Privacy Policy — mw68

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either directly (e.g., full name, national ID number) or indirectly (e.g., device ID combined with behavioural data).
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, transmission, restriction, erasure, or destruction.
• "Data Controller" means mw68, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of mw68 under a contractual data-processing agreement.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process required under our compliance framework before any withdrawal is released.
• "Platform" means the mw68 website, mobile web interface, and all associated betting, gaming, and account management services at https://mw68.cam.
• "Special Category Data" means sensitive Personal Data requiring enhanced protection, such as data revealing racial or ethnic origin, religious beliefs, health or financial vulnerability status. mw68 processes Special Category Data only to the extent required by responsible gaming and anti-money-laundering obligations, and only with appropriate safeguards in place.

mw68 is an internationally operated online betting and gaming platform accessible at https://mw68.cam. The platform is designed to serve English-preference players across Indonesia and operates as an offshore platform under an international gaming licence.

For the purposes of this Privacy Policy, mw68 acts as the Data Controller with respect to the personal data of its users. All privacy enquiries, data rights requests, and complaints should be directed to our Data Protection contact as described in Section 14 of this policy.

mw68 provides a full range of online betting and gaming services including football betting (covering BRI Liga 1, EPL, Champions League, and other international competitions), live casino, togel (Indonesia's traditional numbers lottery), sabung ayam (traditional cockfighting) streaming, slot gacor (high-payout slot games), crash games, and e-sports markets. Each of these product categories involves the same data-processing framework described in this policy.

mw68 collects personal data across several categories. The specific data points collected depend on how you interact with the platform — as a visitor, a registered player, or a player who has completed full KYC verification.

mw68 collects personal data through the following channels and mech anisms:

• Direct Collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Technical and behavioural data collected automatically as you interact with the platform, including through server logs, session tracking, and first-party cookies (see Section 7).
• Third-Party Sources: Identity verification data returned by our KYC provider after document and liveness checks; fraud-risk signals from our payment processing partners; geolocation data inferred from IP-address lookup services.
• Customer Support Interactions: Any personal data you share during Live Chat, email correspondence, or WhatsApp support sessions — including details you volunteer that were not explicitly requested.

mw68 processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process personal data and the legal basis that applies to each:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for marketing communications does not affect your ability to use the platform.

mw68 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals. These providers act as independent data controllers under their own privacy policies for the financial data they receive.
• KYC & Identity Verification Providers: Third-party identity verification services receive your identity documents and liveness data to perform age and identity checks. These providers operate under binding data-processing agreements with mw68 and are prohibited from using your data for any purpose beyond identity verification.
• Game Studios & Platform Providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Pocket Games Soft receive a pseudonymous player identifier and session data necessary to deliver the game experience. These partners do not receive your full identity or financial data.
• Fraud Prevention & AML Services: Specialised third-party services may receive transaction patterns and IP data to assist in detecting and preventing fraudulent activity, money laundering, and multi-accounting. Data shared for these purposes is protected by contractual confidentiality obligations.
• Legal & Regulatory Disclosure: mw68 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or our licensing obligations. We will notify affected users of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or asset sale involving mw68, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Affected users will be notified in advance of any such transfer.

mw68 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain session security, and understand how users interact with the platform. All cookies used by mw68 are first-party cookies unless explicitly stated otherwise.

The following categories of cookies are used on the mw68 platform:

• Strictly Necessary Cookies: Required for core platform functionality including session authentication, security token management, and fraud prevention. These cookies cannot be disabled without impairing your ability to use the platform. No consent is required for strictly necessary cookies.
• Functional Cookies: Store your preferences such as language settings, interface layout choices, and responsible gaming tool configurations. Disabling these cookies will not prevent platform access but may reduce personalisation.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the platform — pages visited, time on page, click paths — to help mw68 improve the user experience. These cookies do not identify you individually.
• Marketing / Retargeting Cookies: Used only where you have provided explicit consent. These cookies support the delivery of relevant promotional content. You may withdraw consent at any time via your Account Settings or by clearing your browser cookies.

You can manage cookie preferences through your browser settings. Note that blocking all cookies may prevent certain features of the mw68 platform from functioning as intended. For most browsers, cookie management instructions are available in the browser's help documentation.

mw68 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS. We enforce HTTPS across every page of the platform with HSTS headers to prevent protocol downgrade attacks.
• At-Rest Encryption: Personal data and financial records stored in our databases are encrypted at rest using AES-256 or equivalent standard.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Role-based access controls, multi-factor authentication, and comprehensive access logging are enforced for all mw68 staff and systems with access to personal data.
• Network Security: Our infrastructure is protected by web application firewalls (WAF), intrusion detection systems, DDoS mitigation, and regular penetration testing by independent security researchers.
• Incident Response: mw68 maintains a documented data breach response plan. In the event of a confirmed data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframe required by applicable law.

While mw68 takes comprehensive technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You share responsibility for account security by maintaining a strong, unique password and promptly reporting any suspected unauthorised access to your account.

mw68 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by our legal and compliance obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account's existence plus a minimum of 5 years post-closure for AML and regulatory record-keeping purposes.
• KYC Identity Documents: Retained for a minimum of 5 years from the date of account closure or the date of the last verified transaction, whichever is later, in accordance with standard anti-money-laundering obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Communications: Retained for 3 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or legal claim.
• Analytics and Technical Logs: Retained for up to 13 months in identifiable form, after which data is aggregated and anonymised.
• Marketing Consent Records: Retained for the duration of consent plus 3 years as evidence of the consent decision.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

Subject to applicable law, you hold the following rights with respect to your personal data held by mw68. To exercise any of these rights, contact us as described in Section 14. We will respond to verified requests within 30 days:

• Right of Access: You may request a copy of the personal data mw68 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For basic account information, you can update many fields directly via Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain records for AML and regulatory compliance purposes.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on consent or contract performance and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest grounds, including profiling. You may also object to direct marketing at any time without providing justification.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

mw68 is strictly an adults-only platform. Access to and use of the platform is prohibited for any person under the age of 21. mw68 does not knowingly collect, process, or retain any personal data from individuals under 21 years of age.

Where mw68 discovers or has reasonable grounds to believe that an account is being operated by a person under 21, the account will be immediately suspended, all associated personal data will be securely deleted to the extent permitted by law, and any funds in the account will be handled in accordance with our responsible gaming and compliance procedures.

If you are a parent or guardian and believe that your child may have accessed or registered on the mw68 platform, please contact us immediately at [email protected]. We will investigate and take prompt remedial action.

mw68 is an offshore platform operating internationally. As a result, your personal data may be transferred to and stored on servers located in jurisdictions outside Indonesia. Where such transfers occur, mw68 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy.

Safeguards used for international data transfers may include:

• Standard contractual clauses (SCCs) incorporated into agreements with international Data Processors.
• Adequacy decisions where the receiving jurisdiction is recognised as offering an equivalent level of data protection.
• Binding corporate rules where data is transferred within a group of companies operating under a common privacy framework.

You may request details of the safeguards in place for specific international transfers by contacting us as described in Section 14.

mw68 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or platform services. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Where feasible, send a notification to your registered email address summarising the key changes.
• Display a prominent notice on the platform for a period of at least 7 days following the update.

Your continued use of the mw68 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this page periodically to stay informed of how your data is protected. Historical versions of this Privacy Policy are available on request by contacting our support team.

For any privacy-related enquiry, data rights request, or complaint regarding mw68's handling of your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] — use the subject line "Privacy Request — [Your Account ID]" for fastest routing to our compliance team.
• Live Chat: Available 24/7 via the in-platform chat widget. For data rights requests, please also follow up in writing by email.
• Response Time: We aim to acknowledge all privacy requests within 24 hours and provide a substantive response within 30 days. Complex requests may require up to 60 days, in which case we will notify you of the extension.

If you believe that mw68 has not adequately addressed your privacy concern, you have the right to escalate your complaint to a relevant supervisory authority or data protection regulator in your jurisdiction. mw68 commits to cooperating fully with any such regulatory enquiry.