Sharing and Third-Party Disclosure

mlbb4d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

5.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to assist with platform operations. These include payment gateway providers facilitating transactions through BCA, BRI, BNI, Mandiri, and Indonesian e-wallets; KYC and identity verification technology partners; cloud hosting and server infrastructure providers; customer relationship management (CRM) software vendors; and fraud detection and AML compliance systems. All such providers operate under strict contractual Data Processing Agreements that prohibit them from using your data for any purpose other than providing services to mlbb4d, and require them to maintain security standards equivalent to or exceeding our own.

5.2 Legal and Regulatory Obligations

We may disclose your personal data to competent authorities, regulatory bodies, or law enforcement agencies when required to do so by applicable law, valid legal process (such as a court order or subpoena), or to fulfil our obligations under international anti-money-laundering and counter-terrorism financing regulations. We will notify you of such disclosure to the extent permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving mlbb4d, your personal data may be transferred to the acquiring or successor entity. We will provide advance notice via email and a platform notification before any such transfer occurs, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

5.4 Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified data (data from which all personal identifiers have been removed) with game providers, analytics partners, and industry researchers to improve platform services and conduct market research. Such data cannot be used to identify you individually and does not constitute Personal Data for the purposes of this policy.

6. Data Retention

mlbb4d retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account plus five (5) years following account closure, in accordance with international AML record-keeping standards.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial reporting and AML audit requirements.
• KYC Verification Documents: Retained for five (5) years after account closure or the end of the business relationship, whichever is later.
• Customer Support Communications: Retained for two (2) years from the date of the final interaction, or longer if the communication relates to an unresolved dispute.
• Usage and Analytics Data: Retained in anonymised form indefinitely; identifiable usage data is purged within thirteen (13) months of collection.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once a retention period has expired, personal data is securely deleted or anonymised using industry-standard data destruction methods. You may request early deletion of your data subject to the limitations described in Section 8 of this policy.

7. Data Security

Protecting your personal data against unauthorised access, disclosure, alteration, and destruction is a core operational priority at mlbb4d. We implement a layered security architecture that includes the following technical and organisational measures:

• Encryption in Transit: All data transmitted between your browser or application and our servers is encrypted using TLS 1.2 or TLS 1.3 protocols (commonly known as 256-bit SSL encryption). The padlock icon displayed in your browser confirms that your connection is secured.
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents, financial records, and password hashes — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All mlbb4d staff who handle personal data undergo background checks, sign confidentiality agreements, and complete mandatory data protection training.
• Penetration Testing: Our platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you within 72 hours of becoming aware of the incident, detailing the nature of the breach, the data affected, and the steps we are taking to address it.
• Two-Factor Authentication (2FA): We strongly encourage all users to enable 2FA on their accounts to provide an additional layer of protection against unauthorised login attempts.

While we employ industry-leading security measures, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised activity on your account.

8. Your Rights and Choices

As a user of mlbb4d, you have the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond to all verified requests within thirty (30) calendar days.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (email address, phone number) can be made directly through your account settings; legal name or date-of-birth corrections require documentary evidence and are processed by our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to legal retention obligations — we cannot delete transaction records or KYC documents during the mandatory five-year retention period.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data while a dispute about its accuracy or our legal basis for processing is resolved.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Objections to marketing communications will be actioned immediately; objections to other processing will be assessed case by case.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional email subscriptions), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9. Cookies and Tracking Technologies

mlbb4d uses cookies and similar tracking technologies to deliver core platform functionality, remember your preferences, analyse usage patterns, and — where you have opted in — deliver relevant promotional content. The following categories of cookies are in use on our platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing you from logging in or using the platform.
• Functional Cookies: Remember your preferences such as preferred language display, default game category, and notification settings. Disabling these cookies will not prevent platform access but will reset your preferences on each visit.
• Analytics Cookies: Collect anonymised data about how users navigate the platform — which pages are visited most frequently, where users drop off, and which features generate the highest engagement. This data is used to improve platform design and performance. We use industry-standard analytics tools configured to anonymise IP addresses before data is stored.
• Marketing and Retargeting Cookies (Opt-In Only): Where you have explicitly consented, these cookies enable personalised promotional content tailored to your gaming interests and activity on the platform. You may withdraw this consent at any time through your account privacy settings.

You can manage cookie preferences through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies via the privacy settings menu. Please be aware that disabling strictly necessary cookies will impair your ability to use the platform. Your cookie preferences are saved and respected on subsequent visits.

10. Children's Privacy

The mlbb4d platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account or provided personal data to us without parental consent, please contact [email protected] immediately. Upon verification, we will delete the minor's account and all associated personal data without delay. Account holders are responsible for ensuring that minors in their household do not have access to the platform or their account credentials.

11. International Data Transfers

mlbb4d operates on internationally hosted server infrastructure. As a result, personal data collected from users in Indonesia may be transferred to, stored, and processed in countries outside Indonesia. When such transfers occur, we ensure that appropriate safeguards are in place — including contractual clauses that impose data protection standards equivalent to those described in this policy — to protect your personal data regardless of where it is processed. By using mlbb4d, you acknowledge and consent to such international transfers under the conditions described herein.

12. Changes to This Privacy Policy

mlbb4d reserves the right to update or amend this Privacy Policy at any time. When material changes are made — changes that meaningfully affect how we collect or use your personal data — we will notify registered users via email and display a prominent notice on the platform homepage for a minimum of thirty (30) days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the platform after the effective date of any revised policy constitutes acceptance of that policy. We encourage you to review this page periodically.

13. Contact and Data Protection Inquiries

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the mlbb4d Data Protection team using the details below. We are committed to resolving all privacy inquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 5 business days for general inquiries; within 30 calendar days for formal data subject access requests.
• Languages Supported: English and Bahasa Indonesia
• Operating Hours: 24/7 live chat support available in-platform; email responses processed Monday–Friday, 09:00–18:00 WIB (UTC+7).