mt996 Privacy Policy

Introduction

mt996 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the mt996 platform at mt996.vip. This Privacy Policy describes how mt996 collects, processes, stores, shares, and protects personal information in connection with the operation of our online gaming and sports betting services, with particular reference to our primary user base in Indonesia.

This Privacy Policy forms an integral part of the mt996 Terms & Conditions and should be read in conjunction with that document. By registering an account or continuing to use the mt996 platform, you acknowledge that you have read, understood, and agreed to the practices described in this policy.

We take a data-minimisation approach: we collect only what is genuinely necessary to deliver a safe, compliant, and high-quality gaming experience. We do not build advertising profiles, sell your information to data brokers, or share your details with third parties beyond the narrow purposes described in Section 7 of this policy.

Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly, including name, date of birth, email address, device identifiers, and financial account numbers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" means mt996, the entity that determines the purposes and means of processing Personal Data collected via the mt996 platform.
• "Data Processor" means any third-party service provider engaged by mt996 that processes Personal Data on mt996's behalf (e.g., payment processors, KYC verification providers, cloud infrastructure providers).
• "User" / "You" means any individual who accesses the mt996 platform, whether or not they hold a registered account.
• "KYC" means Know Your Customer — the identity and age verification process required before mt996 may process withdrawal requests or where unusual account activity is detected.
• "Cookies" means small text files placed on your Device by the mt996 platform to maintain session state, detect fraud, and measure platform performance.
• "IDR / Rp" means Indonesian Rupiah, the official currency of Indonesia and the sole transactional currency on the mt996 platform.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone used for all timestamps within mt996 systems.

Data We Collect

mt996 collects the following categories of personal data, grouped by their origin and purpose:

2.1 Registration Data. When you create an mt996 account, we collect: full legal name, date of birth, Indonesian residential address, email address, and a chosen username. This data is required to establish your account identity and confirm eligibility (21+ residents of Indonesia).

2.2 Identity Verification (KYC) Data. Prior to processing withdrawal requests, mt996 requests identity documents including: a scanned copy of a government-issued photo ID (Indonesian KTP, SIM, or passport), proof of address (utility bill or bank statement dated within three months), and proof of payment method ownership. Where required, a selfie or liveness-check image may also be requested.

2.3 Financial & Transaction Data. We record all deposit and withdrawal transactions associated with your account, including: transaction amounts in IDR, timestamps (WIB), payment method used (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja), and transaction reference codes. We do not store full bank account credentials; payment authentication occurs directly through your chosen bank or e-wallet provider.

2.4 Gaming & Behavioural Data. We record your wagering activity on mt996, including: game sessions played (slots, live casino, sportsbook, crash games, Andar Bahar), bet amounts, outcomes, bonus usage, session duration, and responsible gaming tool interactions (deposit limits set, time-out activations, self-exclusion requests).

2.5 Technical & Device Data. When you access mt996, our systems automatically collect: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and session timestamps. This data is used for fraud detection, platform security, and performance optimisation.

2.6 Communications Data. If you contact mt996 support via email or live chat, we retain a record of your communications, including the content of messages and any attachments, for quality assurance and complaint resolution purposes.

How We Collect Data

mt996 collects personal data through the following channels:

• Directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request, or interact with responsible gaming tools.
• Automatically via server logs, session cookies, and device fingerprinting technology when you access or navigate the mt996 platform. This includes data collected each time a page is loaded, a game is launched, or a wager is placed.
• From third-party service providers where their output forms part of our fraud-prevention or compliance obligations — for example, receiving identity-verification results from our KYC partner after you submit documents, or receiving transaction-status confirmations from payment processors such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja.

How We Use Your Data

mt996 uses the personal data described in Section 2 for the following specific purposes:

• Account management: Creating, maintaining, and administering your mt996 account, including processing login authentication, managing session security, and handling account closure or suspension requests.
• Identity & age verification: Confirming that you meet the 21+ age requirement and that your identity matches the payment methods associated with your account, in line with our KYC obligations.
• Payment processing: Facilitating IDR deposits and withdrawals via Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining accurate financial records.
• Service delivery: Providing access to all mt996 gaming products including sportsbook markets, live casino tables, slots, crash games, and Andar Bahar sessions, as well as administering bonuses and VIP programme benefits.
• Fraud prevention & platform security: Detecting and preventing unauthorized account access, multi-accounting, bonus abuse, money laundering, and other prohibited activities described in our Terms & Conditions.
• Responsible gaming: Monitoring wagering patterns to identify potential indicators of problem gambling and facilitating the operation of responsible gaming tools including deposit limits, time-outs, and self-exclusion.
• Legal & regulatory compliance: Retaining records as required under applicable international gaming regulations and responding to lawful requests from regulatory, law enforcement, or judicial authorities.
• Customer support: Responding to your enquiries, resolving disputes, and processing account-related requests submitted through our support channels.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, reliability, and user experience of the mt996 platform.
• Promotional communications: Sending you information about mt996 bonuses, promotions, and seasonal offers (such as Idul Fitri, Ramadhan, and Indonesian Independence Day campaigns) where you have consented to receive such communications or where we have a legitimate interest in doing so as an existing customer. You may opt out of promotional communications at any time by contacting support.

Legal Basis for Processing

mt996 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary for the performance of your account agreement with mt996 — including account registration, payment processing, game access, and KYC verification.
• Legal obligation: Processing required for mt996 to comply with applicable international gaming regulations, anti-money laundering obligations, and responses to lawful authority requests.
• Legitimate interests: Processing that serves mt996's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics.
• Consent: Where you have provided explicit consent — specifically, for the sending of promotional communications beyond the scope of service-related messages. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing

mt996 does not sell your personal data. We share personal data only in the following specific and limited circumstances:

• Payment processors: We share the minimum transaction data necessary with your chosen payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja) to facilitate your deposit or withdrawal. Each provider operates under its own privacy policy and security standards.
• KYC and identity verification partners: We engage accredited third-party identity verification providers to process KYC document checks on our behalf. These providers act as Data Processors under contractual data-processing agreements with mt996 and may not use your data for any purpose other than identity verification.
• Game studios: Live casino and certain slot games are delivered by third-party studios including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe. These providers receive the session token and stake data necessary to operate each game. No additional personal data is transferred beyond what is technically required.
• Cloud infrastructure providers: mt996 uses reputable cloud service providers to host its platform infrastructure. These providers store and transmit data on our behalf under data-processing agreements and are bound by strict confidentiality obligations.
• Fraud prevention and security services: We may share device and behavioural data with fraud-detection service providers to identify and prevent suspicious activity across the platform.
• Legal and regulatory authorities: mt996 may disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory instruction. We will notify you of any such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of mt996's assets, personal data held by mt996 may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the acquirer.

Cookies & Tracking Technologies

mt996 uses cookies and similar tracking technologies to operate the platform securely and efficiently. The following cookie categories are deployed on the mt996 platform:

mt996 does not deploy third-party advertising cookies, social media tracking pixels, or behavioural retargeting technologies. You may configure your browser to block or delete cookies; however, disabling essential cookies will impair your ability to log in and use the platform.

Data Retention

mt996 retains personal data only for as long as is necessary to fulfil the purposes described in this policy or to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active period plus five (5) years following permanent account closure, to satisfy financial record-keeping and anti-money laundering compliance requirements.
• KYC documents: Retained for five (5) years from the date of submission or from account closure, whichever is later, in accordance with standard international gaming compliance obligations.
• Transaction records: Retained for seven (7) years in line with internationally accepted financial record-keeping standards applicable to gaming operators.
• Support communications: Retained for two (2) years from the date of the final message in each support thread, unless the communication forms part of an active dispute or compliance investigation.
• Technical and device logs: Retained for ninety (90) days for routine security monitoring purposes. Logs associated with confirmed fraud investigations may be retained for longer pending resolution.
• Anonymised analytics data: May be retained indefinitely, as it cannot be used to identify any individual user.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction techniques. You may request early deletion of your personal data under the conditions described in Section 9 (Your Rights) of this policy.

Your Rights

As a User of the mt996 platform, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact our support team using the details in Section 14. mt996 will respond to all valid requests within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data mt996 holds about you, together with information about how and why it is being processed.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that mt996 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing has been unlawful. This right is subject to overriding legal obligations — we may be required to retain certain data (e.g., transaction records, KYC documents) for mandatory retention periods notwithstanding an erasure request.
• Right to Restriction of Processing: You have the right to request that mt996 pause the processing of your personal data in specified circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to mt996 in a structured, commonly used, machine-readable format (e.g., JSON or CSV), and to request that this data be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where mt996 relies on legitimate interests as its legal basis. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where mt996 processes your data on the basis of your consent (e.g., for promotional communications), you may withdraw that consent at any time by contacting support or by following the opt-out instructions in any marketing email you receive from mt996.

Security Measures

mt996 implements a layered information security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption: All personal and financial data is encrypted at rest using AES-256. All data in transit between your device and the mt996 platform is protected by TLS 1.3 with HSTS enforced to prevent protocol downgrade attacks.
• Access controls: Access to personal data within mt996 systems is governed by role-based access controls (RBAC). Staff access to KYC documents and financial records is limited to authorised compliance and finance personnel and is subject to audit logging.
• Two-factor authentication (2FA): mt996 strongly recommends that all users enable 2FA on their accounts. Internal mt996 staff systems require 2FA for all access to production environments containing personal data.
• Penetration testing: The mt996 platform undergoes periodic third-party penetration testing and vulnerability assessments. Critical and high-severity findings are remediated within defined SLA windows.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, mt996 will notify affected users within 72 hours of becoming aware of the breach, and will provide guidance on steps you can take to protect yourself.

While mt996 implements industry-standard security controls, no digital system is entirely immune to risk. You are also responsible for maintaining the security of your account by choosing a strong, unique password and never sharing your login credentials with another person.

Minors & Age Verification

The mt996 platform is strictly an adults-only service. You must be at least 21 years of age to register an account or participate in any wagering activity on mt996. This age restriction is higher than the statutory majority age of 18 in many jurisdictions, reflecting mt996's commitment to responsible gaming for its Indonesian user base.

mt996 does not knowingly collect personal data from any individual under the age of 21. If we discover or have reason to believe that an account has been registered by a minor, we will immediately suspend the account, void any associated transactions or winnings, and securely delete all personal data associated with that account as promptly as operationally possible.

If you are a parent or guardian and believe that a person under 21 has registered an mt996 account using personal details within your household, please contact us immediately at the address in Section 14. We will investigate and resolve the matter as a priority.

International Data Transfers

mt996's primary user base is located in Indonesia, and we take reasonable steps to process and store personal data within or close to that geography where operationally feasible. However, as an internationally operated online gaming platform, certain technical operations — including cloud infrastructure hosting, fraud detection services, and KYC verification — may involve the transfer of personal data to service providers located outside Indonesia.

Where personal data is transferred internationally, mt996 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to those applied within Indonesia. These safeguards may include:

• Contractual clauses in data-processing agreements with international service providers that impose obligations equivalent to those in this Privacy Policy.
• Restriction of international data transfers to providers certified under internationally recognised security frameworks (e.g., ISO 27001, SOC 2 Type II).
• Technical controls — including encryption in transit and at rest — that apply regardless of the geographic location of the processing infrastructure.

Changes to This Privacy Policy

mt996 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered account holders by email at the address associated with their account and will display a prominent notice on the mt996 platform for a minimum of seven (7) days prior to the revised policy taking effect.

The "Last Updated" date displayed at the top of this page will be updated each time the policy is revised. Your continued use of the mt996 platform after the effective date of any revision constitutes your acceptance of the updated policy. If you do not agree with a material change, you may close your account and request deletion of your personal data in accordance with Section 9.

We encourage you to review this Privacy Policy periodically to remain informed about how mt996 protects your personal data. Archived versions of prior policies are available on request by contacting our support team.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights described in Section 9, or wish to raise a complaint about the way mt996 has handled your personal data, please contact our dedicated privacy support team:

When submitting a data subject rights request, please include the following information to help us locate your records and verify your identity efficiently:

• Your full registered name and mt996 account username.
• The email address associated with your mt996 account.
• A clear description of the right you wish to exercise or the nature of your complaint.
• Your preferred contact method for our response.

If you are not satisfied with the outcome of a privacy complaint after engaging with our internal process, you may escalate your complaint to the relevant data protection authority or seek independent legal advice in your jurisdiction.