m8win Privacy Policy

This page describes what we collect when you use m8win and how we keep that data protected. We take privacy seriously because your account details, payment information, and betting history are sensitive. Our policy outlines what data we gather, who has access to it, how long we retain it, and what rights you have over your own information.

We operate m8win across multiple jurisdictions where applicable law permits. Some of our servers and processors sit outside Indonesia, which means your data may be stored or processed internationally. We apply the same protection standards regardless of location. You retain the right to request, review, correct, or delete your data at any time.

This privacy policy is binding between you and m8win. If you disagree with our practices, you may request account closure and full data deletion. We comply with such requests within 30 days of receipt.

What Data We Collect on m8win

When you register on m8win, we collect your email address, legal name, date of birth, and phone number. We use this to verify your identity and send account notifications. When you deposit, we record your payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the amount, and the timestamp. We do not store your full payment credentials—payment processors handle that securely.

For withdrawal verification, we request proof of identity (government-issued ID photo) and proof of address (utility bill or bank statement). We store these documents encrypted and delete them after 60 days if your account remains in good standing. If a dispute arises, we retain them for up to 180 days to investigate.

How We Use Your Data on m8win

We use your data for four primary purposes. First, account verification and compliance—we confirm your identity to prevent fraud and meet legal obligations in your jurisdiction. Second, payment processing—we share minimal data with payment processors to complete deposits and withdrawals. Third, service delivery—we track your session history, bet history, and spin outcomes so you can review your account activity. Fourth, support—when you contact us, we use your data to investigate issues and respond to requests.

We do not sell your data to third parties. We do not use your data for marketing unless you opt in. We do not profile you for predictive behaviour analysis. Our data use is confined to what you explicitly agree to in this policy and what operates your account.

Third-Party Processors and Data Sharing

We share limited data with third parties only to operate m8win. Payment processors (the companies behind mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your account email, name, and transaction amount—not your full credentials. Our server hosting provider stores all account data encrypted at rest. Our support platform stores your support tickets and contact details to resolve issues.

We do not share your data with advertisers, data brokers, or analytics companies outside our direct service chain. If legal authorities request your data (court order, subpoena), we comply within the bounds of applicable law and notify you unless legally prohibited.

Cookies and Tracking on m8win

Our platform uses cookies to maintain your login session and store your language preference. We use one functional cookie—m8win_session—which expires when you log out or after 30 days of inactivity. We do not set tracking cookies or third-party analytics pixels. We do not use cookies to build advertising profiles.

If you disable cookies, m8win may not function properly. Your browser controls cookie settings; you can clear them anytime. Clearing cookies will log you out of your m8win account.

Data Retention and Deletion

We retain your account data while your m8win account is active. Once you close your account, we retain core data (name, ID, betting history) for seven years to comply with financial and anti-fraud regulations. We delete personal contact details (email, phone) within 30 days of closure. If you request deletion before seven years, we anonymise your data instead—we remove identifying details but keep transaction records for audit purposes.

You may request a full data export at any time. We provide it in machine-readable format within 14 days. To request deletion or export, contact support through your m8win account.

Your Rights and m8win's Commitments

• 1
  Right to access your dataRequest

  You may request a full copy of all data we hold about you on m8win. We provide it within 14 days at no cost.

• 2
  Right to correct inaccurate dataUpdate

  If your name, email, or address is wrong on m8win, you may correct it. Contact support with proof of the correct information.

• 3
  Right to delete personal dataRemoval

  You may request deletion of non-transaction data. We delete personal details within 30 days but retain anonymised transaction records for regulatory reasons.

• 4
  Right to object to processingOpt-out

  If we use your data for purposes you disagree with (e.g. optional email newsletters), you may opt out. Core account processing cannot be objected to.

Our Security Commitments on m8win

We encrypt all data in transit (using HTTPS) and at rest (using AES-256 encryption). Our servers are protected by firewalls and intrusion detection. We do not store full payment credentials—payment processors handle that. We audit our security practices quarterly and respond to vulnerability reports within 48 hours.

We do not guarantee absolute security. If a breach occurs, we notify all affected users within 72 hours and report to relevant authorities. We maintain cyber insurance and incident response protocols. You are responsible for keeping your m8win password secure and logging out on shared devices.

International Data Transfer

m8win operates across multiple jurisdictions. Your data may be transferred to, stored in, or processed in countries other than Indonesia, including the European Union, Singapore, or the United States. These locations may have different data protection laws than Indonesia. By using m8win, you consent to such transfers. We apply consistent encryption and access controls regardless of storage location.

Contact and Requests

To exercise your rights, contact m8win support through your account dashboard. Include your account email, the type of request (access, correction, deletion, export), and any supporting documents. We respond to all requests within 14 days. If you dispute our response, you may escalate to your local data protection authority.

This privacy policy is effective as of today and may be updated periodically. We notify you of material changes via email. Continued use of m8win after a change means you accept the updated policy. If you have questions about how m8win handles your data during Liga 1, Piala Indonesia, Piala AFF tournaments, or any other platform activity, our support team can clarify.