Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "Platform" means the mlbb8 website at https://mlbb8.cam and all associated services, products, and features accessible through it.
• "mlbb8", "we", "us", or "our" refers to the operator of the Platform and the Data Controller for the purposes of this Policy.
• "User", "you", or "your" means any natural person who accesses the Platform, registers an account, or otherwise interacts with mlbb8's services.
• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or in combination with other available data — including name, date of birth, email address, Indonesian national identity number, IP address, and financial transaction records.
• "Processing" means any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" means Know Your Customer — the mandatory identity and age verification process required before withdrawal of funds from your mlbb8 Account.
• "Cookies" means small data files placed on your device by the Platform for the purposes described in Section 8.
• "Third-Party Service Providers" means organizations engaged by mlbb8 to assist in delivering platform services, including payment processors, identity verification providers, and cloud infrastructure operators, all of whom are contractually bound to handle Personal Data per this Policy.

2 Data Controller Identity

mlbb8 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, mlbb8 determines the purposes and means of processing Personal Data and is responsible for ensuring that processing is conducted in accordance with applicable data protection standards and the terms of this Policy.

For any data protection enquiries, requests to exercise your rights, or concerns regarding this Policy, please contact mlbb8's Data Protection contact via the details provided in Section 15.

3 Personal Data We Collect

mlbb8 collects the following categories of Personal Data, depending on your level of engagement with the Platform:

4 How We Collect Your Data

mlbb8 collects Personal Data through the following channels:

• Direct collection: Information you provide directly when completing the account registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting customer support.
• Automated collection: Technical and usage data collected automatically as you use the Platform, via server logs, session tracking, and cookies as described in Section 8.
• Third-party sources: Identity verification data returned by KYC processing partners when verifying the authenticity of documents you have submitted; fraud-risk signals from payment processors; and publicly available sanction and watchlist databases checked as part of our AML obligations.

5 Purposes & Legal Basis for Processing

mlbb8 processes your Personal Data only for specific, legitimate purposes and only where a valid legal basis exists for doing so. The following table sets out the primary processing activities, their purpose, and the legal basis relied upon:

6 Data Sharing & Disclosure

mlbb8 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. Personal Data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment Processors: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, GoPay, DANA, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals. These entities are independent controllers of their own data and subject to their own privacy terms.
• KYC and Identity Verification Partners: Specialist third-party providers that process identity documents on our behalf to verify your identity and age. These providers act as Data Processors under a formal data processing agreement with mlbb8.
• Cloud Infrastructure and Hosting Providers: Providers that host Platform servers and databases. These providers store data on mlbb8's behalf without access to read its contents, under strict contractual and technical safeguards.
• Fraud Detection and AML Services: Third-party services that screen transactions and user behaviour against known fraud patterns and sanctions watchlists as required by our AML compliance obligations.
• Competent Authorities: mlbb8 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, lawful court order, or regulatory direction — and only to the extent strictly required.

7 International Data Transfers

mlbb8 operates infrastructure that may involve the transfer of Personal Data to servers or service providers located outside of Indonesia. Where such transfers occur, mlbb8 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that provided under this Policy, including:

• Transfers to jurisdictions recognized as providing an adequate level of data protection;
• Contractual clauses incorporating data protection obligations equivalent to those in this Policy;
• Binding internal data transfer and security standards applied across all mlbb8 infrastructure providers.

By registering an Account and using the Platform, you acknowledge that your Personal Data may be transferred internationally for the processing purposes described in this Policy. mlbb8 will not transfer your data to any jurisdiction or recipient where it cannot ensure adequate protection.

8 Cookies & Tracking Technologies

mlbb8 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Essential for the Platform to function — including maintaining your login session, remembering your language preference, and enabling secure payment processing. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymized data on how Users interact with the Platform — including pages visited, session durations, and error events — to help mlbb8 identify and fix performance issues. These do not identify individual users.
• Functionality Cookies: Remember your preferences and settings (such as your preferred deposit method or notification settings) to improve your experience across sessions.
• Security Cookies: Assist in detecting fraudulent login attempts and unauthorized account access by tracking session consistency signals.

mlbb8 does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair the functionality of the Platform. A cookie consent mechanism is presented on your first visit to the Platform.

9 Data Retention

mlbb8 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, as set out in this Policy, and to comply with applicable legal obligations. The following retention periods apply as a general guide:

• Account and KYC Records: Retained for five (5) years following the permanent closure of your Account, in line with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for five (5) years post-transaction for AML and financial audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, unless a dispute is ongoing.
• Marketing Preference Records: Opt-in consent records are retained for the duration of your Account plus one (1) year. Opt-out records are retained indefinitely to ensure we do not re-contact you without fresh consent.
• Technical and Usage Logs: Retained for twelve (12) months in anonymized or aggregated form for platform analytics and security monitoring.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be linked to any individual.

10 Data Security Measures

mlbb8 implements a layered set of technical and organizational security measures to protect Personal Data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between user devices and Platform servers.
• Encryption at rest for sensitive data categories including KYC documents and financial account details stored in our databases.
• Role-based access controls ensuring that only authorized mlbb8 personnel with a legitimate operational need can access Personal Data, and only to the minimum extent required for their function.
• Regular penetration testing and security audits conducted by qualified independent security professionals.
• Incident response procedures including a defined data breach notification process. In the event of a breach that poses a risk to User rights and freedoms, mlbb8 will notify affected Users and the relevant supervisory authority within 72 hours of becoming aware of the breach.

11 Your Data Rights

Depending on your location and applicable data protection law, you may have some or all of the following rights in relation to your Personal Data held by mlbb8. All rights may be exercised by contacting us as described in Section 15.

mlbb8 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with notice to you. We do not charge a fee for standard requests. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative charge.

12 Children & Minors

The mlbb8 Platform is strictly prohibited to persons under 21 years of age. We do not knowingly collect Personal Data from anyone under the age of 21. Age is verified during the mandatory KYC process for all registered Accounts.

If mlbb8 discovers that Personal Data has been collected from a person under the age of 21 — whether through fraudulent misrepresentation during registration or otherwise — the Account will be immediately suspended, all associated funds will be frozen pending investigation, and the Personal Data will be deleted from our systems as soon as practicable and in compliance with any applicable legal investigation obligations.

Parents and guardians are encouraged to use device-level parental control software to restrict access to online gambling platforms by persons under 21 in their household.

13 Third-Party Links

The mlbb8 Platform does not contain links to external third-party websites other than those strictly necessary for payment processing (e.g., your bank or e-wallet provider's authentication portal). mlbb8 is not responsible for the privacy practices, data security standards, or content of any third-party website or service you access in connection with using our Platform.

When you are redirected to your bank or e-wallet provider for payment authentication, you are subject to that provider's own privacy policy. We encourage you to review the privacy policies of any payment provider you use in connection with your mlbb8 Account.

14 Amendments to This Policy

mlbb8 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or Platform features. When material changes are made, we will:

• Update the "Effective Date" at the top of this Policy;
• Post a notice on the Platform homepage for a minimum of 14 days; and
• Where practicable, send a notification to the email address associated with your registered Account.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with any revised version of this Policy, you must cease using the Platform and may request Account closure by contacting our support team.

15 Contact & Data Rights Requests

For any questions about this Privacy Policy, to exercise any of your data rights, or to submit a complaint regarding mlbb8's data handling practices, please contact us through the following channels:

All data rights requests submitted to mlbb8 are processed within 30 calendar days of receipt. You will receive an acknowledgment within 5 business days confirming receipt of your request.

This Privacy Policy was last updated and became effective on 1 January 2026. Version 1.0. mlbb8 — Trusted and Secure Platform.