mbah barong Privacy Policy

This page describes what we collect when you use mbah barong and how we keep that data protected. We take your privacy seriously and follow standard industry practices for encryption, access controls, and third-party processor oversight. By opening an account on mbah barong, you consent to the data collection and handling practices outlined here.

We collect personal information—your name, email, phone number, date of birth, address, and government ID—during account registration and identity verification. We also collect transaction data: deposits, withdrawals, game entries, and results. This information helps us prevent fraud, comply with anti-money-laundering law, settle disputes, and improve our service. We do not sell your personal data to third parties, and we do not share it except where legally required or where a third party helps us process payments or verify your identity.

Our servers may sit outside your jurisdiction. Your data may be transferred to Indonesia or other countries where we process payments, store backups, or operate fraud-detection systems. We apply the same security standards to overseas data as we do to data stored locally. This policy covers all data collected through our website, mobile app, and customer support channels.

What We Collect and How We Use It

Account Registration and Identity Data

When you open an mbah barong account, we ask for your email address, full name, date of birth, and phone number. This information lets us create your account, send you transaction confirmations, and contact you if we detect suspicious activity. Before your first withdrawal, we collect your government-issued photo ID (passport, national ID, or driver's license) and proof of address (utility bill or bank statement dated within the last three months). We use this identity data to verify that you are who you claim to be and to comply with regulations in jurisdictions where we operate.

We store your ID copy and address proof on secure servers for a minimum of five years after your account closes (or longer if required by local law). We do not share these documents with third parties unless a regulator, law enforcement agency, or court orders us to do so. If you want to see what documents we hold about you, contact our support team and we'll provide a copy within five business days.

Transaction and Gaming Data

Every time you deposit funds into your mbah barong account, we record the deposit method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer), the amount, and the timestamp. When you place a bet or enter a game, we store the details: amount, game type, outcome, and your balance before and after. Withdrawal requests are logged with the withdrawal method, amount, timestamp, and confirmation status. This transaction history helps us detect fraud, settle disputes with accuracy, and let you review your activity anytime.

Device and Behavior Data

Our mobile app and website collect information about your device—operating system, browser type, IP address, and approximate location (based on IP). We use this data to detect unauthorized access attempts, prevent fraud, and understand which devices our users prefer. We also log which games you play, which tournaments you follow, and roughly how long you spend on each activity. This helps us improve our app performance and highlight the games and markets that matter most to users in Jakarta, Surabaya, Bandung, Medan, and Semarang.

We do not use device data to track you across other websites or build a detailed profile of your behavior outside mbah barong. Our analytics focus only on your activity within our platform.

Our Data Protection and Third-Party Practices

Third-Party Processors and Payment Partners

We work with payment processors to handle deposits and withdrawals. When you transfer funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), those payment networks see your transaction. We pass only the minimum data needed: your account identifier, amount, and transaction type. We do not share your full personal data with payment processors—they see only what's required to move your money.

We also use third-party identity-verification services to confirm your ID and address during KYC. These services see your ID copy and proof of address, process the verification, and return a confirmation to us. They are contractually bound not to share your data with anyone else or use it for their own purposes.

Data Retention and Deletion

We keep your account data for as long as your account is active plus a minimum of five years after closure (or longer if required by law). This retention window allows us to handle late-arriving disputes and comply with regulatory audit windows. After the retention period expires, we delete your personal data from our primary servers, though we may retain encrypted or anonymized copies for backup purposes.

If you request account deletion before the retention period ends, we will close your account and stop using your data for any purpose except legal compliance. You can request deletion by contacting our support team. We will confirm closure within two business days.

Cookies and Tracking Technologies

We use cookies on our website to remember your login status, language preference, and theme choice. These cookies help our platform work better and let you stay logged in across sessions. We do not use cookies to track you across other websites. Our app uses similar local-storage methods to keep your settings and session active.

Third-party analytics services (like Google Analytics) may place cookies on your device to track how you use our site. These services operate independently and have their own privacy policies. You can opt out of third-party tracking through your browser settings or by using privacy extensions.

Your Rights and Contact

You have the right to request a copy of all personal data we hold about you. Contact our support team via email or live chat with "Data Subject Access Request" in the subject line, and we will provide your data within five business days. You also have the right to request corrections to inaccurate data—for instance, if your registered address is outdated, we will update it.

If you believe we are handling your data incorrectly or violating this policy, contact our support team. We investigate all privacy complaints within 10 business days and will explain our findings. If you remain unsatisfied, you may have the right to lodge a complaint with your local data protection authority.

We review this policy annually and update it as our practices evolve. Changes take effect when posted on this page. Your continued use of mbah barong after policy changes constitutes acceptance of the updated terms.