At mwin66, protecting the personal data of our players is a foundational commitment, not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and processed, who it may be shared with, and what rights you hold as a data subject. We encourage you to read this document fully before registering an account.
Every decision mwin66 makes about data handling is guided by six core commitments to our players.
mwin66 collects only the data that is strictly necessary for account management, identity verification, payment processing, fraud prevention, and service improvement. We do not collect data speculatively or for purposes not disclosed in this Policy.
We apply the principle of minimum necessary data at every collection point. Where a service can be delivered with anonymized or aggregated data rather than personal identifiers, we default to the less invasive approach.
All personal data stored by mwin66 is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Access to personal data within mwin66's systems is restricted to authorized personnel on a need-to-know basis.
mwin66 does not sell, rent, or trade your personal data to third parties for any commercial purpose, including advertising networks, data brokers, or marketing affiliates. Your data is not a product we monetize.
You retain meaningful rights over your personal data at all times — including the right to access, correct, port, restrict processing, and in certain circumstances request deletion. See Section 8 for details on exercising these rights.
This Privacy Policy is written in plain English, updated whenever our data practices change, and made permanently accessible on this page. We notify registered players of material changes by email before they take effect.
1.1 Controller Identity. The data controller responsible for your personal data under this Privacy Policy is mwin66, the operator of the online gaming platform accessible at https://mwin66.cam. References to "mwin66", "we", "us", or "our" in this Policy refer to the mwin66 operating entity.
1.2 Applicable Data Subjects. This Policy applies to: (a) registered players and account holders; (b) individuals who have begun but not completed the registration process; (c) visitors to the mwin66 website who have not registered but whose browsing data is collected via cookies and analytics tools; and (d) individuals who contact mwin66 via email, live chat, or other support channels.
1.3 Geographic Scope. mwin66 primarily serves players based in Indonesia. Indonesian players are subject to this Policy in full. mwin66 acknowledges the data protection standards expected under Indonesian regulatory frameworks and applies data handling practices consistent with internationally recognized data protection principles.
1.4 Relationship to Terms & Conditions. This Privacy Policy is incorporated by reference into the mwin66 Terms & Conditions. Accepting the Terms & Conditions constitutes acceptance of this Privacy Policy. In the event of any conflict between the two documents on a matter of data privacy, this Privacy Policy shall prevail.
mwin66 collects the following categories of personal data, depending on how you interact with the platform:
| Data Category | Specific Data Points | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID number (KTP / passport / driver's license) | Registration, KYC verification |
| Contact Data | Email address, mobile number, residential address (province, city, postal code — Indonesia) | Registration, profile updates |
| Financial Data | Bank account holder name, bank name (BCA, BRI, BNI, Mandiri, etc.), account number, e-wallet username/ID (OVO, DANA, GoPay, ShopeePay), transaction history, deposit amounts, withdrawal requests | Deposit/withdrawal processing, payment verification |
| Gaming Data | Betting history, game choices, win/loss records, bonus usage, wagering patterns, session duration, favorite games, togel number selections, sports betting preferences | Automatic during platform use |
| Technical Data | IP address, browser type, operating system, device type, screen resolution, referral source, clickstream data, page views, session timestamps | Automatic via server logs and cookies |
| Authentication Data | Username, password hash (encrypted), security questions/answers, two-factor authentication settings, login history | Registration, account security setup |
| Communication Data | Support chat transcripts, email correspondence, complaint records, feedback submissions, responsible gaming inquiries | Live chat, email support, contact forms |
| Verification Documents | Scanned/photographed copies of government ID, bank statements, utility bills (proof of address), selfie holding ID (liveness check) | KYC submission portal |
2.1 Special Category Data. mwin66 does not intentionally collect special category personal data (also known as sensitive personal data) such as health records, biometric identifiers, religious beliefs, political opinions, or sexual orientation. The sole exception is date of birth (which indirectly reveals age), collected solely for the purpose of enforcing the mandatory 21+ age requirement for online gambling in Indonesia.
3.1 Direct Collection. Most personal data is provided directly by you when you:
3.2 Automatic Collection. Certain data is collected automatically via technical means when you access or use the mwin66 platform, including:
3.3 Third-Party Sources. In limited cases, mwin66 receives personal data from third parties:
mwin66 processes personal data on the following lawful bases under internationally recognized data protection principles:
4.1 Contractual Necessity. Processing your identity, contact, financial, and gaming data is necessary for mwin66 to perform its contractual obligations to you under the Terms & Conditions — specifically, to create and maintain your account, process deposits and withdrawals, deliver gaming services, and settle bets.
4.2 Legal Obligation. mwin66 processes certain personal data to comply with legal and regulatory obligations, including:
4.3 Legitimate Interest. mwin66 has a legitimate business interest in processing personal data for:
4.4 Consent. Where mwin66 processes personal data on the basis of consent, such consent is freely given, specific, informed, and revocable. Examples include:
mwin66 uses the personal data we collect for the following purposes:
5.1 Automated Decision-Making. mwin66 employs limited automated decision-making (including profiling) in the following contexts:
You have the right to request human intervention in any automated decision that produces legal effects or similarly significantly affects you. See Section 8 for details on exercising this right.
mwin66 does not sell your personal data to third parties for marketing purposes. However, we do share personal data with selected third-party service providers under strict contractual controls to enable service delivery:
6.1 Payment Processors. When you deposit or withdraw funds, your financial data (account holder name, bank account number, transaction amount) is shared with our licensed payment processing partners who facilitate transfers to/from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and other payment channels. These processors are bound by data processing agreements and are prohibited from using your data for any purpose other than executing the requested transaction.
6.2 Identity Verification Providers. KYC document submissions (government ID, proof of address) are transmitted to licensed identity verification agencies who validate document authenticity and cross-check data against official databases. These agencies retain your data only for the duration necessary to complete verification and are subject to the same confidentiality standards as mwin66.
6.3 Gaming Platform Providers. When you play casino games or place sports bets, minimal session data (player ID, bet amount, game round ID) is transmitted to licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and odds providers. These providers do not receive your identity, contact, or financial data.
6.4 Cloud Infrastructure Providers. mwin66 hosts its platform on enterprise-grade cloud infrastructure. Encrypted personal data resides on secure servers managed by reputable cloud service providers. These providers have no access to the encryption keys and cannot decrypt player data.
6.5 Customer Support Tools. Live chat transcripts and support ticket data may be stored in third-party customer relationship management (CRM) systems. Access is restricted to authorized mwin66 support personnel only.
6.6 Legal and Regulatory Disclosure. mwin66 may disclose personal data to government authorities, law enforcement agencies, courts, or regulatory bodies when:
6.7 No Data Broker Sales. mwin66 does not share, sell, rent, or trade your personal data to data brokers, advertising networks, or third-party marketers. You will never receive unsolicited marketing from a third party as a result of mwin66 disclosing your contact information.
mwin66 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Profile Data | Active account + 5 years post-closure | Contractual obligation, legal defense, AML compliance |
| Transaction Records | 7 years from transaction date | Financial audit, tax compliance, AML record-keeping requirements |
| KYC Documents | 5 years post account closure | Regulatory requirement under AML/CTF legislation |
| Gaming History | Active account + 3 years post-closure | Dispute resolution, game fairness audits, responsible gaming monitoring |
| Support Communications | 3 years from last contact | Customer service quality assurance, complaint resolution |
| Marketing Consent Records | Until consent withdrawn + 1 year | Proof of lawful marketing basis |
| Server Logs (IP, timestamps) | 90 days | Security monitoring, fraud investigation (anonymized after 90 days) |
7.1 Anonymization After Retention Period. Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymized (stripped of all identifiers) such that it can no longer be attributed to you as an individual. Anonymized data may be retained indefinitely for statistical and research purposes.
7.2 Self-Exclusion Records Exception. If you have invoked self-exclusion or have been excluded due to problem gambling, mwin66 retains your exclusion record indefinitely to prevent account re-registration and to honor the exclusion commitment.
As a data subject, you hold the following rights in respect of your personal data processed by mwin66:
Request a copy of all personal data mwin66 holds about you, delivered in a structured, commonly used format (e.g., PDF, CSV).
Request correction of inaccurate or incomplete personal data held in your account profile.
Request deletion of your personal data where there is no legal basis for continued retention (subject to exceptions for legal obligations).
Request that mwin66 cease processing your personal data for certain purposes while retaining it on our systems.
Receive your personal data in a machine-readable format and transmit it to another service provider without hindrance.
Object to processing based on legitimate interest or direct marketing. mwin66 will cease processing unless compelling legitimate grounds exist.
Request human intervention in any automated decision (profiling, fraud detection, bonus eligibility) that significantly affects you.
Withdraw consent for marketing communications or optional cookies at any time without affecting the lawfulness of prior processing.
8.1 Exercising Your Rights. To exercise any of the rights listed above, contact mwin66's Data Protection Officer at [email protected] (plain text — not clickable) with the subject line "Privacy Rights Request". Include your registered account email and specify which right you wish to invoke. mwin66 will respond within thirty (30) days of receipt of a valid request. In complex cases, this period may be extended by up to sixty (60) additional days with prior notification.
8.2 Identity Verification for Requests. To protect your privacy, mwin66 will verify your identity before fulfilling any data access or erasure request. You may be required to provide a copy of your government ID or answer security questions to confirm account ownership.
8.3 Limitations on Rights. Certain rights are subject to legal exceptions. For example, mwin66 cannot delete personal data if retention is required by law (e.g., AML transaction records must be retained for 7 years). Where a request cannot be fulfilled in full, mwin66 will explain the limitation and what has been done.
9.1 What Are Cookies. Cookies are small text files placed on your device by websites you visit. They enable the website to remember your actions and preferences (such as login status, language selection, and theme settings) over a period of time.
9.2 Types of Cookies mwin66 Uses:
9.3 Managing Cookie Preferences. Upon your first visit to mwin66, a cookie consent banner will appear allowing you to accept or decline optional cookies. You can change your cookie preferences at any time via the "Cookie Settings" link in the footer of every page. Note that disabling certain cookies may limit your ability to use some platform features.
9.4 Third-Party Cookies. mwin66 does not permit third-party advertising networks or tracking pixels on the platform. The only third-party cookies present are those set by licensed game studios (Pragmatic Play, Evolution Gaming) when you launch a game, and these are session-only cookies required for game functionality.
mwin66 implements technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure:
11.1 21+ Only. mwin66's services are available only to individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal data from persons under 21. By registering an account, you represent and warrant that you are 21 years of age or older.
11.2 Age Verification. mwin66 employs age verification checks at registration and at the point of first withdrawal. Players are required to submit government-issued identification (Indonesian National ID / KTP, passport, or driver's license) showing their date of birth as part of the mandatory KYC process.
11.3 Detection & Remediation. If mwin66 becomes aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the account, void all wagers, confiscate any balances (in accordance with anti-money laundering requirements), and delete the associated personal data. Parents or guardians who believe their child has registered an account on mwin66 should contact us immediately at [email protected].
11.4 Parental Responsibility. We strongly encourage parents and guardians to monitor their children's internet usage and employ parental control software to prevent access to gambling sites. Do not allow minors to use your payment credentials or access your mwin66 account under any circumstances.
12.1 Transfer Context. mwin66 primarily serves players located in Indonesia. However, some of our third-party service providers (cloud infrastructure, identity verification agencies, payment processors) operate servers or facilities located outside Indonesia. This may result in your personal data being transferred to, and processed in, jurisdictions outside Indonesia.
12.2 Safeguards. Where personal data is transferred internationally, mwin66 ensures that adequate safeguards are in place, including:
12.3 Player Consent. By accepting this Privacy Policy, you consent to the transfer of your personal data outside Indonesia under the safeguards described above. If you do not consent to international transfers, you should not register an account with mwin66.
13.1 mwin66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or service features. Material changes will be communicated to registered players via email notification to the address on file at least fourteen (14) days before the revised Policy takes effect.
13.2 The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this Privacy Policy periodically. Your continued use of mwin66 after a revised Privacy Policy becomes effective constitutes acceptance of the changes. If you do not accept a revised Privacy Policy, you must close your account before the effective date.
13.3 Non-material changes (clarifications, formatting improvements, correction of typographical errors) may be made without prior notice.
For any questions, concerns, or requests relating to this Privacy Policy or mwin66's data protection practices, please contact our Data Protection Officer:
When contacting us about a data protection matter, please include your registered account email address and a clear description of your inquiry or request. For data subject rights requests (access, erasure, portability, etc.), please specify which right you are invoking and provide any necessary supporting information.
Our Data Protection Officer is available to answer any questions about how mwin66 collects, uses, and protects your personal information. Explore our other policy pages or reach out directly for personalized support.