At mbo99, protecting the personal data of our members is a core operational commitment — not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and secure it, and the rights you hold as a data subject. We encourage you to read it in full.
These six principles summarise how mbo99 approaches data privacy. The complete legal text follows in the policy sections below.
mbo99 collects personal data strictly for the purposes of account registration, identity verification, payment processing, fraud prevention, regulatory compliance, and service improvement. We do not collect data we have no use for, and we do not sell your personal information to third-party advertisers.
All data exchanged between your device and the mbo99 Platform is protected by 128-bit SSL/TLS encryption. Payment data handled by our Indonesian banking partners — BCA, BRI, BNI, Mandiri, and the major e-wallets — is processed over their own independently secured payment channels and never stored in plain text on mbo99 servers.
Identity documents submitted during KYC verification — including your Indonesian National Identity Card (KTP) or passport — are retained only for the duration required by applicable international anti-money-laundering (AML) standards. Access is restricted to trained compliance personnel and is never shared externally without legal obligation.
mbo99 does not sell, rent, or trade member personal data to third-party marketers or data brokers. Data is shared with third parties only where strictly necessary for platform operations — such as with payment processors, game studios, fraud detection providers, and regulatory bodies — and only under appropriate data processing agreements.
Where mbo99 sends you promotional communications — including bonus offers, event promotions tied to BRI Liga 1 matches or Indonesian national holidays — you may opt out at any time via Account Settings or by contacting our 24/7 support team. Opting out of marketing communications does not affect transactional messages (e.g., deposit confirmations, withdrawal receipts, security alerts).
As an mbo99 member, you hold substantive rights over your personal data: the right to access it, correct inaccuracies, request deletion (subject to legal retention obligations), restrict processing, and object to specific uses. Requests are handled by our data protection team within 30 days of receipt.
Please note: By registering an account with mbo99 or continuing to use the Platform after any update to this Privacy Policy, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please do not use the mbo99 Platform.
In this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, including name, national identity number, contact details, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, storage, retrieval, use, disclosure, transfer, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. mbo99 acts as Data Controller in respect of member data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of and under the instructions of the Data Controller (e.g., payment gateway providers, cloud hosting providers). |
| "KYC Documents" | Identity verification documents submitted by a member in connection with the Know Your Customer (KYC) process, including government-issued photo identification and proof of address. |
| "Platform" | The mbo99 website at mbo99.one and all associated services, including the sportsbook, live casino, slot games, account management system, and customer support channels. |
| "Member" | Any individual who has registered a verified account on the mbo99 Platform. |
mbo99, the operator of the Platform accessible at mbo99.one, acts as the Data Controller for all Personal Data collected from members and visitors. As Data Controller, mbo99 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in accordance with internationally recognised data protection principles.
Where mbo99 engages third-party service providers to process data on its behalf, those providers act as Data Processors under written agreements that bind them to process data only on mbo99's documented instructions and to maintain appropriate technical and organisational security measures.
For all data protection enquiries, members may contact mbo99's data protection team via the contact channels set out in Section 15 of this policy.
When you create an mbo99 account, we collect the following information:
To comply with international anti-money-laundering (AML) and know-your-customer (KYC) obligations, mbo99 may collect:
When you make deposits or request withdrawals, mbo99 collects:
Full payment card numbers are never stored on mbo99 servers. Card processing, where applicable, is handled exclusively by PCI-DSS-compliant payment processors.
mbo99 records all betting and gaming activity on the Platform, including:
When you access the Platform, we automatically collect certain technical data, including:
When you contact mbo99 customer support via live chat, email, or WhatsApp, we retain records of those communications — including the content of messages, timestamps, and the identity of the support agent — for quality assurance, dispute resolution, and compliance purposes.
mbo99 collects Personal Data through the following means:
mbo99 uses the Personal Data it collects for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details, password hash |
| Age and identity verification (KYC) | Date of birth, KYC documents, facial comparison data |
| Processing deposits and withdrawals | Financial data, transaction records |
| Fraud detection and prevention | IP address, device data, transaction patterns, geolocation |
| AML compliance and regulatory reporting | KYC documents, transaction history, communications records |
| Customer support and dispute resolution | Communications data, account data, gameplay records |
| Responsible gaming monitoring | Gameplay data, session data, tool usage records |
| Platform analytics and improvement | Technical data, behavioural data (aggregated and anonymised where possible) |
| Marketing communications (with consent) | Contact details, betting preferences, promotional opt-in status |
| Legal compliance and enforcement of Terms | All categories as required by the applicable legal obligation |
mbo99 processes Personal Data on the following legal bases, consistent with internationally recognised data protection frameworks:
mbo99 shares Personal Data with the following categories of third-party Data Processors, under binding data processing agreements, solely to the extent necessary for the stated purpose:
mbo99 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful authority request. In such cases, mbo99 will disclose only the minimum data required and, where legally permissible, will notify the affected member in advance.
In the event of a merger, acquisition, or sale of all or part of mbo99's business assets, Personal Data held by mbo99 may be transferred to the acquiring entity as part of that transaction. Affected members will be notified by email prior to any such transfer, and the acquiring entity will be bound by data protection obligations no less protective than those in this policy.
No Data Sales. mbo99 does not sell, rent, or exchange member Personal Data with third-party advertisers, data brokers, or marketing networks under any circumstances.
mbo99 uses the following categories of cookies and similar tracking technologies on the Platform:
You may configure your browser to block or delete cookies at any time. Note that disabling essential cookies will prevent you from logging in or using core Platform features. Analytics and functional cookies may be disabled without affecting your ability to place bets or play games. mbo99 does not use third-party advertising cookies or behavioural profiling cookies for external ad networks.
mbo99 implements a layered security architecture to protect member Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
In the event of a data breach that poses a risk to member rights and freedoms, mbo99 will notify affected members and the relevant supervisory authority without undue delay and in accordance with applicable notification obligations.
mbo99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account + 5 years after permanent closure |
| KYC identity documents | 5 years from account closure or last transaction (AML requirement) |
| Financial transaction records | 5 years from the date of each transaction |
| Gameplay and betting history | 5 years from the date of each game session or bet |
| Customer support communications | 3 years from the date of the support interaction |
| Marketing consent records | Until consent is withdrawn, plus 1 year for audit purposes |
| Technical and device logs | 90 days for routine logs; up to 5 years where flagged for fraud investigation |
Where data is no longer required, mbo99 securely destroys or anonymises it in accordance with established data disposal procedures.
As an mbo99 member whose Personal Data is processed by mbo99, you hold the following rights. Requests may be submitted via the contact channels in Section 15 and will be responded to within 30 days:
Please note that some rights are subject to limitations. For example, mbo99 cannot erase transaction records that it is legally required to retain under AML regulations, even if you request deletion. In such cases, mbo99 will explain the applicable limitation in its response to your request.
The mbo99 Platform is strictly for adults aged 21 and above. mbo99 does not knowingly collect Personal Data from any person under the age of 21. If mbo99 discovers or has reasonable grounds to believe that a member is under 21, the Account will be suspended immediately and all data collected in connection with that Account will be reviewed. If the underage access is confirmed, the Account will be permanently closed, all data will be deleted to the extent legally permissible, and the matter may be referred to the appropriate authorities.
If you are a parent or guardian and believe that a minor has accessed the mbo99 Platform and provided Personal Data, please contact our support team immediately via live chat or at the email address in Section 15. We will take prompt corrective action.
21+ Only. mbo99 enforces a strict minimum age of 21 years. Age verification is conducted on all accounts. Any account confirmed to belong to a person under 21 will be closed without exception and relevant data handled in accordance with our underage access protocol.
mbo99's primary member base is in Indonesia, and the Platform is operated principally for Indonesian residents. However, certain Data Processors engaged by mbo99 — including cloud infrastructure providers, KYC verification services, and game studio technical platforms — may process data on servers located outside Indonesia.
Where Personal Data is transferred internationally, mbo99 ensures that appropriate safeguards are in place, which may include: contractual clauses that impose data protection obligations equivalent to those in this policy; transfers to jurisdictions recognised as providing an adequate level of data protection; or binding corporate rules where the recipient is part of a group subject to a group-wide data protection programme.
Members who wish to obtain more information about the specific safeguards applicable to any international transfer of their Personal Data may contact mbo99's data protection team via the contact details in Section 15.
mbo99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. When a material change is made, mbo99 will notify members by email to their registered address and/or by displaying a prominent notice on the Platform at least 14 days before the change takes effect.
The "Last updated" date at the top of this policy reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you must stop using the Platform and may request account closure by contacting support.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact mbo99's data protection team through any of the following channels:
When submitting a data subject rights request, please include your registered email address and a brief description of the request to allow our team to process it efficiently. We may request additional identity verification before actioning a request, to ensure we do not inadvertently disclose or alter another person's data.
Data subject rights requests are handled within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by up to an additional 60 days, in which case we will inform you of the extension and the reason within the initial 30-day window.
With your privacy commitments clearly understood, step into Indonesia's most complete online betting experience. BRI Liga 1 sportsbook, 190+ live casino tables, 3,000+ slot titles, and instant IDR withdrawals to BCA, BRI, BNI, Mandiri, OVO, DANA, and more. Adults only (21+). Please gamble responsibly.