mg055 Privacy Policy

mg055 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the mg055 platform at https://mg055.app ("the Site"). This Privacy Policy describes in full detail what personal information mg055 collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures in place to protect it, and the rights available to you as a data subject.

This Policy applies to all players who register an Account on mg055, including players accessing the Platform from Indonesia and other jurisdictions where the Services are available. It applies to all personal data collected through the Site, via email correspondence with our support team, through live chat sessions, and through any other channel by which you communicate with mg055.

By registering an Account on mg055 or by continuing to use the Site after this Policy has been published or updated, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Site and may request Account closure by contacting [email protected].

This Privacy Policy should be read alongside the mg055 Terms & Conditions, which govern the overall relationship between mg055 and its players. Defined terms used in this Policy carry the same meanings as in the Terms & Conditions unless otherwise stated.

mg055 collects personal data from you directly when you interact with the Platform, and in some cases automatically through your use of the Site. The categories of data we collect are set out in the table below:

mg055 does not intentionally collect special categories of sensitive personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily disclose such information in a support communication. Where such data is received incidentally, it will not be used for profiling or decision-making and will be deleted at the earliest opportunity.

mg055 processes your personal data for the following purposes. Each purpose is matched to its legal basis in Section 4 of this Policy:

• Account Management: Creating, maintaining, and administering your mg055 Account, including processing registrations, verifying identity, handling login authentication, and applying Account restrictions where required.
• Service Delivery: Making the full suite of mg055 Services available to you — including casino games supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, as well as the sportsbook covering BRI Liga 1, EPL, Champions League, and other leagues.
• Payment Processing: Facilitating deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining transaction records.
• KYC & AML Compliance: Verifying your identity, age (21+ requirement), and the legitimacy of funds deposited, in accordance with internationally recognised anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, unauthorised account access, cheating, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling; applying self-exclusion, deposit limit, and cool-off restrictions set by you; proactively intervening where warranted by our responsible gaming obligations.
• Customer Support: Responding to your enquiries, complaints, and requests; maintaining records of support interactions for quality assurance and dispute resolution.
• Marketing & Promotions: Where you have provided consent, sending you promotional communications about mg055 bonuses, tournaments, seasonal offers (e.g., Idul Fitri promotions, Ramadhan special events), and new game launches. You may withdraw consent at any time.
• Platform Improvement: Analysing usage data in aggregated, anonymised form to improve game selection, user interface design, payment flows, and overall platform performance.
• Legal Compliance & Enforcement: Complying with applicable laws, regulatory requirements, court orders, or lawful requests from competent authorities; enforcing our Terms & Conditions and other platform policies.

mg055 processes personal data only where a valid legal basis exists. The applicable bases for each processing activity are:

Where mg055 relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your fundamental rights and freedoms, taking into account the limited intrusiveness of the processing and the reasonable expectations you would have as a player on an internationally licensed gambling platform.

mg055 may share your personal data with the following categories of third parties:

• Payment Processors & Banking Partners: Indonesian banking institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data required to process your deposit or withdrawal. They operate under their own privacy policies and applicable Indonesian financial regulations.
• Game Suppliers: Third-party certified game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive session tokens and anonymised player identifiers sufficient to deliver their games within the mg055 platform. These suppliers do not receive your full identity data.
• KYC & Identity Verification Providers: Specialist third-party KYC service providers may process your identity documents and biometric comparisons on mg055's behalf, acting under strict data processing agreements and confidentiality obligations.
• Fraud Detection & Security Vendors: Technology providers that supply fraud detection, device fingerprinting, and cybersecurity monitoring tools may receive technical and usage data to help protect the Platform and its players.
• Legal & Regulatory Authorities: mg055 may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other competent authorities where required by applicable law, a court order, or a lawful regulatory request. mg055 will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations may access personal data strictly in the context of providing professional services to mg055.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of mg055's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the identity of the new data controller in advance.

All third parties with whom mg055 shares personal data are required — through contractual data processing agreements — to process such data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection law.

mg055 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:

• Account & Identity Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following permanent Account closure, to satisfy AML record-keeping requirements and to handle any post-closure disputes or regulatory enquiries.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard AML obligations and financial audit requirements.
• KYC Documents: Retained for the duration of Account activity and for five (5) years post-closure, or such longer period as required by the applicable regulatory framework of mg055's licensing jurisdiction.
• Support & Communications Data: Retained for three (3) years from the date of the last communication, to support dispute resolution and service improvement.
• Technical & Usage Logs: Server logs and session data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are deleted or anonymised.
• Marketing Preferences & Consent Records: Retained for as long as the Account is active and for three (3) years thereafter, to demonstrate that lawful consent was obtained.

When personal data is no longer required, mg055 securely deletes or irreversibly anonymises it in accordance with industry-standard data destruction procedures. Anonymised, aggregated data (which can no longer be linked to any individual) may be retained indefinitely for statistical and analytical purposes.

mg055 employs the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between player devices and the mg055 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields stored in mg055 databases — including payment account numbers, government ID numbers, and KYC document files — are encrypted at rest using AES-256.
• Password Security: Player passwords are never stored in plaintext. They are hashed using a modern key-derivation function (bcrypt or Argon2) with per-account salts, making them computationally infeasible to reverse.
• Access Controls: Access to systems that hold personal data is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls (RBAC) are enforced, and all administrative access is logged and auditable.
• Multi-Factor Authentication (MFA): MFA is mandatory for all mg055 staff accessing internal systems that contain player data. Players are strongly encouraged to enable MFA on their own Accounts.
• Vulnerability Management: mg055 conducts regular vulnerability scans and penetration testing of its infrastructure. Critical findings are remediated on a priority basis.
• Incident Response: mg055 maintains a documented data breach response plan. In the event of a breach that poses a high risk to your rights and freedoms, mg055 will notify affected players without undue delay and report to the relevant supervisory authority where required by applicable law.

While mg055 applies robust security controls, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials. If you suspect that your Account has been compromised, contact [email protected] immediately.

mg055 uses cookies and similar tracking technologies (collectively "cookies") to operate the Site effectively, maintain your session, and collect analytical data. The following cookie categories are in use on the mg055 platform:

mg055 does not use third-party advertising cookies or retargeting pixels that track you across other websites. If this position changes, this Policy will be updated accordingly and you will be notified.

You may manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using the Site. Browser-level cookie management guides are available from the documentation provided by your browser vendor.

Subject to applicable law and certain limitations (e.g., where data must be retained for legal compliance), you have the following rights in relation to your personal data held by mg055:

• Right of Access: You may request a copy of the personal data mg055 holds about you, along with information about the purposes of processing, the categories of data held, and the recipients with whom it has been shared.
• Right to Rectification: You may request that mg055 correct any inaccurate personal data or complete any incomplete data held about you. For minor corrections (e.g., phone number updates), you may update data directly in your Account profile.
• Right to Erasure ("Right to Be Forgotten"): You may request that mg055 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing was unlawful. This right is subject to mg055's legal retention obligations, particularly the five-year AML retention requirement, which takes precedence.
• Right to Restrict Processing: You may request that mg055 limit the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while a legitimate interests assessment is pending.
• Right to Data Portability: Where processing is based on your consent or on contract, and is carried out by automated means, you may request that mg055 provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing based on legitimate interests, including profiling. You also have the unconditional right to object to the use of your data for direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your Account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, submit a Data Subject Request (DSR) to [email protected] with the subject line "Data Subject Request — [Your Username]". mg055 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where the complexity or volume of requests justifies an extension, mg055 may extend this period by a further 30 days, notifying you of the extension and the reason.

mg055 will not charge a fee for reasonable DSR requests. mg055 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive.

mg055 operates as an internationally licensed platform. In order to deliver the Services — including hosting, KYC processing, game delivery, and fraud detection — your personal data may be transferred to and processed in countries outside of Indonesia. These may include countries where data protection laws differ from those in Indonesia.

Where such transfers occur, mg055 takes appropriate steps to ensure that your personal data receives a level of protection consistent with the standards described in this Policy. These steps include:

• Executing data processing agreements with all third-party processors that include binding data protection obligations and security requirements.
• Engaging only with processors located in jurisdictions that maintain internationally recognised data protection frameworks, or requiring contractual safeguards equivalent to standard contractual clauses.
• Maintaining records of all cross-border data transfers for audit and accountability purposes.

By using the mg055 platform and providing your personal data, you acknowledge and consent to such international transfers being made in accordance with the safeguards described in this section.

mg055 employs age verification checks at registration and during KYC review to prevent access by underage individuals. If mg055 discovers that personal data has been collected from a person under 21 years of age, it will delete that data immediately and close the associated Account without releasing any balance pending investigation.

If you are a parent or guardian and believe that a minor in your care has created an Account on mg055 or provided personal data to the Platform, please contact [email protected] immediately so that the Account can be closed and data deleted without delay.

mg055 reserves the right to update or amend this Privacy Policy at any time to reflect changes in the law, changes in our data practices, or changes to the Services we offer. The "Last Updated" date at the top of this page will be revised with each change.

Where changes are material — for example, a change to the categories of data collected, a new sharing arrangement with a third party, or a new processing purpose — mg055 will notify active players via a notification displayed upon login, or by email to the registered Account address, before the changes take effect. For minor, clarificatory, or legally required amendments, notification will be provided by updating this page.

Your continued use of the mg055 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Services and may request Account closure by contacting support.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which mg055 processes your personal data, or if you wish to exercise any of the rights described in Section 9, please contact the mg055 Data Protection team using the details below. All privacy-related communications are handled by a dedicated team responsible for data governance and player privacy.

mg055 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint or DSR, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your situation.