mbo77 Privacy Policy

mbo77 ("we", "us", "our") operates the online betting platform accessible at https://mbo77.pro, providing sports betting, live casino, slot games, crash games, and related wagering services to members in Indonesia. We are committed to protecting the personal data of every individual who interacts with the mbo77 Platform — whether as a registered member, a prospective member browsing our site, or a visitor accessing publicly available content.

This Privacy Policy sets out, in clear and plain language, what personal data we collect from you, the purposes for which it is processed, who we share it with, how long we retain it, and the rights you may exercise in relation to your own data. This document should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and mbo77.

By registering an account on the mbo77 Platform or by continuing to use our services after this Privacy Policy has been made available to you, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Privacy Policy, you should discontinue your use of the Platform and may request account closure by contacting our support team.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" means the mbo77 website at https://mbo77.pro, including all sub-pages, account dashboards, mobile-optimised views, and any related digital services operated by mbo77.
• "Member" means any individual who has successfully registered a personal account on the Platform and whose account remains active, suspended, or under review.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, residential address, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "KYC" means Know Your Customer — the identity verification process by which mbo77 confirms a Member's identity, age, and eligibility to use the Platform.
• "Third-Party Processor" means any company or individual engaged by mbo77 to process Personal Data on mbo77's behalf under a data processing agreement, including payment providers, game studios, and KYC verification services.
• "Cookie" means a small text file placed on your device by the Platform to store session information, preferences, and analytics data.

mbo77 collects the following categories of Personal Data from Members and Platform visitors:

mbo77 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete the KYC process, submit a deposit or withdrawal request, contact our support team via live chat or email, or update your account profile settings.
• Automatically via technology — when you access the Platform, our servers and analytics systems automatically record Technical Data and Usage Data using cookies, server logs, and similar tracking technologies. See Clause 10 for full details of our cookie practices.
• From third-party processors — when you use a bank transfer (e.g., BCA, BRI, BNI) or e-wallet (e.g., GoPay, OVO, DANA) to deposit or withdraw funds, the relevant payment provider confirms transaction details to mbo77 for reconciliation purposes. Similarly, our KYC verification partner may return a verification status and document authenticity score based on the documents you submit.
• From publicly available sources — mbo77 may cross-reference publicly available records to validate identity or address information provided during KYC, in accordance with applicable regulations.

mbo77 processes your Personal Data for the following clearly defined purposes:

• Account Management: To create, maintain, secure, and — where necessary — close your mbo77 account, and to authenticate your identity each time you log in.
• Service Delivery: To process your bets and game sessions across all product verticals — including sportsbook, live casino, slot games, crash games, togel (Indonesia's traditional numbers lottery), and sabung ayam (traditional Indonesian cockfighting) — and to settle wagers accurately in IDR.
• Financial Transactions: To process deposits and withdrawals via local Indonesian banks and e-wallets, to reconcile your account balance, and to maintain accurate financial records.
• KYC & Fraud Prevention: To verify your identity, confirm your age (21+ requirement), detect and prevent fraudulent activity, investigate suspicious betting patterns, and prevent money laundering.
• Bonus Administration: To track wagering requirements, validate bonus eligibility, calculate turnover, and process bonus-related payouts accurately.
• Customer Support: To respond to your enquiries, resolve account disputes, process responsible gaming tool requests, and maintain a record of all interactions for quality assurance.
• Responsible Gaming: To administer deposit limits, session time alerts, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming policy.
• Platform Improvement: To analyse anonymised usage patterns, identify technical issues, test new features, and improve the overall performance and user experience of the Platform.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, seasonal bonus notifications (e.g., Idul Fitri, Ramadhan specials, Indonesian Independence Day promotions), and product updates by email or in-Platform notification. You may withdraw marketing consent at any time via your account settings or by emailing [email protected].
• Legal & Regulatory Compliance: To meet our obligations under applicable international gaming regulations, anti-money-laundering requirements, and data protection frameworks.

mbo77 relies on the following legal bases to process your Personal Data:

• Contractual Necessity: Processing of Identity Data, Contact Data, Financial Data, and Transactional Data is necessary to perform the contract between you and mbo77 — specifically, to provide the betting and gaming services you have signed up for. Without this data, mbo77 cannot deliver its services.
• Legitimate Interests: Processing of Technical Data, Usage Data, and Communications Data for fraud prevention, platform security, and service improvement is carried out on the basis of mbo77's legitimate interests, provided those interests are not overridden by your rights and interests.
• Legal Obligation: Processing for KYC verification, anti-money-laundering checks, and financial record-keeping is carried out to comply with applicable regulatory requirements under mbo77's operating licence.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mbo77 shares Personal Data only with the following categories of recipient, and only to the extent strictly necessary for each specified purpose:

• Payment Processors: Indonesian bank transfer networks and e-wallet providers (including OVO, DANA, GoPay, ShopeePay, and LinkAja) receive Financial Data necessary to process your deposits and withdrawals. These providers act as independent data controllers for transactions processed through their own systems.
• KYC Verification Partners: mbo77 engages a licensed third-party identity verification service to process government-issued ID documents submitted during the KYC process. This provider acts as a data processor under a binding data processing agreement with mbo77.
• Game Studio Providers: Providers such as Evolution Gaming, Pragmatic Play, Microgaming, Spribe, Pocket Games Soft, and NetEnt receive a pseudonymous Member identifier (not your name or contact details) to facilitate game session management and return-to-player auditing. These providers do not receive your full Personal Data profile.
• Fraud & Security Services: Specialist fraud detection and cybersecurity providers may receive Technical Data (IP address, device fingerprint) to identify and block suspicious activity targeting the Platform or your account.
• Professional Advisers: Legal counsel, auditors, and accountants may access limited Personal Data under strict confidentiality obligations where necessary for the conduct of their professional services for mbo77.
• Regulatory and Law Enforcement Authorities: mbo77 may disclose Personal Data to competent authorities where required by applicable law, court order, or where mbo77 determines in good faith that disclosure is necessary to protect the rights, property, or safety of mbo77, its Members, or the public.

mbo77 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.

mbo77 implements a multi-layered security framework to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mbo77 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when accessing https://mbo77.pro.
• Password Hashing: Member passwords are never stored in plain text. mbo77 uses a strong cryptographic hashing algorithm with a unique per-account salt to store password credentials securely.
• Access Controls: Access to Member Personal Data within mbo77's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal access is logged and periodically audited.
• Two-Factor Authentication (2FA): mbo77 supports optional two-factor authentication for Member accounts, providing an additional layer of protection against unauthorised login attempts. Members are strongly encouraged to enable 2FA via their account security settings.
• Intrusion Detection: mbo77 employs automated intrusion detection and rate-limiting systems to identify and block brute-force login attempts, credential stuffing attacks, and other malicious access patterns targeting Member accounts.
• Regular Security Reviews: The mbo77 Platform undergoes periodic security assessments and penetration testing conducted by independent cybersecurity specialists to identify and remediate potential vulnerabilities before they can be exploited.

The mbo77 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure browsing experience. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and remember your cart or game session context. You cannot opt out of strictly necessary cookies without effectively disabling the Platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — such as which pages are visited most frequently, how long sessions last, and where users navigate after viewing a particular page. This data is used solely to improve Platform performance and user experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, currency display settings, and responsible gaming tool configurations, so you do not need to re-enter them on every visit.
• Security Cookies: These cookies support fraud detection, bot prevention, and session integrity functions. They help mbo77 distinguish legitimate Member activity from automated or malicious access attempts.

Cookies set by the mbo77 Platform are first-party cookies. mbo77 does not use third-party advertising cookies or cross-site tracking cookies that would share your browsing behaviour with external advertising networks.

You may control cookie preferences through your browser settings. Note that disabling certain categories of cookie may impair Platform functionality — in particular, disabling strictly necessary cookies will prevent you from maintaining a logged-in session.

As a Member of the mbo77 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:

• Right of Access: You have the right to request a copy of the Personal Data that mbo77 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any Personal Data held by mbo77 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic profile information directly via your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your Personal Data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to mbo77's regulatory retention obligations, which may require certain data to be retained for a defined period after account closure regardless of an erasure request.
• Right to Restrict Processing: You have the right to request that mbo77 restricts the processing of your Personal Data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of mbo77's legitimate interests, including processing for direct marketing purposes. Objections to direct marketing will be honoured immediately and unconditionally.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

mbo77 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case mbo77 will notify you of the extension and the reasons for it within the initial 30-day period.

The mbo77 Platform is intended exclusively for adults aged 21 years and older. mbo77 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Registration on the Platform by a person under 21 constitutes a breach of our Terms & Conditions and is strictly prohibited.

If mbo77 discovers or reasonably suspects that a Member is under 21 years of age, the Member's account will be immediately suspended, all pending transactions will be placed on hold, and the matter will be reviewed by our compliance team. Any winnings accrued during the period of underage use will be forfeited. Deposits may be returned at mbo77's sole discretion following identity verification of the account holder.

If you are a parent or guardian and you believe that a minor in your care has registered on the mbo77 Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all appropriate action.

mbo77 also recommends that parents and guardians make use of reputable parental control and internet filtering software to prevent minors from accessing online gambling content. Organisations such as Gambling Therapy offer free resources and guidance for families affected by gambling-related issues.

mbo77 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, Platform functionality, or our internal data processing practices. When a material change is made, mbo77 will update the "Last updated" date displayed at the top of this page and — where the change significantly affects how your Personal Data is processed — will notify you by email to the address registered on your account and/or by a prominent notice on the Platform upon your next login.

Your continued use of the mbo77 Platform after any revised Privacy Policy has been published constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you must discontinue use of the Platform and may request account closure in accordance with the procedures set out in our Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically — particularly following any notification of an update — to stay informed about how mbo77 is protecting your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mbo77 handles your Personal Data, please reach out through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the mbo77 Platform (WIB). Our Indonesian-speaking agents can assist with data rights requests and privacy queries.
• Email: [email protected] — please use the subject line "Privacy Enquiry" for data protection matters. We aim to respond within 24 hours and to resolve all privacy-related matters within 30 calendar days.
• Coverage: Our support team serves Members across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and all other regions of Indonesia.