Privacy Policy — mr8888

mr8888 is an internationally operated online betting and casino platform serving English-preference players across Indonesia. We understand that the players who use our platform — whether depositing via BCA, BRI, BNI, or Mandiri, funding with USDT, or placing wagers on BRI Liga 1 matches or live casino tables — place significant trust in us when they share their personal information. We take that responsibility seriously.

This Privacy Policy is designed to give you a clear, honest, and complete picture of our data practices. It covers every stage of the data lifecycle: what we collect, why we collect it, how long we keep it, who we share it with, and what controls you have over your own information. We have written this policy in plain English to ensure it is accessible and understandable, without sacrificing legal accuracy.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to how your data may be used in connection with account management and player protection obligations.

mr8888 acts as the data controller for all personal information processed under this policy. We are responsible for deciding how and why your data is processed, and we are accountable for ensuring those practices comply with applicable international data protection standards.

mr8888 collects only the personal data that is necessary to deliver our services, comply with our legal and regulatory obligations, and protect the integrity of the platform. The categories of data we collect are described below:

2.1 Registration Data

When you create an mr8888 account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address in Indonesia (city, province, postal code)
• Email address
• Mobile phone number (Indonesian format — used for account verification and security alerts)
• Username and hashed password

2.2 Identity Verification (KYC) Data

When Know Your Customer (KYC) verification is triggered, we may additionally collect:

• Photograph or scan of a government-issued ID (Indonesian KTP, Passport, or SIM driving license)
• Proof of residential address document (utility bill, bank statement, or official government document issued within the past 90 days)
• Proof of payment method ownership (bank account screenshot, e-wallet account details)
• Selfie photograph for liveness verification, where required

2.3 Financial Transaction Data

For every deposit and withdrawal, we record:

• Transaction amount (in IDR or cryptocurrency equivalent)
• Payment method used (e.g., BCA, BRI, GoPay, OVO, USDT wallet address)
• Transaction timestamps and reference numbers
• Running account balance history

2.4 Gameplay and Betting Data

We record all betting activity on the platform, including:

• Wagers placed, game types accessed, and bet outcomes
• Session start and end times, session duration
• Game preferences, bonus usage, and promotional participation records

2.5 Technical and Device Data

When you access mr8888, our systems automatically record:

• IP address (used for geolocation, fraud detection, and responsible gaming monitoring)
• Device type, operating system version, and browser type
• Referring URL (how you arrived at mr8888.cam)
• Pages visited, clicks, and navigation patterns within the platform
• Cookie identifiers (see Section 7)

2.6 Communications Data

When you contact our support team via live chat, email, or WhatsApp, we retain:

• The content and timestamp of your messages
• The channel used and agent responses
• Any attachments you submit (e.g., KYC documents sent via support channels)

mr8888 collects personal data through the following mechanisms:

Collection Method	Description
Direct Submission	Information you provide when registering an account, completing KYC, submitting a support request, or participating in a promotion.
Automated Technical Collection	Device, browser, and IP data collected automatically by our servers and analytics systems each time you access the platform.
Cookies & Tracking Technologies	First-party cookies placed on your device to maintain your session, remember preferences, and analyze platform usage patterns.
Payment Providers	Transaction confirmation data received from payment processors handling BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency transactions.
KYC Verification Partners	Identity verification results and risk scores returned by certified third-party KYC providers during the document verification process.
Game Studio Providers	Anonymized session data returned by game studio APIs (Pragmatic Play, Evolution Gaming, Spribe, etc.) to populate your game history and resolve dispute cases.

mr8888 uses the personal data we collect for the following specific purposes:

• Account Management: Creating and maintaining your account, processing login requests, and providing access to platform features.
• Identity and Age Verification: Confirming that you are a real person, at least 21 years of age, and a resident of Indonesia — as required by our responsible gaming commitments and platform eligibility rules.
• Payment Processing: Facilitating deposits and withdrawals via your chosen Indonesian bank account, e-wallet, or cryptocurrency wallet, and maintaining accurate financial records.
• Fraud Prevention and Security: Detecting and preventing unauthorized account access, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling behavior, enforcing self-exclusion requests and deposit limits, and triggering welfare checks where appropriate.
• Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support interactions.
• Platform Improvement: Analyzing aggregated, anonymized usage data to identify technical issues, optimize the user experience, and develop new product features.
• Legal Compliance: Meeting our obligations under applicable international anti-money-laundering (AML) regulations, data protection frameworks, and our operating license conditions.
• Promotional Communications: Sending you personalized bonus offers, platform updates, and promotional news — but only if you have actively opted in to marketing communications.

mr8888 processes your personal data under one or more of the following legal bases, in accordance with internationally recognized data protection principles:

Legal Basis	When It Applies
Contractual Necessity	Processing required to perform the contract between you and mr8888 — account registration, deposit/withdrawal processing, game access, and customer support.
Legitimate Interests	Fraud detection, platform security, abuse prevention, and aggregated analytics that improve the platform for all players — where those interests are not overridden by your data rights.
Legal Obligation	KYC/AML compliance, responsible gaming monitoring, and record retention required by our international operating license and applicable financial regulations.
Consent	Sending marketing and promotional communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

mr8888 does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share data only in the following strictly defined circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processors handling transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency networks.
• KYC verification providers who authenticate identity documents and perform liveness checks.
• Game studio API partners including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — who receive session tokens to deliver game content and return game results.
• Cloud infrastructure and cybersecurity providers who host our platform and protect it against technical threats.
• Customer support tooling providers who power our live chat and ticketing systems.

All service providers are contractually prohibited from using your data for any purpose beyond the specific service they are engaged to deliver.

6.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so — for example, in connection with an anti-money-laundering investigation, a court order, or a regulatory audit. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of mr8888's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via a platform announcement if your data is transferred in this manner, and the acquiring entity will be bound by this Privacy Policy or a policy of equivalent standard.

mr8888 uses first-party cookies and similar tracking technologies to operate the platform, maintain your session, and analyze usage patterns. We do not use third-party advertising cookies or cross-site tracking technologies.

The cookies we use fall into the following categories:

Cookie Type	Purpose	Duration	Can Be Disabled?
Strictly Necessary	Maintain your logged-in session, protect against CSRF attacks, enforce security policies.	Session / up to 24 hours	No — required for platform function
Functional	Remember your language preference, last-visited game category, and display settings.	Up to 90 days	Yes — disabling may reduce comfort
Analytics	Collect anonymized data on page visits, feature usage, and error rates to improve the platform.	Up to 12 months	Yes — opt out via account settings
Responsible Gaming	Track session duration on-device to power reality-check notifications and session time limit enforcement.	Session	No — required for player protection

You can manage browser-level cookie settings through your browser's privacy preferences. Note that disabling strictly necessary cookies will prevent you from logging in to the platform.

mr8888 is an internationally operated platform. Your personal data may be stored and processed on servers located outside Indonesia, in the jurisdiction where mr8888 holds its international operating license, and in the data center locations used by our cloud infrastructure providers.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Binding contractual clauses requiring recipient entities to protect your data to a standard equivalent to this policy.
• Selection of cloud infrastructure providers that hold internationally recognized security certifications (ISO 27001, SOC 2 Type II).
• Data minimization in transit — only the data necessary for a specific cross-border processing purpose is transferred.

By using the mr8888 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence.

mr8888 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by our regulatory and contractual obligations. The following retention schedules apply:

Data Category	Retention Period	Basis
Account Registration Data	Duration of account + 5 years post-closure	AML regulatory requirement
KYC Documents	5 years from date of verification	International AML standards
Financial Transaction Records	7 years from transaction date	Financial record-keeping obligation
Gameplay and Betting Logs	3 years from session date	Dispute resolution and responsible gaming
Support Communications	2 years from last interaction	Quality assurance and dispute resolution
Marketing Consent Records	3 years from consent or withdrawal	Consent management compliance
Analytics Data (anonymized)	Up to 24 months (fully anonymized)	Platform improvement — not linked to individuals

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data (which cannot be linked back to any individual) may be retained indefinitely for statistical and research purposes.

mr8888 respects your rights over your personal data. Subject to applicable law and our regulatory obligations, you have the following rights:

To exercise any of the above rights, please contact our Data Privacy team at [email protected] (plain text — not a clickable link). We will acknowledge your request within 3 business days and provide a substantive response within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for the delay.

mr8888 is strictly an adults-only platform. We do not knowingly collect, store, or process personal data belonging to any individual under the age of 21. Our registration process includes mandatory date-of-birth verification and KYC age-check procedures specifically designed to identify and prevent underage access.

If you are a parent or guardian and believe that a person under your care has registered an account or provided personal data to mr8888, please contact our support team immediately at [email protected]. We will investigate the matter promptly and, where confirmed, close the account and delete all associated personal data within 72 hours.

mr8888 implements a multi-layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser or app and our servers is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols. Look for the padlock icon in your browser's address bar when accessing mr8888.cam.
• Encryption at Rest: Sensitive personal data fields — including identity document scans, financial records, and KYC data — are encrypted at rest in our database using AES-256 encryption.
• Password Hashing: Your account password is never stored in plain text. We use a modern adaptive hashing algorithm (bcrypt with a high work factor) so that even in the event of a database compromise, your password remains protected.
• Two-Factor Authentication (2FA): We strongly encourage all players to enable 2FA on their accounts. 2FA adds an additional layer of security by requiring a time-based one-time password (TOTP) in addition to your regular credentials at login.
• Access Controls: Access to personal data within mr8888's internal systems is restricted on a strict need-to-know basis. Staff access is logged, and privileged access undergoes regular review and audit.
• Penetration Testing: mr8888's platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Fraud Detection Systems: Our real-time fraud detection systems monitor login patterns, transaction behavior, and device fingerprints to identify and block suspicious activity before it affects your account.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, mr8888 will notify affected players without undue delay and no later than 72 hours after becoming aware of the breach.

The mr8888 platform may occasionally reference or display the names of third-party organizations — such as game studio providers (Pragmatic Play, Evolution Gaming), payment networks (USDT, DANA), or sporting bodies (BRI Liga 1, FIFA) — in a purely informational context. These references do not constitute external hyperlinks, and mr8888 does not link outbound to any third-party website from its platform pages.

If you independently navigate to any third-party website, please be aware that mr8888 has no control over the content, privacy practices, or data-handling policies of those sites. We strongly recommend reviewing the privacy policy of any third-party site you visit. mr8888 accepts no responsibility or liability for the privacy practices of any third-party operator.

mr8888 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data practices, changes in applicable law or regulatory requirements, new product features that involve data processing, or recommendations from data protection authorities.

When we make changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• For material changes that significantly affect your data rights or our processing activities, provide at least 7 days' advance notice via a platform notification or email to your registered address.
• Maintain an archive of previous policy versions, available on request by contacting our support team.

Your continued use of the mr8888 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should cease using the platform and request account closure prior to the amendment's effective date.

If you have any questions, concerns, or complaints about this Privacy Policy or mr8888's data practices, please reach out to us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for faster routing to our Data Privacy team.
• Live Chat: Available directly on the platform, 24 hours a day, 7 days a week. Our Indonesian-speaking support agents are trained to handle data privacy inquiries and can escalate to the Data Privacy team where required.
• WhatsApp Support: Available 09:00–23:00 WIB (Western Indonesia Time, UTC+7). Suitable for general privacy questions; formal data rights requests should be submitted via email for a full documented response.

mr8888 aims to acknowledge all privacy-related written inquiries within 3 business days and to provide a substantive response within 30 calendar days. For complex requests (such as a full data subject access request involving multiple years of account history), we may extend the response period by a further 30 days, in which case we will notify you promptly.

If you are unsatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction governing our international operating license.