Your privacy matters to us. This Privacy Policy explains exactly what personal data mbak4 collects from members across Indonesia, how that data is used, who it is shared with, how long it is retained, and what rights you have over your own information. We are committed to transparency and to handling your data with the care it deserves.
All data transmitted between your device and mbak4's servers is protected by industry-standard 256-bit SSL encryption, the same technology used by major international banks.
mbak4 never sells, rents, or trades your personal information to third-party marketing companies or data brokers. Your data is used solely to operate and improve our Services.
You have the right to access, correct, export, or request deletion of your personal data at any time by contacting our support team. We process all data requests within 30 days.
We retain personal data only as long as necessary for legal, compliance, and operational purposes. Account data is deleted or anonymized within 6 years of account closure.
mbak4 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who uses the mbak4 platform at https://mbak4.app (the "Platform"). This Privacy Policy describes our practices regarding the collection, storage, use, disclosure, and protection of personal information provided by members and visitors based primarily in Indonesia.
This Privacy Policy is incorporated by reference into the mbak4 Terms & Conditions and should be read alongside that document. By registering an account, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
We take our data protection obligations seriously and apply internationally recognised privacy principles to everything we do, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.
This Privacy Policy is written in English. If there is any inconsistency between an English version and any translated summary, the English version shall prevail in all respects.
For the purposes of applicable data protection law, the data controller responsible for your personal information is the operator of the mbak4 Platform. As the data controller, mbak4 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is lawful, fair, and transparent.
If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights, please contact our Data Protection team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.
mbak4 collects personal data that is necessary to provide our Services, comply with our legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:
Full legal name, date of birth, nationality, and government-issued identification details (such as your KTP — Kartu Tanda Penduduk — Indonesian National Identity Card number, SIM driving licence number, or passport number and expiry date). This data is collected as part of our Know Your Customer (KYC) verification process.
Residential address in Indonesia (including city, province, and postal code), email address, and mobile phone number. Contact data is used to communicate with you about your account, transactions, promotions, and support enquiries.
Your chosen username, encrypted password, account registration date, account status, membership tier, preferences and settings, session history, and any voluntary profile information you choose to provide.
Bank account details (bank name such as BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, BSI, or Bank Permata; account number; and account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account numbers linked to your registered mobile number), deposit and withdrawal transaction records, and wallet balance history. We do not store full payment card numbers on our systems.
Records of all deposits, withdrawals, bets placed, games played, bonus credits claimed and wagered, winnings, and any refunds or adjustments made to your account. Transaction data is retained for a minimum of 6 years from the date of the transaction to satisfy our anti-money laundering (AML) and compliance obligations.
IP address, device type and operating system, browser type and version, screen resolution, unique device identifiers, mobile network information, time zone setting, and referring URL. This data is collected automatically when you access the Platform.
Information about how you use the Platform, including pages visited, features accessed, games launched, session duration, click-stream data, search queries entered, and in-app navigation patterns. Usage data helps us improve the Platform experience and identify technical issues.
Records of communications between you and mbak4 customer support, including live chat transcripts, email correspondence, and support ticket records. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
Your stated preferences regarding receipt of promotional communications from mbak4, including whether you have opted in to or out of email newsletters, SMS promotions, and push notifications.
mbak4 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for responsible gaming self-exclusion purposes, in which case such data is processed with your explicit consent.
mbak4 collects your personal data through the following channels and mechanisms:
mbak4 uses your personal data for the following purposes, each underpinned by a lawful basis described in Section 6:
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your mbak4 account | Identity, Contact, Account |
| Processing deposits, withdrawals, and bet settlements | Financial, Transaction, Identity |
| KYC identity and age verification (21+ compliance) | Identity, Contact, Financial |
| Detecting and preventing fraud, money laundering, and abuse | Identity, Technical, Financial, Transaction |
| Providing customer support and resolving disputes | Identity, Account, Communications, Transaction |
| Personalising your Platform experience and game recommendations | Usage, Account, Transaction |
| Sending you promotional offers and bonus notifications (with your consent) | Contact, Marketing Preferences |
| Responsible gaming monitoring and intervention | Transaction, Usage, Account |
| Fulfilling legal, regulatory, and licensing obligations | Identity, Financial, Transaction, Communications |
| Platform security, maintenance, and improvement | Technical, Usage |
mbak4 processes your personal data on one or more of the following lawful bases, consistent with internationally recognised data protection principles:
Where mbak4 relies on legitimate interests as a lawful basis, we have conducted a balancing test to confirm that our interests are not overridden by your fundamental rights. You may request a copy of our legitimate interests assessment by contacting [email protected].
mbak4 does not sell, rent, or trade your personal data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:
We engage carefully selected third-party service providers who process personal data on our behalf under written data processing agreements. These include KYC verification providers, payment processors (including connections to Indonesian banks and e-wallet networks), cloud infrastructure providers, customer support platform providers, fraud detection services, and game content providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft). All service providers are contractually required to protect your data and process it only as instructed by mbak4.
mbak4 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so — for example, in response to a valid court order, regulatory investigation, or AML reporting obligation. We will notify you of such disclosures where permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or part of mbak4's business, your personal data may be transferred to the relevant acquiring entity as part of that transaction. We will notify you in advance of any such transfer and of any material change in data processing practices that results from it.
Where you voluntarily enrol in a self-exclusion programme or request that your information be shared with a recognised gambling harm prevention service, mbak4 may share limited identity data with that service to give effect to your exclusion request.
mbak4 may share personal data with lawyers, auditors, accountants, and insurers in the context of obtaining professional advice, subject to obligations of confidentiality.
As an internationally licensed platform, mbak4's infrastructure and some of our service providers operate outside Indonesia. When your personal data is transferred to, stored in, or processed in a country other than Indonesia, we take steps to ensure that an adequate level of protection is applied to your data, including:
For more information about the safeguards applied to any specific international transfer of your data, please contact us at [email protected].
mbak4 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and improve the overall experience. The following types of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — session management, authentication, security tokens, load balancing | Session / up to 24 hours |
| Functional | Remember your preferences such as language, currency display (IDR), time zone (WIB), and game lobby settings | Up to 12 months |
| Analytics | Collect anonymised usage statistics to help us understand how members navigate and use the Platform | Up to 24 months |
| Marketing | Track which promotional campaigns led to your registration or deposit so we can measure marketing effectiveness (only with your consent) | Up to 30 days |
Strictly necessary cookies cannot be disabled as they are essential to Platform operation. You may manage or disable functional, analytics, and marketing cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. Most modern browsers allow you to view, manage, and delete cookies via their privacy or settings menus.
mbak4 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory, and contractual obligations. The following general retention schedule applies:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where deletion is not technically feasible (for example, data stored in encrypted backup systems), we isolate the data from further processing until deletion is possible.
mbak4 employs a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
While we implement industry-leading security measures, no online platform can guarantee absolute security. You also play an important role in protecting your account — use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.
Subject to applicable law and certain exceptions, you have the following rights with respect to your personal data held by mbak4:
You have the right to request a copy of the personal data mbak4 holds about you, along with information about how that data is used and who it has been shared with. We will provide this information within 30 calendar days of receiving your verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update many details directly in your account settings; for KYC data, please contact our support team.
You may request that mbak4 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you believe the data has been processed unlawfully. Please note that we may be required to retain certain data for legal and regulatory compliance purposes even after an erasure request.
In certain circumstances, you may request that mbak4 restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
You have the right to object to processing of your personal data where mbak4 relies on legitimate interests as its lawful basis. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
mbak4 may use automated systems to detect fraud, verify identity, and assess responsible gaming risk. Where a purely automated decision produces a legal or similarly significant effect on you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. All requests are handled free of charge unless they are manifestly unfounded or excessive.
The mbak4 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. All registration flows include mandatory age verification, and KYC procedures require submission of a government-issued ID confirming date of birth.
If mbak4 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by law, and return any deposits to the originating payment method where technically possible.
If you believe that a minor has registered an account on the mbak4 Platform, please notify us immediately at [email protected]. We take underage gambling prevention extremely seriously and will act on all credible reports within 24 hours.
The mbak4 Platform integrates with a number of third-party services to deliver game content, process payments, and support platform operations. These third parties — including game studios such as Evolution Gaming, Pragmatic Play, Spribe, and Pocket Games Soft, as well as payment networks serving Indonesian members (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) — operate under their own privacy policies and data protection practices.
mbak4 is not responsible for the privacy practices of third-party service providers beyond the contractual data protection obligations we impose on them as data processors. We encourage you to review the privacy policies of any third-party service with which you interact directly, including your bank or e-wallet provider, when making payments through the Platform.
The mbak4 Platform does not contain links to external websites other than those strictly necessary for payment processing and regulatory compliance. Where any such link exists, it is clearly identified, and mbak4 accepts no responsibility for the content or privacy practices of the linked destination.
mbak4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Services, legal obligations, or applicable regulation. When we make material changes, we will notify registered members via their registered email address and display a prominent notice on the Platform at least 7 calendar days before the updated policy takes effect.
Non-material clarifications or corrections (such as fixing typographical errors or improving the clarity of existing descriptions without changing their substance) may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must cease using the Platform and close your account before the amendment takes effect.
If you have any questions, concerns, or complaints about this Privacy Policy or about how mbak4 processes your personal data, please contact our Data Protection team using the details below:
If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to seek resolution through the dispute resolution mechanism specified in our Terms & Conditions.
For responsible gaming concerns or to request self-exclusion, please visit our Responsible Gaming page or contact support directly. For general platform questions, our FAQ page covers the most common member enquiries.
Beyond the legal requirements, here is what mbak4 actively does to respect and protect your personal information every day.
All sensitive data — including KYC documents, financial identifiers, and account credentials — is stored using AES-256 encryption. Even in the unlikely event of a server breach, your data remains unreadable without the encryption keys.
mbak4 collects only the personal data genuinely required to operate our Services and meet our compliance obligations. We do not collect data speculatively or build demographic profiles for third-party advertising purposes.
You can unsubscribe from all mbak4 promotional emails, SMS messages, and push notifications at any time — either via the unsubscribe link in any marketing message, directly in your account settings, or by contacting our support team.
Our data processing activities are reviewed at least annually to ensure ongoing compliance with our privacy obligations and to identify any areas where we can further strengthen data protection. Audit findings drive continuous improvement.
Every mbak4 team member who handles member data completes mandatory privacy training before accessing any personal information. Our data protection standards apply equally to permanent staff, contractors, and third-party service providers.
In the event of a data security incident that poses a risk to your personal information, mbak4 will notify affected members within 72 hours — or sooner where possible — with clear information about what happened and what steps to take.
Our support team is available 24/7 to answer any questions about how mbak4 handles your personal data. You can also explore our FAQ or review our full Terms & Conditions for more detail.
Adults only (21+). Please gamble responsibly.