Privacy Policy

mbk4d (accessible at https://mbk4d.bet) is the data controller responsible for the personal data you provide when registering, transacting, or interacting with any feature of the Platform. As data controller, mbk4d determines the purposes and means of processing your personal data in accordance with applicable international data protection standards.

This Privacy Policy applies to all personal data collected through the mbk4d website, its mobile-optimized interfaces, any API connections, and all customer support channels including live chat and email. It applies to all registered players regardless of their country of access, with specific reference to players resident in Indonesia, who constitute the primary user base of the Platform.

By creating an mbk4d account, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and accepted this Privacy Policy in its entirety. If you do not agree with any provision of this policy, you should discontinue use of the Platform and contact support to request account closure.

mbk4d collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarizes the categories of data we collect, with examples of specific data points within each category:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond document photos used for identity verification), or health data, unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support communication.

mbk4d collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when completing the registration form, submitting KYC documents, filling in payment details, contacting support via live chat or email, or participating in surveys and promotions.
• Automated Technical Collection: Technical data collected automatically as you interact with the Platform, including through server logs, session tracking, and error reporting systems. This data is collected without active input from you and is used primarily for security, fraud prevention, and service quality monitoring.
• Payment Processors: Financial institutions and e-wallet providers — including BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay — may share transaction confirmation data with mbk4d to verify deposit and withdrawal status. This data sharing is necessary to process your transactions and is governed by the respective provider's terms of service.
• KYC and Identity Verification Partners: mbk4d works with authorized third-party identity verification services that process your submitted documents to confirm their authenticity. These partners are bound by confidentiality agreements and process data solely on mbk4d's instruction.
• Cookies and Similar Technologies: As detailed in Section 7 of this policy, mbk4d uses cookies, pixel tags, and session storage to collect behavioral and preference data during your visit to the Platform.
• Fraud Prevention and AML Services: In specific circumstances relating to suspected fraud or money laundering, mbk4d may receive information from third-party risk intelligence providers to supplement information you have provided.

mbk4d processes personal data on the following recognized legal bases under applicable international data protection frameworks:

• Contractual Necessity: The majority of data processing by mbk4d is necessary to perform the contract between mbk4d and you as a registered player. This includes account management, payment processing, game result recording, bonus administration, and customer support. Without this processing, mbk4d cannot deliver the services you have requested.
• Legal Obligation: mbk4d is subject to international licensing conditions that impose obligations relating to KYC, AML, age verification, and responsible gaming monitoring. Processing personal data to comply with these obligations is legally mandated regardless of individual consent.
• Legitimate Interests: mbk4d processes certain technical and behavioral data on the basis of legitimate business interests, including fraud prevention, security monitoring, service improvement, and Platform analytics. Where this basis applies, mbk4d has assessed that its legitimate interests do not override the fundamental privacy rights and freedoms of individual players.
• Consent: For optional processing activities — such as sending marketing communications about new promotions, seasonal offers (including Idul Fitri or Ramadhan specials), and personalized game recommendations — mbk4d relies on your freely given, specific, and informed consent. You may withdraw consent for marketing communications at any time through your account preferences or by emailing support.

mbk4d uses the personal data we collect for the following specific purposes. Each purpose is linked to the data categories involved and the applicable legal basis:

• Account Creation and Management: Using identity and contact data to create, maintain, and authenticate your player account, reset credentials, and process account closure requests.
• Age and Identity Verification: Using identity data and verification documents to confirm that you are at least 21 years of age and to verify your legal identity in compliance with our KYC obligations. Access to real-money gaming is conditional on satisfactory age verification.
• Payment Processing: Using financial data to process deposits from and withdrawals to your nominated payment method, including local Indonesian bank transfers (BCA, BRI, BNI, Mandiri), e-wallet transfers (OVO, DANA, GoPay), and cryptocurrency transactions (USDT, BTC).
• Game and Bet Settlement: Recording gaming activity data to accurately settle bets, calculate winnings, apply bonus wagering credits, and provide you with a complete transaction history within your account dashboard.
• Fraud and Security Monitoring: Using technical data, financial data, and gaming activity data to detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, and money laundering activity.
• Responsible Gaming Compliance: Using gaming activity and financial data to monitor for indicators of problem gambling, enforce deposit limits and self-exclusion requests you have set, and flag accounts that may benefit from responsible gaming interventions as required by our licensing conditions.
• Customer Support: Using communications data and account data to respond to your queries, investigate complaints, and resolve disputes in a timely and accurate manner.
• Marketing Communications: Where you have given consent, using contact data and preference data to send you personalized promotional offers, bonus announcements, and platform news via email or in-platform notifications. You may opt out at any time.
• Platform Analytics and Improvement: Using aggregated and anonymized technical and behavioral data to understand how players use the Platform, identify areas for improvement, test new features, and optimize the overall gaming experience.
• Legal and Regulatory Compliance: Using identity, financial, and gaming data to respond to lawful requests from regulatory authorities, comply with court orders, and meet our obligations under applicable international licensing requirements.

mbk4d does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and in every case we require the receiving party to maintain appropriate confidentiality and security standards:

• Payment Service Providers: To process transactions, we share the minimum necessary financial data with your chosen payment provider (e.g., your nominated BCA or BRI account details). These providers act as independent data controllers for their own transaction processing and are subject to their own privacy policies and applicable banking regulations.
• KYC and Identity Verification Vendors: Document verification services receive copies of your identity documents and biometric data exclusively for the purpose of verifying your identity. They are contractually prohibited from using this data for any other purpose.
• Game Content Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Spribe, and Pocket Games Soft — receive anonymized session tokens and game result data necessary to operate their game engines on the Platform. These providers do not receive your full personal identity or financial data.
• Fraud Prevention and AML Intelligence Services: Risk management vendors may receive technical and financial data to assist in detecting suspicious activity. All such vendors operate under data processing agreements and are prohibited from using shared data for independent commercial purposes.
• Regulatory and Law Enforcement Authorities: mbk4d will disclose personal data to competent regulatory authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or in response to a lawful investigatory request. Where legally permissible, mbk4d will notify affected players of such disclosures.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of mbk4d's business assets, personal data may be transferred to the acquiring entity subject to the same data protection commitments set out in this Privacy Policy. Affected players will be notified in advance where legally practicable.

mbk4d uses cookies and similar technologies to ensure the Platform functions correctly, to protect your account security, and to understand how players interact with our games and features. The following table describes the cookie categories we use:

mbk4d does not use third-party advertising or retargeting cookies. We do not place cookies from social media platforms (Facebook Pixel, Twitter/X ads pixel, TikTok pixel, etc.) on the Platform. You can manage browser-level cookie preferences through your browser's settings, though disabling strictly necessary cookies will prevent you from logging in to your account.

mbk4d retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by our regulatory and legal obligations. The following retention schedules apply:

• Active Account Data: All personal, financial, and gaming activity data is retained for the duration of your active account relationship with mbk4d plus a minimum of five years following account closure. This five-year post-closure retention period is required by our international licensing conditions and AML compliance obligations.
• KYC and Verification Documents: Identity documents and verification records are retained for a minimum of five years from the date of verification, or five years from account closure, whichever is later. In cases where a regulatory investigation is ongoing at the time of account closure, documents are retained until the investigation is formally concluded.
• Financial Transaction Records: Complete records of all deposits, withdrawals, bonus transactions, and bet settlements are retained for a minimum of seven years to satisfy financial record-keeping requirements under applicable licensing rules.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction, or until any related dispute is formally resolved, whichever is later.
• Marketing Preference Data: If you have opted in to marketing communications, your marketing preferences are retained for as long as you hold an active account. Upon opting out or closing your account, marketing preference data is removed within 30 days.
• Technical and Log Data: Server logs and IP address records are retained for 90 days for security monitoring purposes, after which they are automatically purged unless retained as evidence in an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted from all active systems and archived storage. Deletion is irreversible and conducted in accordance with recognized data destruction standards.

mbk4d implements a multi-layered technical and organizational security framework designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your browser and mbk4d servers is encrypted using TLS 1.3 with 256-bit cipher suites. The Platform enforces HTTPS on all pages and supports HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks.
• Data Encryption at Rest: Sensitive personal data stored in mbk4d databases — including identity documents, financial data, and KYC records — is encrypted at rest using AES-256. Database encryption keys are managed through a dedicated key management system with hardware security module (HSM) support.
• Access Controls: Access to systems containing personal data is restricted to mbk4d employees and contractors with a demonstrated business need. All access is governed by a least-privilege policy, is protected by multi-factor authentication, and is subject to comprehensive audit logging.
• Regular Security Assessments: mbk4d commissions independent penetration testing and vulnerability assessments on a periodic basis. Critical vulnerabilities identified through these assessments are remediated within defined SLA timelines tracked by our internal security team.
• Incident Response: mbk4d maintains a documented data breach response plan. In the event of a confirmed data breach that poses a risk to player rights, mbk4d will notify affected players and relevant regulatory authorities within the timeframe required by applicable law, and in any case within 72 hours of becoming aware of the breach.
• Employee Training: All mbk4d staff with access to personal data undergo mandatory data protection training upon onboarding and annually thereafter. Staff are trained to recognize phishing attempts, handle personal data responsibly, and report suspected security incidents immediately.

As an mbk4d player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered username.

All rights requests are acknowledged within 5 business days and fully resolved within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case you will be notified of the extension and its reason. There is no charge for exercising your rights, and mbk4d will never penalize a player for making a data rights request.

The mbk4d Platform is strictly for adults aged 21 years or older. mbk4d does not knowingly collect, store, or process personal data belonging to any person under the age of 21. The registration process includes mandatory age verification steps, and all accounts are subject to KYC checks that include confirmation of date of birth against a government-issued identity document.

If mbk4d discovers or is notified that personal data belonging to a person under the age of 21 has been collected — whether through falsification of registration details or any other means — the following actions will be taken immediately:

• The affected account will be permanently suspended without notice.
• All wagers placed by the underage individual will be voided.
• Any deposits made will be returned to the original payment source after deduction of any withdrawals already processed, subject to AML verification.
• All personal data associated with the underage account will be permanently deleted from mbk4d systems within 30 days, except where retention is required for regulatory or law enforcement purposes.

Parents and guardians who believe that a minor may have accessed the mbk4d Platform using falsified details are encouraged to contact support immediately at [email protected]. We treat reports of potential underage access with the highest priority.

mbk4d operates an international platform that serves players primarily in Indonesia. To deliver services effectively and securely, certain personal data may be transferred to and processed in countries outside Indonesia, including countries where mbk4d's technical infrastructure, KYC partners, and authorized game providers are based.

Where personal data is transferred internationally, mbk4d ensures that appropriate safeguards are in place to maintain data protection standards equivalent to those applied within Indonesia. These safeguards include:

• Data processing agreements that incorporate internationally recognized data protection clauses, including standard contractual clauses where applicable.
• Transfers only to vendors and partners that have independently certified their data security practices or operate under recognized international frameworks.
• Regular review of international transfer arrangements to ensure continued adequacy as regulatory standards evolve.

By using the mbk4d Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. mbk4d will always ensure that such transfers are conducted in accordance with this Privacy Policy and applicable data protection requirements, and that your personal data receives an equivalent level of protection regardless of where it is processed.

mbk4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. All amendments will be published on this page with a revised "Last Updated" date at the top of the document.

For material changes — those that significantly affect your rights or the way mbk4d processes your personal data — mbk4d will provide advance notice through one or more of the following channels at least 14 days before the amended policy takes effect:

• A prominent notice displayed on the mbk4d Platform upon login.
• An email notification to the address registered to your account.
• An in-platform notification visible in your account dashboard.

Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and contact support to request account closure before the effective date of the amended policy. mbk4d will retain an archive of all previous versions of this Privacy Policy, which are available upon written request.

If you have any questions, concerns, or requests relating to this Privacy Policy or to mbk4d's processing of your personal data, you are encouraged to contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" so your message is routed directly to the Data Protection team. Written responses are typically provided within 5 business days.
• Live Chat: Available 24/7 on the mbk4d Platform. Native Indonesian-speaking support agents are available around the clock across WIB, WITA, and WIT time zones. Live chat is best suited to general questions; formal data rights requests should be submitted in writing via email.

mbk4d has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations and serving as the primary point of contact for player data rights inquiries and regulatory authority communications. The DPO can be reached through the email address above by marking your message "For the attention of the DPO."

If you are not satisfied with the outcome of a data rights request or a privacy-related complaint, you have the right to escalate the matter to the competent data protection supervisory authority in your jurisdiction. mbk4d will cooperate fully with any such supervisory authority investigation and will comply with any binding decisions issued in connection with the handling of your personal data.