Privacy Policy — mw69

This Privacy Policy applies to the mw69 online betting platform operated at mw69.cam and to all related services, mobile interfaces, and customer support channels provided by mw69. The platform is designed and operated primarily to serve Members who are residents of Indonesia, though it may be accessed from other jurisdictions where online gambling is not legally restricted.

For the purposes of applicable data protection law, mw69 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. We are responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

This policy does not apply to third-party websites, payment processors, or game studio platforms that may be linked to or integrated within the mw69 environment. Those third parties operate under their own privacy policies, and we encourage you to review those policies before sharing personal information with any third-party service.

The categories of personal data mw69 may collect from Members and platform visitors are summarised in the table below:

mw69 collects personal data through the following channels:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any form on the platform.
• Automated Collection: Technical and activity data gathered automatically when you access the mw69 platform, via server logs, session tracking, and device-fingerprinting technologies.
• Cookies and Similar Technologies: First-party cookies and local storage objects that maintain your session, remember your preferences, and support platform analytics. See Section 11 for full details.
• Third-Party Payment Processors: When you make a deposit via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja, the payment processor may share confirmation data (transaction ID, masked account reference) with mw69 to verify the transaction.
• Identity Verification Partners: Where mw69 engages a third-party KYC provider to verify the authenticity of submitted identity documents, that provider may process a copy of your identity data as a sub-processor acting on mw69's behalf.
• Fraud Detection Services: Automated risk-scoring sy stems may cross-reference your account data against known fraud indicators and shared industry blacklists to protect the platform and its Members.

mw69 processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual Necessity: Processing required to create and administer your mw69 account, process deposits and withdrawals, settle bets, and deliver the platform services you have requested under our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, fraud prevention obligations, and any lawful order from a competent authority.
• Legitimate Interests: Processing carried out for mw69's legitimate business interests, including platform security monitoring, fraud detection, responsible gaming controls, internal analytics, and service improvement — provided such interests are not overridden by your privacy rights.
• Consent: Processing for optional activities such as marketing communications and non-essential cookies, where we have obtained your prior express consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

mw69 uses the personal data we collect exclusively for the following defined purposes:

• Account Management: Creating, maintaining, and securing your mw69 Member account, including authentication and password recovery.
• Transaction Processing: Verifying, processing, and recording all deposits and withdrawals made through local Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification (KYC): Confirming that you are who you claim to be and that you meet the eligibility requirements set out in our Terms & Conditions — including the 21+ age requirement and Indonesian residency criteria.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, payment fraud, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns that may indicate problem gambling behaviour and enforcing self-exclusion, deposit limits, or time-out periods requested by Members or applied by mw69 under its player-protection obligations.
• Customer Support: Responding to queries, complaints, and account issues raised via live chat or email. Support transcripts are retained to improve service quality and as a record of dispute resolution.
• Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.
• Platform Improvement: Analysing aggregated and anonymised usage data to identify platform bugs, improve user experience, and develop new features.
• Marketing Communications (consent-based only): Sending promotional emails or SMS messages about bonuses, new games, and seasonal offers — exclusively to Members who have opted in. You may unsubscribe at any time via the link in any marketing email or by contacting support.

mw69 does not sell, rent, or trade your personal data to any third party. We may share your data in the following limited circumstances only:

All third-party processors engaged by mw69 are contractually required to process personal data only on mw69's documented instructions, to implement appropriate security measures, and to not engage additional sub-processors without prior written authorisation from mw69.

mw69 operates globally and some of our third-party service providers — including game studio infrastructure, cloud hosting providers, and KYC partners — may process your data on servers located outside of Indonesia. Where such transfers occur, mw69 ensures that adequate protections are in place through one or more of the following mechanisms:

• Data processing agreements incorporating standard contractual clauses that impose data protection obligations equivalent to those applicable in the originating jurisdiction.
• Transfers to recipients in countries that maintain adequacy determinations or recognised data protection frameworks.
• Additional technical security measures (encryption in transit and at rest) applied regardless of the destination jurisdiction.

You may request information about the specific safeguards applied to any particular international transfer by contacting our Data Protection Officer at the address listed in Section 14.

mw69 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

mw69 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and mw69 servers is protected using TLS 1.2 / 1.3 with 256-bit SSL certificates. Connections are enforced via HTTPS strict transport security (HSTS).
• Encryption at Rest: Sensitive personal data and financial records stored on mw69 infrastructure are encrypted using AES-256 at the database and file-system level.
• Access Controls: Access to Member data by mw69 staff is governed by role-based access control (RBAC). Only personnel with a documented operational need may access personal data, and all access is logged and audited.
• Penetration Testing: mw69 commissions independent security penetration tests of its platform infrastructure at least annually and remedies identified vulnerabilities on a risk-prioritised basis.
• Intrusion Detection: Automated intrusion detection systems (IDS) monitor platform traffic continuously for anomalous patterns indicative of attack or unauthorised access attempts.
• Staff Training: All mw69 staff with access to personal data receive mandatory data protection and security awareness training on joining and annually thereafter.
• Incident Response: mw69 maintains a documented data breach response plan. In the event of a confirmed breach affecting Member data, mw69 will notify affected Members and any relevant authorities within 72 hours of becoming aware of the incident, where technically and legally required.

As a Member of mw69, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or by email at support@mw69.cam. We will respond within 30 calendar days of receiving a valid request.

mw69 uses cookies and similar technologies (local storage, session storage) to operate the platform and improve your experience. The types of cookies we use are described below:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the mw69 platform. Disabling functional or analytics cookies will not affect your ability to place bets or access your account but may reduce personalisation features.

mw69 is strictly an adults-only platform. No person under the age of 21 years may register an account, deposit funds, or participate in any game or betting activity on the platform. This age restriction applies to all users regardless of jurisdiction.

mw69 does not knowingly collect personal data from individuals under 21 years of age. If mw69 discovers or is notified that personal data has been collected from a person below the minimum age, that account will be immediately suspended, all data associated with the account will be deleted within 14 days, and any deposited funds will be returned to the source account where technically feasible.

If you believe that a minor has registered an account on mw69, please contact our support team immediately via live chat or at support@mw69.cam. We will investigate all such reports as a matter of priority. Parents and guardians are encouraged to use parental control software to restrict access to gambling websites on shared devices.

mw69 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of our platform. Where changes are material — meaning they affect the type of data we collect, the purposes for which we use it, or your rights as a Member — we will notify you by email and/or by a prominent notice on the mw69 platform at least 14 days before the changes take effect.

For minor clarifications or corrections that do not substantively affect your rights, we may update this policy without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the mw69 platform after the effective date of any revision constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how mw69 processes your personal data, please contact us through the following channels. All privacy-related enquiries are handled by our Data Protection Officer (DPO).

• Live Chat: Available 24/7 directly within the mw69 platform — for urgent privacy concerns, please state "DATA PRIVACY" at the start of your message so the query is escalated immediately to the DPO team.
• Email: support@mw69.cam — please include "Privacy Policy Enquiry" in the subject line for fastest routing.
• Response Commitment: mw69 commits to acknowledging all privacy enquiries within 48 hours and to providing a substantive response within 30 calendar days of receiving a valid, verified request.