mk789 Privacy Policy

mk789 (referred to in this policy as "we", "us", or "mk789") acts as the data controller in respect of the personal data described in this policy. As data controller, mk789 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Privacy Policy should be read alongside mk789's Terms & Conditions, which govern the contractual relationship between mk789 and its players. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy prevails.

By accessing the mk789 platform or registering a player account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the platform.

mk789 collects several categories of personal data depending on how you interact with our platform. The table below summarizes the main categories and specific data points we may hold about you:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond what is strictly required for identity verification (e.g., a photograph on a government-issued ID submitted during KYC).

mk789 collects personal data through the following means:

• Direct submission: Information you provide when you register an account, complete KYC verification, submit a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated technical collection: Data gathered automatically as you navigate the platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 9 (Cookies & Tracking) for full details.
• Payment processors and banking partners: Transaction confirmation data received from Indonesian banking institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you make a deposit or receive a withdrawal.
• Identity verification partners: Where mk789 uses a third-party KYC service provider to assist in verifying your identity documents, that provider may share the results of its verification check with us.
• Fraud prevention and AML screening services: Data received from industry-standard screening tools used to detect suspicious account activity, verify the legitimacy of payment sources, and comply with anti-money-laundering obligations.

mk789 processes your personal data only where we have a valid legal basis to do so. The applicable legal bases are as follows:

• Contract performance: Processing necessary to open and maintain your account, process deposits and withdrawals, resolve disputes, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) laws, Know Your Customer (KYC) requirements, fraud prevention obligations, and any lawful request from a competent authority.
• Legitimate interests: Processing carried out for mk789's legitimate business interests, such as improving platform security, preventing bonus abuse, analyzing gameplay patterns to enhance user experience, and conducting internal business analytics — provided such interests do not override your fundamental rights and freedoms.
• Consent: Where you have given us explicit, freely given consent — for example, when opting in to receive promotional emails, SMS messages, or push notifications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

mk789 uses the personal data it holds for the following specific purposes:

• Account management: Creating, maintaining, and securing your player account, including processing login requests, password resets, and account closure.
• Identity and age verification: Confirming that you are at least 21 years of age and a resident of Indonesia, in compliance with our eligibility requirements and applicable regulations.
• Payment processing: Facilitating IDR deposits from and withdrawals to your nominated Indonesian bank accounts and e-wallets, and maintaining accurate transaction records for accounting and audit purposes.
• Responsible gaming: Monitoring gaming behavior to identify patterns that may indicate problem gambling and, where appropriate, applying account-level responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, bonus abuse, money laundering, and other unlawful or prohibited activity.
• Customer support: Responding to your inquiries, resolving disputes, and providing assistance in both English and Indonesian.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may unsubscribe at any time via your account settings or by contacting support.
• Platform improvement: Analyzing aggregated and anonymized usage data to improve the mk789 platform, optimize game performance, and develop new features.
• Legal compliance: Retaining records and responding to lawful requests from regulatory and law enforcement authorities as required by applicable law.

mk789 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data required to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services that assist mk789 in confirming your identity and age. These providers act as data processors under contract and are prohibited from using your data for any purpose other than verification on our behalf.
• Game studio partners: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session data for the purpose of delivering their games via the mk789 platform. These studios do not receive your full personal profile.
• Fraud prevention and AML screening services: Industry-standard compliance platforms used to screen transactions and player profiles against financial crime risk databases.
• IT infrastructure and cloud service providers: Hosting, database, and content delivery providers that store or process platform data on mk789's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where mk789 is under a legal obligation to disclose data to a competent governmental, regulatory, or law enforcement body, we will comply with that obligation and, where permitted by law, inform you of such disclosure.
• Professional advisors: Lawyers, auditors, and accountants engaged by mk789 who require access to data in the course of providing professional services, bound by duties of confidentiality.

Any third party to whom mk789 discloses personal data is required to handle that data in accordance with applicable data protection standards and the terms of a binding data processing or data sharing agreement.

mk789 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in order to satisfy AML record-keeping obligations and potential legal claims.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or the date of account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required in connection with an ongoing dispute.
• Marketing preferences and opt-in records: Retained for the duration of your account's active status plus three (3) years, to provide evidence of consent in the event of a complaint.
• Technical and session logs: Retained for a rolling period of thirteen (13) months for security and fraud investigation purposes, after which they are anonymized or deleted.

Once a retention period expires and no overriding legal obligation requires continued retention, mk789 will securely delete or irreversibly anonymize the relevant data.

The key security measures applied by mk789 include:

• Transport encryption: All data transmitted between your device and the mk789 platform is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that your login credentials, personal information, and financial data cannot be intercepted in transit.
• Data-at-rest encryption: Sensitive data stored in mk789's databases — including identity documents, payment account details, and authentication credentials — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to player personal data within mk789's systems is restricted on a strict need-to-know basis. Internal staff access is controlled through role-based permissions, multi-factor authentication, and comprehensive audit logging.
• Vulnerability management: mk789 conducts regular security assessments, penetration testing, and code reviews. Critical vulnerabilities identified through these processes are remediated promptly.
• Incident response: mk789 maintains a documented data breach response plan. In the event of a security incident that poses a material risk to your rights or freedoms, mk789 will notify affected players without undue delay.
• Staff training: All personnel with access to player data are trained on data protection obligations and mk789's internal privacy and security policies.

While mk789 takes all reasonable precautions, no online platform can guarantee absolute security. You play an important role in protecting your own account by choosing a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party.

mk789 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyze site traffic, and, where you have consented, deliver relevant promotional content. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential to the functioning of the platform. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences such as preferred language, display settings, and last visited game category, so that you do not need to reconfigure these on each visit.
• Analytics cookies: Used to collect aggregated, anonymized data about how players navigate the platform — which pages are visited most, where players exit, and how long sessions last. This data helps us improve the mk789 experience. Analytics cookies are only placed where you have consented.
• Marketing cookies: Where you have opted in to receive personalized promotions, marketing cookies may be used to record which bonus offers you have viewed or claimed, so that we do not present you with the same offer repeatedly.

Most browsers allow you to manage cookie settings through their built-in preferences menu. Disabling strictly necessary cookies may impair your ability to use certain platform features, including maintaining a logged-in session. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions.

As a player whose personal data is processed by mk789, you hold the following rights in respect of your information. To exercise any of these rights, please contact our support team via live chat or email — see Section 14 for contact details.

mk789 will acknowledge all privacy rights requests within 5 business days and will aim to resolve them fully within 30 calendar days. Where a request is particularly complex, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

mk789 employs age verification checks at the point of account registration and during the KYC process to prevent minors from accessing its services. If mk789 discovers or has reasonable grounds to suspect that personal data has been collected from a person under the age of 21, it will promptly suspend the relevant account, delete the associated data, and refund any balance attributable to identifiable deposits made by that individual where practically possible.

Parents and guardians who believe that a minor in their care may have registered an account on mk789 are encouraged to contact our support team immediately. mk789 will investigate and act on all such reports as a priority.

mk789 operates its platform on infrastructure that may be located in jurisdictions outside Indonesia. Where your personal data is transferred to or processed in a country other than Indonesia, mk789 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that applied within Indonesia. These safeguards include:

• Contractual protections in the form of standard data transfer clauses incorporated into agreements with overseas processors and sub-processors.
• Selection of cloud and hosting partners who are certified under recognized international security standards (e.g., ISO 27001).
• Internal policies requiring that all overseas data processing is subject to the same access controls, retention schedules, and security measures that apply to data processed domestically.

For further information about the specific safeguards applied to any international transfer of your personal data, please contact us using the details in Section 14.

mk789 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Last updated" date at the top of this page will be revised each time a change is made.

Where a change is material — for example, where we introduce a new purpose for processing your data or share your data with a new category of recipient — mk789 will provide advance notice to active players via a notification within the platform or by email to the address registered on your account, no fewer than 7 days before the revised policy takes effect.

Your continued use of the mk789 platform after the effective date of any revision constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you should cease using the platform and contact support to request account closure before the effective date of the revision.

We encourage you to review this Privacy Policy periodically. Archived versions of previous Privacy Policies are available on request from our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how mk789 handles your personal data, please get in touch through one of the following channels:

mk789 is committed to handling all privacy inquiries with care, professionalism, and transparency. If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.