Privacy Policy

1. Introduction

mlb77 operates an online gaming platform offering casino games, live dealer tables, sports betting, and related entertainment services to users in Indonesia. To provide these services, we must collect and process certain personal information about you. This Privacy Policy is designed to help you understand:

• What personal data we collect and why
• How we use your personal data to operate the platform and improve your experience
• With whom we share your data and under what circumstances
• How we protect your data from unauthorized access, loss, or misuse
• What rights you have to access, correct, delete, or restrict processing of your data
• How long we retain your data and what happens when you close your account

mlb77 is the data controller responsible for your personal information. Our registered business address and contact information are provided at the end of this document. For any questions or concerns regarding your privacy, please contact our Data Protection Officer at [email protected].

2. Personal Data We Collect

mlb77 collects various categories of personal information to operate the platform, comply with legal obligations, and provide you with personalized services. The data we collect includes:

2.1 Information You Provide Directly

Account Registration Data: When you create an mlb77 account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and username/password. This information is necessary to establish your identity, verify your age (21+ requirement), and enable secure account access.

Identity Verification Documents: To comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations, we collect government-issued identification documents including Indonesian National Identity Card (KTP), Passport, or Driver's License (SIM). We also collect proof of address documents (utility bills, bank statements) and selfie verification photographs. These documents verify your identity, prevent fraud, and ensure underage individuals cannot access our services.

Payment Information: We collect bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account numbers), and transaction history including deposit amounts, withdrawal requests, payment methods used, and timestamps. This data is necessary to process financial transactions and comply with financial regulations.

Communications: When you contact mlb77 Support via Live Chat, email, WhatsApp, or in-app messaging, we collect the content of your messages, attached files, and associated metadata (time, date, support agent interactions). This enables us to provide customer service, resolve disputes, and improve support quality.

2.2 Information Automatically Collected

Technical Data: When you access mlb77, our systems automatically log IP address, device type (mobile/desktop), operating system, browser type and version, screen resolution, language settings, and time zone. This technical data helps us diagnose technical issues, optimize platform performance, and detect fraudulent activity.

Usage Data: We track your gaming activity including games played, bets placed, bet amounts, winnings/losses, session duration, pages visited, features used, and navigation patterns. This behavioral data allows us to understand how users interact with mlb77, identify popular games, and personalize recommendations.

Location Data: We collect geolocation data derived from your IP address to verify you are accessing mlb77 from Indonesia and to comply with geographic restrictions. We do not collect precise GPS coordinates unless you explicitly enable location services on your mobile device.

Cookies and Tracking Technologies: mlb77 uses cookies, web beacons, pixel tags, and similar technologies to remember your preferences, track session activity, analyze traffic patterns, and deliver targeted content. See Section 6 (Cookies & Tracking) for detailed information.

3. How We Use Your Personal Data

mlb77 processes your personal information for the following lawful purposes:

3.1 Service Delivery and Account Management

• Create, maintain, and secure your mlb77 account
• Process deposits, withdrawals, and other financial transactions
• Verify your identity and age (21+ compliance)
• Enable gameplay, place bets, and award winnings
• Provide customer support and respond to inquiries
• Manage VIP tier benefits, loyalty rewards, and personalized offers

3.2 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Prevent fraud, bonus abuse, account takeover, and other illicit activities
• Enforce our Terms & Conditions and Responsible Gaming policies
• Respond to law enforcement requests, court orders, or regulatory audits
• Maintain transaction records as required by international gaming licenses

3.3 Platform Improvement and Personalization

• Analyze usage patterns to improve website functionality, game selection, and user experience
• Personalize game recommendations, promotional offers, and content based on your preferences
• Conduct A/B testing and usability research
• Develop new features, games, and services

3.4 Marketing and Communications

• Send promotional emails about bonuses, tournaments, new games, and special offers (with your consent)
• Deliver transactional notifications about deposits, withdrawals, account changes, and security alerts
• Communicate policy updates, scheduled maintenance, and important platform announcements

You can opt out of marketing communications at any time by clicking "unsubscribe" in any promotional email or adjusting your communication preferences in account settings. Transactional and legal notifications cannot be opted out of as they are essential to service operation.

4. Data Sharing and Disclosure

mlb77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) to process deposits and withdrawals
• Gaming Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Play'n GO to deliver live dealer tables and slot games
• Identity Verification Services: Third-party KYC verification platforms that authenticate identity documents
• Cloud Hosting: Secure data storage and server infrastructure providers
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms
• Analytics Providers: Website analytics tools (Google Analytics) to understand user behavior

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with data protection laws. They cannot use your data for their own purposes or share it with others without our authorization.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, courts, or regulatory bodies when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate or prevent fraud, money laundering, or other illegal activities
• Protect the rights, property, or safety of mlb77, our users, or the public
• Enforce our Terms & Conditions or respond to terms violations

4.3 Business Transfers

In the event mlb77 undergoes a merger, acquisition, asset sale, bankruptcy, or other business reorganization, your personal data may be transferred to the acquiring entity or successor. You will be notified via email or prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your data with other third parties when you explicitly provide consent, such as when you authorize us to share tournament results on social media or participate in co-branded promotions with partners.

5. Data Security Measures

mlb77 employs industry-standard security technologies and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and mlb77 servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data (passwords, payment information, identity documents) is encrypted at rest using AES-256 encryption.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity and cyberattacks.
• Secure Data Centers: Player data is stored in ISO 27001-certified data centers with physical access controls, 24/7 monitoring, redundant power supplies, and disaster recovery capabilities.
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of security to your account by requiring a second verification method (SMS code, authenticator app) in addition to your password.

5.2 Organizational Safeguards

• Access Controls: Personal data is accessible only to authorized mlb77 employees and contractors who need it to perform their job functions. Access is granted on a need-to-know basis and logged for audit purposes.
• Staff Training: All mlb77 personnel undergo regular data protection and security awareness training. Employees sign confidentiality agreements and are subject to disciplinary action for policy violations.
• Vendor Management: Third-party service providers are carefully vetted and contractually required to maintain equivalent security standards. We conduct periodic security audits of critical vendors.
• Incident Response: mlb77 maintains a data breach response plan. In the unlikely event of a security incident, we will notify affected users and relevant authorities within 72 hours as required by data protection regulations.

6. Cookies and Tracking Technologies

mlb77 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance platform functionality, analyze user behavior, and deliver personalized experiences.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. Cookies allow the website to remember your preferences, recognize you on return visits, and track your activity across sessions.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Enable core functionality like login, account access, and secure transactions. These cookies are necessary for the platform to operate.	Session/1 year
Performance Cookies	Collect anonymous usage data (pages visited, time on site, error messages) to help us improve platform performance and user experience.	1-2 years
Functional Cookies	Remember your preferences like language, currency display, game favorites, and display settings to provide a personalized experience.	1 year
Marketing Cookies	Track your browsing activity to deliver relevant advertisements and promotional content. These cookies may be set by third-party advertising partners.	6 months-2 years

6.3 Managing Cookie Preferences

You can control and manage cookies through your web browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Note that blocking essential cookies may impair platform functionality and prevent you from using certain features. Browser-specific cookie management instructions:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Privacy, search, and services > Cookies and site permissions

7. Your Data Protection Rights

Under international data protection laws, including GDPR where applicable, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of all personal data mlb77 holds about you. We will provide this data in a structured, commonly used, machine-readable format (typically PDF or CSV). To request your data, contact [email protected] with your account username and registered email address. We will fulfill requests within 30 days.

7.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone, address) directly in your account settings. For changes requiring verification (name, date of birth), contact support with supporting documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data under certain circumstances. However, mlb77 may retain data when necessary to comply with legal obligations (financial transaction records must be retained for 7 years under AML regulations), resolve disputes, or enforce our terms. To request account deletion, contact [email protected].

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations, such as when you contest the accuracy of your data or object to processing. During restriction periods, we will store your data but not actively process it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request transfer to another service provider. We will provide data in CSV or JSON format upon request.

7.6 Right to Object

You can object to data processing based on legitimate interests (e.g., marketing, profiling). You can opt out of marketing emails at any time by clicking "unsubscribe" or adjusting preferences in account settings. Note that you cannot object to processing required for service delivery or legal compliance.

7.7 Right to Withdraw Consent

Where data processing is based on your consent (e.g., marketing communications, optional analytics), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before consent withdrawal.

7.8 Right to Lodge a Complaint

If you believe mlb77 has violated your data protection rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For Indonesian residents, this would be the Ministry of Communication and Information Technology (Kominfo).

8. Data Retention

mlb77 retains your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

• Account Data: Retained for the duration of your account's active status plus 7 years after closure to comply with financial record-keeping requirements.
• Transaction Records: Deposits, withdrawals, bets, and winnings are retained for 7 years to meet anti-money laundering (AML) and tax regulations.
• Identity Documents: KYC verification documents are retained for 7 years after account closure as required by international gaming licenses and AML regulations.
• Customer Support Communications: Retained for 3 years to maintain service quality records and resolve disputes.
• Marketing Communications: Deleted within 90 days of unsubscribe request or account closure.
• Server Logs and Technical Data: Retained for 12-24 months for security monitoring and technical troubleshooting.

8.2 Secure Deletion

When retention periods expire, mlb77 securely deletes or anonymizes personal data using industry-standard methods. Deleted data cannot be recovered. Anonymized data (data stripped of all personally identifiable information) may be retained indefinitely for statistical analysis.

9. Children's Privacy

mlb77 does not knowingly collect personal information from individuals under the age of 21. Our platform is restricted to adults who meet the legal gambling age in Indonesia (21 years or older). By using mlb77, you represent and warrant that you are at least 21 years of age.

We employ age verification mechanisms including government ID checks to prevent underage access. If we discover that we have inadvertently collected data from an individual under 21, we will immediately delete that account, ban the associated IP address, and erase all personal data associated with that individual. We will also report the incident to relevant authorities if required by law.

Parents and guardians: If you believe your child has created an mlb77 account or provided personal information to us, please contact [email protected] immediately so we can take corrective action.

10. Changes to This Privacy Policy

mlb77 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes that significantly affect your rights or how we process your data, we will notify you by:

• Sending an email to your registered email address at least 30 days before changes take effect
• Displaying a prominent notice on the mlb77 homepage and login screen
• Requiring you to review and accept the updated Privacy Policy before continuing to use the platform

Minor changes (clarifications, typo corrections, formatting updates) may be made without advance notice. The "Last Updated" date at the top of this policy will always reflect the most recent revision date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of mlb77 after the effective date of Privacy Policy changes constitutes acceptance of the revised policy. If you do not agree with the updated policy, you must stop using mlb77 and may request account closure.

11. Contact Information

For questions, concerns, or requests regarding this Privacy Policy, your personal data, or data protection practices, please contact mlb77's Data Protection Officer:

• Email: [email protected] (response within 48 hours)
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the mlb77 website
• WhatsApp: +62 812-3456-7890

When contacting us regarding privacy matters, please include your full name, mlb77 username, registered email address, and a detailed description of your inquiry or request. We take all privacy concerns seriously and will respond as promptly as possible.