mbo77 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over your own information.
In this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, national identity number, contact details, payment information, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion. |
| "Data Controller" | mbo77, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | Any third party engaged by mbo77 to process Personal Data on its behalf, under a binding data processing agreement. |
| "Platform" | The mbo77 online betting and gaming platform accessible at mbo77.cam and all associated services. |
| "Player" / "You" | Any natural person who has registered a Player Account or is accessing the Platform. |
| "Consent" | Any freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification procedures conducted to comply with anti-money laundering obligations. |
2.1 This Privacy Policy is issued by mbo77 and applies to all Personal Data collected through the Platform, including data collected during the account registration process, during active gameplay, through customer support interactions, and through the use of our payment processing services.
2.2 mbo77 is the Data Controller for all Personal Data collected through the Platform. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently in accordance with applicable data protection legislation.
2.3 This policy should be read together with our Terms & Conditions and Responsible Gaming Policy. Where any conflict exists between this policy and another document, this Privacy Policy governs with respect to data protection matters.
2.4 mbo77 serves players across Indonesia, including those in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang. We apply consistent data protection standards to all players regardless of location within Indonesia.
3.1 mbo77 collects the following categories of Personal Data, grouped by the context in which they are gathered:
Registration Data
Identity Verification (KYC) Data
Financial Data
Gameplay & Betting Data
Technical & Device Data
Communication Data
3.2 mbo77 does not collect any special categories of sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) beyond what is strictly required for KYC verification and responsible gaming compliance.
4.1 mbo77 collects Personal Data through the following channels and mechanisms:
4.2 mbo77 does not purchase Personal Data from data brokers or marketing list providers. All Personal Data held by mbo77 is either provided directly by the Player or collected automatically through legitimate Platform operation.
5.1 mbo77 processes your Personal Data only where a valid legal basis exists. The applicable legal bases and the processing activities they support are set out below:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account registration, processing deposits and withdrawals, operating your Player Account, resolving disputes, and providing customer support. |
| Legal Obligation | KYC identity verification, anti-money laundering (AML) compliance, fraud prevention, responsible gaming compliance, and responding to lawful regulatory inquiries. |
| Legitimate Interests | Platform security, fraud detection, abuse prevention, internal analytics to improve service quality, and maintaining accurate business records. |
| Consent | Sending promotional emails, SMS marketing, and push notifications about offers, bonuses, and new Platform features — where you have explicitly opted in. |
5.2 Where processing is based on your Consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can manage marketing preferences in your account settings or by contacting [email protected].
6.1 mbo77 uses Personal Data collected from Players for the following purposes:
6.2 mbo77 does not use Personal Data for automated profiling that produces legal or similarly significant effects on Players, except where such profiling is a required component of our AML or fraud prevention obligations and is subject to appropriate human oversight.
7.1 mbo77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Data is shared only in the following limited circumstances:
Data Processors — Third-party service providers engaged by mbo77 under binding data processing agreements to perform specific operational functions, including:
Regulatory & Legal Disclosure — mbo77 will disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a regulatory direction from our Governing Authority. mbo77 will notify the affected Player of any such disclosure where legally permitted to do so.
Business Transfers — In the event of a merger, acquisition, or sale of all or a material portion of mbo77's assets, Player Personal Data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to data processing practices that results from it.
7.2 All Data Processors engaged by mbo77 are contractually required to process Personal Data only on documented instructions from mbo77, to maintain appropriate security measures, and to delete or return data upon termination of the engagement.
8.1 mbo77 operates as an internationally licensed platform. Some of the Data Processors engaged by mbo77 may process Personal Data in jurisdictions outside Indonesia. Where such transfers occur, mbo77 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that applied within Indonesia.
8.2 These safeguards include, but are not limited to: standard contractual clauses approved by relevant data protection authorities, binding corporate rules where applicable, and engagement of processors located in jurisdictions recognized as providing an adequate level of data protection.
8.3 Players who wish to obtain further information about the specific safeguards applied to international data transfers involving their Personal Data may contact us at [email protected].
9.1 mbo77 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of the Player Account plus 5 years after account closure, to meet AML record-keeping requirements. |
| KYC documents | 5 years from the date of verification, or 5 years from account closure, whichever is later. |
| Transaction records | 7 years from the date of the transaction, in compliance with financial record-keeping obligations. |
| Customer support records | 3 years from the date of last interaction, or until resolution of any open dispute. |
| Marketing consent records | Until consent is withdrawn plus 1 year, to demonstrate compliance with consent obligations. |
| Technical / device log data | 13 months from the date of collection, unless required for an active security investigation. |
9.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.
10.1 mbo77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how Players interact with our services.
10.2 The following categories of cookies are used on the Platform:
10.3 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from using core Platform features, including logging in to your account.
10.4 mbo77 does not use cross-site tracking technologies to follow your browsing activity on third-party websites or services.
11.1 Subject to applicable law and the limitations set out below, you hold the following rights over your Personal Data held by mbo77:
11.2 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". mbo77 will respond within 30 days of receipt. In complex cases, this period may be extended by a further 60 days with prior notice.
11.3 Certain rights, in particular the right of erasure, may be limited where mbo77 is required to retain data by applicable law — for example, AML transaction records that must be retained for five to seven years. mbo77 will always explain the specific legal basis for any limitation applied to your request.
12.1 mbo77 maintains a comprehensive information security program designed to protect Player Personal Data from unauthorized access, disclosure, alteration, and destruction. Key measures in place include:
12.2 In the event of a Personal Data breach that poses a risk to Player rights, mbo77 will notify affected Players without undue delay and, where required, report the breach to the relevant supervisory authority within 72 hours of becoming aware of it.
12.3 While mbo77 implements industry-leading security measures, no system is entirely immune to risk. Players are responsible for maintaining the security of their own login credentials and for notifying mbo77 immediately upon suspecting unauthorized account access.
13.1 The mbo77 Platform is strictly for adults aged 21 years or older. mbo77 does not knowingly collect Personal Data from any person under the age of 21, and registration by minors is expressly prohibited under our Terms & Conditions.
13.2 If mbo77 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant Player Account will be closed immediately, all bets will be voided, all deposits will be returned to the originating payment method, and the collected Personal Data will be securely deleted.
13.3 If you have reason to believe that a minor has registered or is using an mbo77 Player Account, please contact us immediately at [email protected].
14.1 The Platform may contain references to or integrations with third-party service providers, including payment processors, game studios, and customer support tools. These third parties operate under their own privacy policies and data protection practices, which are independent of this Privacy Policy.
14.2 mbo77 takes care to engage only reputable third-party Data Processors and requires all processors to maintain data protection standards consistent with this policy. However, mbo77 is not responsible for the independent data practices of third parties beyond their role as Data Processors under a binding data processing agreement with mbo77.
14.3 Payment processing integrations with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) involve the sharing of transaction data necessary to complete deposit and withdrawal requests. These providers are engaged as Data Processors and are bound by appropriate data sharing agreements.
15.1 mbo77 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or regulatory guidance. The current version and effective date are displayed at the top of this document.
15.2 Material changes to this Privacy Policy — defined as any change that materially affects the way Player Personal Data is collected, used, or shared — will be communicated to registered Players via email at least 14 days before the change takes effect.
15.3 Non-material updates (such as clarifications, typographical corrections, or updates to reflect new payment method integrations) may take effect upon publication. Continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes.
15.4 Players are encouraged to review this Privacy Policy periodically. Archived versions of previous editions are available upon request by contacting customer support.
16.1 If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the mbo77 Data Protection team using the following channels:
16.2 mbo77 aims to respond to all privacy inquiries within 5 business days and to all formal Data Rights Requests within 30 calendar days of receipt.
16.3 If you are not satisfied with mbo77's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or dispute resolution body designated by our Governing Authority. mbo77's customer support team will provide details of the applicable escalation route upon request.
16.4 All privacy communications are handled in English. Indonesian-speaking support agents are available via live chat for Players who prefer to communicate in their native language during the initial inquiry stage, and English-language written responses will follow for all formal requests.
Data Protection Commitments
Security and transparency are built into every layer of how we handle your data — not added as an afterthought.
Every connection between your device and the mbo77 Platform is secured with 256-bit TLS/SSL encryption — the same standard trusted by major international financial institutions. Your personal and financial data travels exclusively over encrypted channels.
mbo77 collects only the Personal Data that is genuinely necessary for account operation, KYC compliance, and payment processing. We do not purchase data from third-party brokers or compile marketing profiles beyond what you explicitly consent to.
Your Personal Data is never sold, rented, or traded to third parties for their own marketing or commercial purposes. Data is shared only with processors who need it to deliver our services, and always under binding contractual safeguards.
You hold eight distinct rights over your Personal Data — including access, rectification, erasure, portability, and the right to object. All requests are handled within 30 days. Submit your request to [email protected] with "Data Rights Request" in the subject line.
We publish explicit retention periods for every category of data we hold. When those periods expire, data is securely deleted or anonymized. We do not hold onto your information indefinitely — only for as long as the law and our operational obligations require.
mbo77 commissions independent penetration tests and security audits on a regular basis. Our infrastructure is subject to continuous automated monitoring for anomalous activity, and our internal staff operate under strict role-based access controls and MFA requirements.
Related Policies
Our FAQ covers the most common questions about account security, KYC verification, and data handling. For the full legal framework governing your account, review our Terms & Conditions alongside this policy.
For data inquiries, contact us at [email protected] — response within 5 business days.