mvp97 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all users of the mvp97 platform, including visitors to our website, registered account holders, and anyone who interacts with our services. It covers personal data collected through our website at https://mvp97.cam, mobile applications, customer support channels, and any other touchpoints where mvp97 collects information.

mvp97 operates as an internationally-licensed online betting platform serving Indonesian residents. We process personal data in accordance with applicable international data protection regulations, including principles aligned with the General Data Protection Regulation (GDPR) and other recognized privacy frameworks. Our data processing activities are conducted with lawful basis, transparency, and respect for user rights.

This policy should be read in conjunction with our Terms & Conditions. If you have questions about how we handle your data, please contact our Data Protection Officer at the email address provided at the end of this document.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account on mvp97, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (Indonesian KTP number, passport number, or driver's license number).
• Contact Information: Email address, mobile phone number, residential address, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history.
• Verification Documents: Copies of identity documents (KTP, passport, SIM), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes.
• Communication Data: Messages sent through our live chat, email correspondence, phone call recordings, and any other communications with our customer support team.

2.2 Information Collected Automatically

When you use the mvp97 platform, we automatically collect certain technical and behavioral data:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, clickstream data, search queries, betting activity (games played, bets placed, outcomes), login times, and session duration.
• Location Data: Approximate geographic location derived from your IP address to verify compliance with jurisdictional restrictions.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience, remember preferences, and analyze platform performance. See Section 9 for detailed cookie information.

2.3 Information from Third Parties

In limited circumstances, mvp97 may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers to verify deposits and process withdrawals.
• Identity Verification Services: Age verification and identity authentication data from specialized KYC service providers.
• Fraud Prevention Agencies: Information related to fraud detection, risk assessment, and security screening.
• Publicly Available Sources: Information from public records or databases to verify your identity or comply with legal obligations.

3. How We Use Your Information

mvp97 processes your personal data for the following purposes, each with a lawful basis under data protection law:

4. Data Sharing and Disclosure

mvp97 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients when necessary:

4.1 Service Providers

We engage trusted third-party service providers to support our operations:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process transactions.
• KYC and Identity Verification Vendors: Specialized services that verify age, identity, and address using government databases and biometric technology.
• Cloud Hosting Providers: Data centers and cloud infrastructure providers that store our systems and databases securely.
• Customer Support Software: Live chat, ticketing, and CRM platforms used to manage customer communications.
• Fraud Prevention Services: Anti-fraud and security specialists who analyze transactions for suspicious activity.
• Marketing and Analytics Tools: Email service providers and analytics platforms (used only with appropriate data protection safeguards).

All third-party service providers are contractually bound to process your data only as instructed by mvp97, maintain strict confidentiality, and implement appropriate security measures.

4.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement, regulatory bodies, courts, or government agencies when:

• Required by law, court order, subpoena, or other legal process.
• Necessary to comply with anti-money laundering (AML), counter-terrorism financing (CTF), or other regulatory obligations.
• Requested by licensing authorities or gambling regulators as part of compliance audits.
• Needed to protect our legal rights, property, or the safety of our users or others.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity as part of the business transaction. You will be notified of any such change in ownership or control of your data.

5. Data Security Measures

mvp97 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is protected using SSL/TLS 256-bit encryption. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized employees and contractors who require it for specific job functions. Role-based access controls and multi-factor authentication are enforced.
• Secure Infrastructure: Our servers are hosted in tier-4 data centers with physical security controls, redundant power supplies, fire suppression systems, and 24/7 monitoring.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and third-party security audits to identify and remediate potential weaknesses.
• Data Minimization: We collect only the personal data necessary for specific purposes and delete or anonymize data that is no longer needed.
• Incident Response: We maintain a formal data breach response plan. In the event of a security incident affecting your data, we will notify you and relevant authorities as required by law.

While we implement industry-leading security practices, no method of electronic transmission or storage is 100% secure. Users are responsible for maintaining the confidentiality of their account passwords and should immediately report any suspected unauthorized access.

6. Data Retention

mvp97 retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes. Our retention periods are based on the following criteria:

• Active Accounts: Personal data is retained throughout the duration of your active account relationship with mvp97.
• Closed Accounts: After voluntary account closure, most personal data is deleted within 90 days, except where longer retention is required by law (e.g., financial transaction records retained for 7 years for tax and anti-money laundering compliance).
• Self-Excluded Accounts: Data for self-excluded users is retained for the duration of the exclusion period to enforce the restriction.
• Verification Documents: Identity documents (KTP copies, selfies) are retained for up to 7 years after account closure to comply with regulatory requirements.
• Communication Records: Customer support chat logs, emails, and phone recordings are retained for up to 3 years for quality assurance and dispute resolution.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to prevent future marketing.

7. Your Privacy Rights

As a user of mvp97, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly-used format within 30 days of your request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose. Note that legal obligations may prevent us from deleting certain data (e.g., financial records).
• Right to Restriction of Processing: You can request that we temporarily restrict processing of your data in specific situations, such as while we verify the accuracy of contested information.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time (e.g., unsubscribe from marketing emails). Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you may lodge a complaint with a relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 12 below. We will respond to your request within 30 days.

8. International Data Transfers

mvp97 operates internationally, and your personal data may be transferred to, stored in, and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Indonesian standards.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by data protection authorities.
• Verification that the recipient country has adequate data protection laws recognized by international standards.
• Binding corporate rules for transfers within our corporate group.

By using mvp97 services, you consent to the international transfer of your data as described in this policy.

9. Cookies and Tracking Technologies

mvp97 uses cookies and similar technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, such as maintaining your login session, processing transactions, and remembering your preferences. These cannot be disabled.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with the platform and identify areas for improvement.
• Functionality Cookies: Remember your language preference, display settings, and other customization choices.
• Targeting/Advertising Cookies: Used to deliver relevant promotional offers based on your interests and activity (only with your consent).

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impair platform functionality and prevent you from accessing certain features. For more information on managing cookies, consult your browser's help documentation.

10. Children's Privacy

mvp97 services are strictly for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child has provided personal information to mvp97 should contact us immediately.

11. Changes to This Privacy Policy

mvp97 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that affect your rights, we will notify you by email or through a prominent notice on our platform. The "Last Updated" date at the bottom of this policy indicates when the most recent changes were made. Your continued use of mvp97 after policy updates constitutes acceptance of the revised terms.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing activities, please contact us:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the mvp97 platform

We are committed to resolving privacy concerns promptly and transparently. All inquiries will receive a response within 30 days.