Privacy Policy

1. Definitions

For clarity throughout this Privacy Policy, the following terms carry the meanings set out below:

• "mc99," "we," "us," "our" — the mc99 online betting platform, accessible at https://mc99.cam, and all associated services.
• "Player," "you," "your" — any individual who visits, registers with, or otherwise uses mc99 services.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, address, email, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer; the identity and age verification process required for account funding and withdrawals.
• "Third-Party Service Providers" — external companies that assist mc99 in delivering services, such as payment processors, game studios, identity verification providers, and analytics platforms.
• "Cookies" — small text files placed on your device by a website to store information about your preferences and session activity.

2. Data We Collect

mc99 collects Personal Data across several categories. The table below summarises the types of information we process and why:

We do not collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless strictly required by law or expressly provided by you.

3. How We Collect Data

3.1 Directly from You

The majority of Personal Data we hold is provided directly by you when you:

• Register an mc99 account and complete the sign-up form.
• Submit KYC documents (e-KTP, passport, proof of address) for identity verification.
• Make a deposit or request a withdrawal via bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Contact our support team via live chat, email, or other channels.
• Complete surveys, feedback forms, or promotional opt-in requests.
• Set responsible gaming preferences such as deposit limits or self-exclusion requests.

3.2 Automatically

When you use mc99, our systems automatically collect certain Technical Data including your IP address, device type, browser characteristics, session start and end times, pages visited, and in-app actions. This information is collected through server logs, cookies, and similar tracking technologies (see Section 7 for full cookie details).

3.3 From Third Parties

We may receive limited Personal Data from the following third-party sources in order to verify your identity and prevent fraud:

• Identity Verification Partners: services that cross-check your submitted documents against government records to confirm authenticity.
• Payment Processors: confirmation data from Indonesian banks and e-wallet providers regarding transaction status.
• Anti-Fraud and AML Screening Services: watchlist checks against sanctions lists and politically exposed persons (PEP) databases.

These third parties only share data necessary for verification purposes and are bound by their own privacy obligations.

4. How We Use Your Data

mc99 processes your Personal Data for the following purposes, each tied to a legitimate operational or legal requirement:

• Account Registration and Management: Creating and maintaining your player account, authenticating your identity, and enabling access to mc99 services.
• Transaction Processing: Executing deposits, withdrawals, and in-game wagers; reconciling financial records; issuing bonuses and cashback.
• KYC and Compliance: Verifying your age (21+ requirement), confirming Indonesian residency, and meeting anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations.
• Customer Support: Responding to your enquiries, resolving disputes, troubleshooting technical issues, and maintaining support transcripts for quality assurance.
• Fraud Prevention and Platform Security: Detecting multi-accounting, collusion, bonus abuse, payment fraud, and other prohibited activities; protecting mc99 systems from cyber attacks.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling; enforcing self-exclusion requests; applying deposit and loss limits.
• Marketing and Promotions: Sending you bonus offers, tournament announcements, VIP rewards, and other promotional content (only if you have opted in).
• Analytics and Improvement: Understanding how players use mc99, which games are most popular, where technical issues occur, and how we can enhance the overall player experience.
• Legal Obligations: Responding to court orders, regulatory requests, law enforcement enquiries, and tax reporting requirements where applicable.

5. Legal Basis for Processing

Under internationally recognized data protection principles, mc99 must have a lawful basis to process your Personal Data. The legal bases we rely on are:

• Contract Performance: Processing is necessary to fulfill our contract with you — namely, to provide betting services, process your transactions, and manage your account as set out in the Terms & Conditions.
• Legal Obligation: We are required by law to verify your identity, enforce age restrictions, conduct AML checks, and maintain transaction records for audit purposes.
• Legitimate Interest: We have a legitimate business interest in preventing fraud, improving our platform, and ensuring fair play among all mc99 players. This interest is balanced against your privacy rights, and we do not process your data in ways that would be unexpected or harmful.
• Consent: For marketing communications and certain optional cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting your access to core services.

If you believe we are processing your data without a valid legal basis, you have the right to object (see Section 10).

6. Sharing and Disclosure

6.1 When We Share Your Data

mc99 does not sell your Personal Data to third parties for their own marketing purposes. However, we do share your information with carefully vetted service providers and partners in the following circumstances:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to execute your deposits and withdrawals.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetENet, Microgaming, Pocket Games Soft, Spribe, and Asia Gaming receive anonymized player session data to operate live dealer games, slots, and RNG-based casino games. They do not have access to your full identity or contact details.
• Identity Verification Services: Third-party KYC platforms analyze your submitted documents to confirm authenticity and flag fraudulent submissions.
• Analytics and Marketing Platforms: We use services like Google Analytics (with IP anonymization enabled) and email marketing tools to measure campaign performance and site usage. These platforms operate under strict data processing agreements.
• Customer Support Software: Live chat transcripts and support tickets are stored on secure cloud platforms managed by reputable SaaS providers with data centers in Singapore or similar regulated jurisdictions.
• Legal and Regulatory Authorities: We may disclose your data to law enforcement, tax authorities, or licensing bodies if legally compelled by court order, subpoena, or regulatory investigation.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6.2 Data Processing Agreements

All third-party service providers who process Personal Data on behalf of mc99 are bound by written data processing agreements that require them to implement appropriate security measures, process data only according to our instructions, and delete or return data upon termination of the service relationship.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit mc99. They enable the website to remember your login session, language preferences, and other settings that improve your browsing experience.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may limit certain mc99 features such as staying logged in or saving your preferences. Essential cookies cannot be disabled as they are necessary for the platform to function. To adjust cookie settings, visit your browser's help section (Chrome, Firefox, Safari, Edge all provide detailed cookie management instructions).

8. Data Retention

mc99 retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Retention periods vary by data type:

• Active Accounts: Your account data, transaction history, and bet records are retained for the duration of your active account plus 5 years after closure to meet AML record-keeping obligations and resolve any disputes.
• KYC Documents: Identity verification documents are retained for 7 years following account closure, in line with anti-money-laundering regulations.
• Marketing Communications: If you unsubscribe from marketing, we will suppress your contact details from future campaigns but retain a record of your opt-out preference indefinitely to ensure we do not re-contact you.
• Support Transcripts: Live chat logs and email correspondence are kept for 3 years for training and quality assurance purposes.
• Self-Exclusion Records: If you self-exclude for responsible gaming reasons, we retain your details permanently to prevent future account re-registration during or after your exclusion period.

Once data is no longer required, it is securely deleted or anonymized such that it can no longer identify you.

9. Data Security

mc99 employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your device and mc99 servers is encrypted using 256-bit SSL/TLS (the same encryption used by banks and government websites).
• Encryption at Rest: Personal Data stored in our databases is encrypted using AES-256 encryption standards.
• Access Controls: Only authorized mc99 personnel with a legitimate business need can access Personal Data. Access is logged and audited regularly.
• Secure Data Centers: Our servers are hosted in ISO 27001-certified data centers with 24/7 physical security, fire suppression systems, and redundant power supplies.
• Regular Security Audits: mc99 undergoes annual penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Employee Training: All staff members receive data protection and security awareness training and are bound by confidentiality agreements.

10. Your Rights

Under internationally recognized data protection principles, you have the following rights regarding your Personal Data:

• Right of Access: You may request a copy of all Personal Data mc99 holds about you. We will provide this within 5 business days in a commonly used electronic format (PDF or CSV).
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you may request corrections by contacting support or updating your account details directly in your profile settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data if it is no longer necessary for the purposes for which it was collected, or if you withdraw consent where consent was the basis for processing. Note: we cannot delete data we are legally required to retain (e.g., AML transaction records).
• Right to Restriction of Processing: You may ask us to temporarily suspend processing of your data while we investigate a complaint or dispute about its accuracy or lawfulness.
• Right to Data Portability: You may request that we transfer your Personal Data to another service provider in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests (such as direct marketing) at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: If processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, email [email protected] with "DATA REQUEST" in the subject line. Include your full name, registered email address, and specify which right(s) you wish to exercise. We will respond within 5 business days with confirmation or a request for additional identity verification if needed.

11. Minors and Age Verification

mc99 services are strictly prohibited for individuals under the age of 21. We do not knowingly collect Personal Data from minors. During account registration and KYC verification, we verify that all players meet the minimum age requirement of 21 years as mandated by Indonesian responsible gaming standards.

If we discover that an account belongs to a person under 21, we will immediately suspend the account, void all bets, and return any deposited funds after identity confirmation. Parents or guardians who believe their child has provided Personal Data to mc99 should contact us immediately at [email protected] so we can take appropriate action.

12. International Data Transfers

mc99 operates globally, and your Personal Data may be transferred to, stored in, or accessed from countries outside Indonesia. These countries may have data protection laws that differ from Indonesian regulations. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by international data protection authorities.
• Hosting data in jurisdictions with robust data protection frameworks, such as Singapore, the European Union, or countries recognized as providing adequate protection.
• Ensuring third-party processors comply with equivalent data security standards regardless of their location.

By using mc99, you acknowledge and consent to the international transfer of your Personal Data as described in this policy.

13. Changes to This Policy

mc99 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The "Last Updated" date at the top of this document will always reflect the most recent revision.

For minor changes (typographical corrections, clarifications that do not materially affect your rights), we will update the policy without notification. For material changes (new data collection practices, changes in sharing practices, modifications to your rights), we will notify you via email to your registered address at least 14 days before the changes take effect. Continued use of mc99 after the effective date constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact and Data Enquiries

For questions, concerns, or requests related to this Privacy Policy or your Personal Data, please contact the mc99 Data Protection team:

• Email: [email protected] (include "PRIVACY ENQUIRY" in the subject line for priority routing)
• Live Chat: Available 24/7 via the chat widget on every page (specify that your enquiry relates to privacy/data protection)
• Response Time: We aim to respond to all data protection enquiries within 2 business days and resolve most requests within 5 business days.

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.