This Privacy Policy describes how mbak4 collects, uses, stores, and protects your personal data. We are committed to transparency and to respecting your privacy rights under applicable data protection laws.
Six foundational commitments that guide how mbak4 handles your personal information. These principles apply to every data processing activity we conduct.
We collect only the personal data necessary to operate your Account, comply with KYC obligations, and deliver the services you requested. We do not collect extraneous information simply because we can.
All personal data stored in mbak4's systems is encrypted at rest using AES-256 encryption. Data in transit between your device and our servers is protected by TLS 1.3 encryption protocols.
mbak4 does not sell, rent, lease, or trade your personal data to third parties for marketing purposes. Your data is never a revenue stream for us — your subscription to our gaming services is.
Data collected for one purpose — such as KYC verification — is not repurposed for unrelated activities without your explicit consent. Purpose creep is prohibited under our internal data governance policies.
You have the right to access, correct, export, or delete your personal data at any time by contacting our data protection team. Response times are documented below in Section 10.
Personal data is retained only as long as necessary for legal, regulatory, and operational purposes. Closed accounts are anonymized or deleted in accordance with the schedule detailed in Section 8 below.
This Privacy Policy ("Policy") explains how mbak4 ("we", "us", "our", "Platform") collects, uses, stores, discloses, and protects personal data obtained from users ("you", "User", "Player") of the mbak4 website and associated services. By registering an Account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.
mbak4 operates as an internationally licensed online betting and gaming platform serving Indonesian players. While we are headquartered outside Indonesia, we apply data protection standards aligned with the General Data Protection Regulation (GDPR) framework as a matter of best practice, even where not strictly required by the jurisdiction in which we are licensed.
This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and mbak4. In the event of any conflict between this Policy and the Terms, the Terms shall prevail on matters of contractual obligation; this Policy shall prevail on matters of data protection.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
mbak4 is the Data Controller responsible for the Personal Data you provide when using the Platform. This means that mbak4 determines why and how your Personal Data is processed. For data protection inquiries, complaints, or to exercise your rights under this Policy, please contact our data protection officer at the address provided in Section 13.
mbak4 is registered and licensed as an international online gaming operator. While the Platform is optimized to serve Indonesian players — including local payment methods such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay, and Indonesian-speaking customer support — mbak4's data processing operations are governed by the laws of the jurisdiction in which we hold our primary gaming license, supplemented by GDPR-aligned data protection principles.
mbak4 collects Personal Data directly from you during Account registration, KYC verification, and ongoing use of the Platform. We also collect data automatically through cookies and similar tracking technologies. The categories of Personal Data collected include:
Registration and Account Data:
KYC Verification Data:
Financial Transaction Data:
Usage and Technical Data:
mbak4 does not collect Sensitive Personal Data as defined in Section 1. If you voluntarily disclose health-related information when contacting our Responsible Gaming team, such information is handled with heightened confidentiality and used solely to provide the support you requested.
mbak4 processes your Personal Data for the following purposes, each of which is tied to a specific legal basis described in Section 5:
mbak4 processes your Personal Data under one or more of the following legal bases, consistent with GDPR-aligned data protection principles:
Where mbak4 relies on legitimate interests as a legal basis, a Legitimate Interests Assessment (LIA) has been conducted internally to confirm that our interests do not override your data protection rights. You may request a summary of any relevant LIA by contacting our data protection officer.
mbak4 does not sell, rent, or trade your Personal Data to any third party. We may, however, share your data with carefully selected third-party service providers and with regulatory authorities under the circumstances described below.
Third-Party Service Providers (Data Processors):
Regulatory and Law Enforcement Disclosure:
mbak4 may disclose Personal Data to licensing authorities, financial intelligence units, law enforcement agencies, or courts where we are required to do so by applicable law, regulatory requirement, or court order. We will notify affected Users of such disclosures wherever legally permitted to do so.
All third-party Data Processors engaged by mbak4 are subject to written data processing agreements that restrict their use of your data to the specific purpose for which it was shared. mbak4 conducts periodic due diligence reviews of its Data Processors to confirm continued compliance.
mbak4 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to:
Despite these measures, no method of electronic transmission or storage is completely secure. While mbak4 takes every reasonable precaution to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorized access to your Account.
mbak4 retains Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with applicable legal, regulatory, accounting, or reporting requirements. The following retention schedule applies:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual. Where immediate deletion is technically impractical (for example, data held in secure backup systems), the data is isolated from active processing and overwritten at the next scheduled backup cycle.
mbak4 uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage objects — to operate the Platform effectively, remember your preferences, and analyze usage patterns. The categories of cookies we use are as follows:
You may control your cookie preferences through your browser settings. Most modern browsers allow you to refuse all non-essential cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling functional cookies may affect your Platform experience — for example, your language or payment preferences may not be retained between sessions.
mbak4 does not use cross-site tracking cookies or fingerprinting technologies to follow your activity outside of the mbak4 Platform. Our analytics are conducted within a closed, first-party context.
Subject to the legal basis on which your data is processed and any applicable legal exemptions, you hold the following rights with respect to your Personal Data held by mbak4:
To exercise any of the above rights, submit a written request to our data protection officer at the contact details provided in Section 13. mbak4 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.
mbak4 will not charge a fee for processing reasonable data rights requests. If requests are manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or refuse the request, with written explanation provided.
The mbak4 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. Age verification is a mandatory step in the Account registration process, and KYC procedures are designed to identify and reject underage applicants.
If mbak4 becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor may have registered on the Platform, please notify us immediately at the contact address in Section 13.
Parents and guardians are encouraged to use parental control tools and internet filtering software to prevent underage individuals from accessing online gambling platforms. mbak4 supports the use of such tools and cooperates with recognized parental control service providers.
mbak4 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or business operations. When material changes are made to this Policy, we will notify registered Users by email to the address on file and by displaying a prominent notice on the Platform for a minimum of 14 days before the changes take effect.
The "Last Updated" date displayed at the top of this Policy will be revised each time a new version is published. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised document. If you do not agree with the changes, you must stop using the Platform and may request Account closure in accordance with the procedures set out in our Terms & Conditions.
We recommend that you review this Privacy Policy periodically to stay informed about how mbak4 protects your Personal Data. Archived versions of previous policies are available upon request to our data protection officer.
For all data protection inquiries, Subject Access Requests, or complaints regarding mbak4's handling of your Personal Data, please contact our data protection officer through the following channel:
mbak4 treats all data protection correspondence with strict confidentiality. Your request will be handled by a qualified member of our compliance team and will not be accessible to general customer support staff unless necessary to resolve your inquiry.
If you are dissatisfied with mbak4's response to a data protection complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction governing your relationship with mbak4. Details of the appropriate supervisory authority will be provided upon request.
This Privacy Policy was last reviewed and updated on 1 January 2026. mbak4 reserves all rights not expressly granted herein.
Review our Terms & Conditions for the complete contractual framework, visit our FAQ for plain-language answers, or explore our Responsible Gaming commitments.
Terms & Conditions Read the FAQ Responsible Gaming