mas88 Privacy Policy

1 Who We Are and What This Policy Covers

mas88 is an internationally operated online gaming platform that provides Indonesian players with access to a comprehensive suite of gambling products, including live casino, slots, sportsbook, video poker, and togel (Indonesia's traditional numbers lottery). The Platform is accessible at mas88.lat and is designed for adult players aged 21 and above.

This Policy applies to all personal data processed by mas88 in connection with your registration, use of the Platform, transactions, customer support interactions, and promotional communications. It covers data collected via the mas88 website, any associated mobile-optimised interfaces, and direct communications between you and our support team.

For the purposes of this Policy, "personal data" means any information that identifies or could reasonably be used to identify you as a natural person — including your name, email address, mobile number, bank account details, IP address, and device identifiers. Anonymous, aggregated data that cannot be linked to an individual is not considered personal data under this Policy.

2 Categories of Personal Data

mas88 collects the following categories of personal data from players and prospective players:

3 Collection Methods

mas88 collects personal data through the following channels:

• Direct Provision by You: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion, you provide personal data directly to mas88.
• Automated Collection: When you browse or use the Platform, our servers and analytics systems automatically record technical and behavioural data including your IP address, device identifiers, session timestamps, and navigation activity via server logs and cookies.
• Third-Party Sources: Where permitted by applicable law, mas88 may receive identity verification data from KYC/AML service providers, fraud-detection agencies, and payment processors to supplement information you have provided directly. We may also receive limited data from marketing partners where you have opted in to communications from those partners.
• Cookies and Similar Technologies: The Platform uses cookies, local storage, and similar tracking technologies to maintain session state, personalise your experience, and gather analytics data. Full details are set out in Section 9 (Cookies & Tracking) of this Policy.

4 Why We Use Your Data

mas88 processes your personal data for the following specific purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, process login requests, and enforce account security.
• Transaction Processing: To process deposits and withdrawals in Indonesian Rupiah via your nominated bank account (BCA, BRI, BNI, Mandiri, or other supported banks) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), maintain accurate transaction records, and issue account statements.
• KYC and AML Compliance: To verify your identity and age (confirming you are 21 years of age or older), screen for politically exposed persons (PEPs), and fulfil our anti-money laundering and counter-terrorism financing obligations.
• Platform Operation: To deliver game content, live sportsbook markets, togel draw results, and other Platform services; to monitor game integrity and detect cheating, collusion, or fraud.
• Customer Support: To respond to your enquiries, resolve disputes, process bonus claims, and handle responsible gaming requests including self-exclusion and deposit limit adjustments.
• Promotions and Marketing: To notify you of bonuses, promotions, and Platform updates where you have consented to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Responsible Gaming: To monitor your play patterns for indicators of problem gambling behaviour, enforce deposit and loss limits you have set, and deliver cooling-off or self-exclusion measures when requested.
• Security and Fraud Prevention: To detect, investigate, and prevent fraud, money laundering, unauthorised account access, bonus abuse, and other prohibited conduct.
• Analytics and Platform Improvement: To analyse aggregate usage patterns, optimise Platform performance, and develop new features and product offerings.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

5 Grounds for Processing

mas88 processes your personal data on one or more of the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing is necessary to perform the contract between you and mas88 — specifically, to operate your account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary to comply with legal requirements applicable to mas88's operations, including KYC, AML, and record-keeping obligations under the laws of the jurisdiction in which mas88 holds its operating licence.
• Legitimate Interests: Processing is necessary for mas88's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics — provided those interests are not overridden by your own privacy rights.
• Consent: Where no other legal basis applies — most notably for marketing and promotional communications — mas88 relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

6 Who We Share Your Data With

mas88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial and identity data with our payment processing partners to facilitate deposits and withdrawals via Indonesian banks and e-wallets. These processors are contractually bound to handle your data securely and solely for payment purposes.
• Identity Verification (KYC) Providers: We engage third-party KYC and AML service providers to assist in verifying your identity and screening for compliance purposes. These providers receive only the data necessary to complete the verification process.
• Game Content Providers: Our game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive your account identifiers and session data to deliver their game content and maintain game integrity. These studios are subject to their own data protection obligations under our platform licensing agreements.
• IT Infrastructure and Cloud Services: We use third-party hosting, content delivery, and cloud infrastructure providers to operate the Platform. These providers act as data processors under our instruction and are bound by appropriate data processing agreements.
• Fraud and Security Services: We may share data with fraud-detection, cybersecurity, and risk-management service providers for the purpose of protecting the Platform and its players from malicious activity.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory directive, mas88 will disclose personal data to competent governmental, law enforcement, or regulatory authorities. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of substantially all of mas88's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

7 How Long We Keep Your Data

mas88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status, plus an additional period following account closure as required for legal, compliance, and dispute resolution purposes.
• Transaction Records: Financial transaction records — including deposit histories, withdrawal records, and betting logs — are retained for a minimum of five (5) years following the date of the transaction, in accordance with standard AML record-keeping requirements.
• KYC Documentation: Identity documents and verification records are retained for a minimum of five (5) years following the closure of your account, or longer if required by applicable regulatory guidance.
• Customer Support Records: Records of support interactions, complaints, and dispute resolutions are retained for three (3) years following the resolution of the relevant matter.
• Marketing Preferences: Records of your marketing consent and opt-out choices are retained indefinitely to document your preferences and protect against future unsolicited contact.
• Technical and Analytical Data: Anonymised and aggregated analytical data may be retained indefinitely, as it no longer constitutes personal data once anonymisation is complete.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request earlier deletion of your data subject to the conditions described in Section 10 (Your Rights).

8 How We Protect Your Information

mas88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and the mas88 Platform is encrypted in transit using industry-standard TLS/SSL protocols. Sensitive data is never transmitted in plain text.
• Encrypted Data Storage: Personal data stored on our servers — particularly financial data and identity documents — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within mas88 is strictly role-based. Only staff members with a legitimate operational need are granted access to player data, and all such access is logged and audited.
• Password Security: Account passwords are stored as salted cryptographic hashes; mas88 does not store or have access to your plaintext password. You are solely responsible for keeping your password confidential and must not share it with any third party.
• Fraud Monitoring: Our automated security systems continuously monitor account activity for indicators of unauthorised access, unusual transaction patterns, and other anomalous behaviour.
• Incident Response: In the event of a personal data breach, mas88 will notify affected players and relevant authorities within the timeframes required by applicable law and will take immediate remedial action to contain the breach and mitigate harm.

9 Cookie Policy

The mas88 Platform uses cookies and similar tracking technologies to operate correctly and deliver a personalised, secure experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in status, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the Platform — which pages are visited most frequently, session durations, and error occurrences. This data helps us improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences, such as your preferred language display settings, game category filters, and odds format selections, so that you do not need to reconfigure them on each visit.
• Marketing and Retargeting Cookies: Used (where you have consented) to display relevant promotional content and to measure the effectiveness of marketing campaigns. These cookies may be set by our trusted advertising partners and are subject to those partners' own privacy policies.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in and using the Platform. Please note that deleting cookies does not delete your account data stored on mas88's servers.

10 Player Data Rights

As a player on the mas88 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request":

11 Age Restriction & Child Protection

The mas88 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, use the Platform, or submit any personal data to mas88.

During the account registration process, every player is required to confirm that they are 21 years of age or older. Where we have reasonable grounds to suspect that an account holder is under 21, we will suspend the account immediately pending age verification. If verification confirms the account holder is underage, the account will be permanently closed, all funds will be handled in accordance with applicable law, and any wagering activity will be voided.

If you are a parent or guardian and believe that a minor has registered an account on the mas88 Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

12 External Services & Integrations

The mas88 Platform integrates game content delivered by third-party studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. While these studios deliver their content within the mas88 environment, they may operate their own data collection practices within their game clients for purposes such as game integrity monitoring, RNG certification, and live-stream delivery.

mas88 exercises no control over, and accepts no responsibility for, the privacy practices or content of any third-party systems operating independently of our Platform. We recommend reviewing the privacy policies of any third-party services you interact with in connection with your gaming activity.

13 Updates to This Privacy Policy

mas88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify active account holders via email or an in-Platform notification.

The most current version of this Policy is always accessible at mas88.lat/privacy-policy. Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting our support team.

14 Data Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mas88 handles your personal data, please contact our customer support team. We have Indonesian-speaking and English-speaking agents available 24 hours a day, 7 days a week, operating on WIB (UTC+7) hours.

• Email: [email protected] — use the subject line "Data Privacy Request" for privacy-related matters
• Live Chat: Available directly within the mas88.lat Platform interface
• Response Time: Privacy-related requests are acknowledged within 24 hours and fully addressed within 30 calendar days

For questions relating to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page.